chore: update GitHub Actions to latest versions and bump minor dependencies (#132)

## Summary
- Update GitHub Actions to latest versions (`actions/checkout@v6`,
`actions/create-github-app-token@v3`, `ncipollo/release-action@v1.21.0`)
- Move release notes generation before npm publish in release workflow
- Add `fetch-depth: 0` and `fetch-tags: true` to release checkout for
pre-release changelog generation
- Simplify publish-docs ref to use `github.ref_name` directly
- Bump minor dependencies: `@biomejs/biome`, `@tanstack/vite-config`,
`memfs`, `vite`

Author: nikosxenakis

.github/workflows/audit.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
 
       - name: Setup PNPM
         uses: dfinity/ci-tools/actions/setup-pnpm@main

.github/workflows/codestyle.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
 
       - name: Setup PNPM
         uses: dfinity/ci-tools/actions/setup-pnpm@main

.github/workflows/create-release-pr.yml

@@ -22,14 +22,14 @@ jobs:
       contents: write
     steps:
       - name: Create GitHub App Token
-        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+        uses: actions/create-github-app-token@v3
         id: generate_token
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
           private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
 
       - name: Checkout Code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/publish-docs.yml

@@ -24,7 +24,7 @@ jobs:
     environment: release
     steps:
       - name: Create GitHub App Token
-        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
+        uses: actions/create-github-app-token@v3
         id: generate_token
         with:
           app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
@@ -33,7 +33,7 @@ jobs:
           repositories: icp-js-sdk-docs
 
       - name: Checkout source at ref
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.ref }}
 
@@ -74,7 +74,7 @@ jobs:
         run: pnpm build
 
       - name: Checkout icp-pages branch
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
         with:
           ref: icp-pages
           path: icp-pages

.github/workflows/release.yml

@@ -16,7 +16,6 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       is_beta: ${{ steps.is_beta.outputs.is_beta_tag }}
-      major_minor_patch_version_tag: ${{ steps.ver.outputs.major_minor_patch_version_tag }}
     environment:
       name: release
       url: https://www.npmjs.com/package/@icp-sdk/bindgen
@@ -25,7 +24,10 @@ jobs:
       id-token: write
     steps:
       - name: Checkout Code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          fetch-tags: true
 
       - name: Setup Python
         uses: dfinity/ci-tools/actions/setup-python@main
@@ -43,17 +45,12 @@ jobs:
         id: is_beta
         uses: dfinity/ci-tools/actions/is-beta-tag@main
 
-      - uses: dfinity/ci-tools/actions/extract-version@main
-        id: extract-version
-
-      - name: Prepare version
-        id: ver
-        run: |
-          echo "major_minor_patch_version_tag=${{ steps.extract-version.outputs.major }}.${{ steps.extract-version.outputs.minor }}.${{ steps.extract-version.outputs.patch }}" >> $GITHUB_OUTPUT
-
       - name: Build NPM package
         run: pnpm build
 
+      - name: Generate release notes
+        uses: dfinity/ci-tools/actions/generate-release-notes@main
+
       - name: Publish to npm
         env:
           NPM_CONFIG_PROVENANCE: 'true'
@@ -66,11 +63,8 @@ jobs:
           fi
           $release_cmd
 
-      - name: Generate release notes
-        uses: dfinity/ci-tools/actions/generate-release-notes@main
-
       - name: Create Github release
-        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
+        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0
         with:
           artifacts: 'icp-sdk-bindgen-${{ github.ref_name }}.tgz'
           bodyFile: 'RELEASE_NOTES.md'
@@ -84,5 +78,5 @@ jobs:
     if: ${{ needs.release.outputs.is_beta == 'false' }}
     uses: ./.github/workflows/publish-docs.yml
     with:
-      ref: ${{ needs.release.outputs.major_minor_patch_version_tag }}
+      ref: ${{ github.ref_name }}
     secrets: inherit

.github/workflows/test.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@v6
 
       - name: Setup PNPM
         uses: dfinity/ci-tools/actions/setup-pnpm@main

package.json

@@ -64,14 +64,14 @@
   },
   "packageManager": "pnpm@10.13.1",
   "devDependencies": {
-    "@biomejs/biome": "2.4.7",
-    "@tanstack/vite-config": "^0.5.1",
+    "@biomejs/biome": "2.4.8",
+    "@tanstack/vite-config": "^0.5.2",
     "@types/node": "^24.12.0",
-    "memfs": "^4.56.11",
+    "memfs": "^4.57.1",
     "publint": "^0.3.18",
     "tinyglobby": "^0.2.15",
     "typescript": "^5.9.3",
-    "vite": "^8.0.0",
+    "vite": "^8.0.2",
     "vitest": "4.1.0",
     "wasm-pack": "^0.14.0"
   },