Merge pull request #91 from watany-dev/claude/add-ci-checks-mzhvM

Author: watany-dev

.github/workflows/ci.yml

@@ -9,6 +9,23 @@ on:
 permissions: {}
 
 jobs:
+  actions-lint:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
+
+      - name: actionlint
+        shell: bash
+        run: bash <(curl -sSL https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash) && ./actionlint -color
+
+      - name: zizmor
+        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        with:
+          min-severity: informational
   lint:
     runs-on: ubuntu-latest
     permissions:

.github/workflows/publish.yml

@@ -21,11 +21,11 @@ jobs:
 
       - name: Extract tag version
         id: tag
-        run: echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
+        run: echo "version=${GITHUB_REF#refs/tags/v}" >> "$GITHUB_OUTPUT"
 
       - name: Read package.json version
         id: package
-        run: echo "version=$(jq -r '.version' package.json)" >> $GITHUB_OUTPUT
+        run: echo "version=$(jq -r '.version' package.json)" >> "$GITHUB_OUTPUT"
 
       - name: Validate version match
         env:

bun.lock

@@ -73,7 +73,7 @@
   },
   "license": "MIT",
   "overrides": {
-    "fast-xml-parser": ">=5.3.8",
+    "fast-xml-parser": ">=5.5.7",
     "rollup": ">=4.59.0"
   },
   "dependencies": {}