chore: update dependencies

Author: VChet

.github/workflows/build.yaml

@@ -11,21 +11,23 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+
+      - name: Install Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version: "24"
 
       - name: Install pnpm
-        uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         with:
-          version: latest
           run_install: true
+          cache: true
 
-      - name: Install Node.js
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
-        with:
-          node-version: "24"
-          cache: pnpm
+        - name: Audit dependencies
+        run: pnpm audit --prod --audit-level=high
 
-      - name: Run linter
+      - name: Run linters
         run: pnpm run lint:all
 
       - name: Run build

.github/workflows/release.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Generate Changelog
         id: release_notes
@@ -18,7 +18,7 @@ jobs:
           version: ${{ github.ref }}
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
         with:
           tag_name: ${{ github.ref_name }}
           body: ${{ steps.release_notes.outputs.release_notes }}

.ncurc.yaml

@@ -0,0 +1,5 @@
+enginesNode: true
+format: repo
+reject:
+  - pnpm
+  - eslint # https://github.com/neostandard/neostandard/issues/350

package.json

@@ -4,6 +4,7 @@
   "description": "Userscript that minimizes messages containing words from the list",
   "author": "VChet",
   "license": "MIT",
+  "packageManager": "pnpm@10.34.4",
   "type": "module",
   "homepage": "https://github.com/VChet/telegram-ad-filter#readme",
   "repository": {
@@ -24,14 +25,14 @@
     "release": "npm run lint:all && commit-and-tag-version"
   },
   "devDependencies": {
-    "@types/node": "^24.10.1",
+    "@types/node": "^26.0.1",
     "@types/tampermonkey": "^5.0.5",
-    "commit-and-tag-version": "^12.6.1",
-    "eslint": "^9.39.1",
+    "commit-and-tag-version": "^12.7.3",
+    "eslint": "~9.39.4",
     "eslint-plugin-userscripts": "^0.5.6",
-    "neostandard": "^0.12.2",
-    "tsdown": "^0.17.0",
-    "typescript": "^5.9.3"
+    "neostandard": "^0.13.0",
+    "tsdown": "^0.22.3",
+    "typescript": "^6.0.3"
   },
   "pnpm": {
     "overrides": {
@@ -43,12 +44,16 @@
       "es-iterator-helpers": "npm:@nolyfill/es-iterator-helpers@^1",
       "hasown": "npm:@nolyfill/hasown@^1",
       "is-core-module": "npm:@nolyfill/is-core-module@^1",
+      "isarray": "npm:@nolyfill/isarray@^1",
+      "object-keys": "npm:@nolyfill/object-keys@^1",
       "object.assign": "npm:@nolyfill/object.assign@^1",
       "object.entries": "npm:@nolyfill/object.entries@^1",
       "object.fromentries": "npm:@nolyfill/object.fromentries@^1",
       "object.values": "npm:@nolyfill/object.values@^1",
+      "safe-buffer": "npm:@nolyfill/safe-buffer@^1",
       "string.prototype.matchall": "npm:@nolyfill/string.prototype.matchall@^1",
-      "string.prototype.repeat": "npm:@nolyfill/string.prototype.repeat@^1"
+      "string.prototype.repeat": "npm:@nolyfill/string.prototype.repeat@^1",
+      "typedarray": "npm:@nolyfill/typedarray@^1"
     }
   }
 }