chore: upgrade deps and modernize CI/CD

- Bump version to 1.2.3
- Upgrade TypeScript 6.0.3, ESLint 10.6.0, vitest 4.1.9, and all devDependencies
- CI/CD: use actions/checkout@v5, pnpm/action-setup@v6, Node 24
- Publish: adopt OIDC trusted publishing with dry-run support
- tsconfig: add rootDir, normalize outDir, remove legacy moduleResolution from CJS config

Co-Authored-By: Anda Bot <noreply@anda.bot>

Author: zensh

.github/workflows/ci.yml

@@ -1,4 +1,4 @@
-name: 'CI'
+name: "CI"
 
 on:
   push:
@@ -13,15 +13,14 @@ jobs:
       packages: write
 
     steps:
-      - run: npm install -g pnpm
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
         with:
-          node-version: '20.x'
-          cache: 'pnpm'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: 24
+          cache: "pnpm"
+          registry-url: "https://registry.npmjs.org"
       - run: |
-          pnpm install
           pnpm lint
           pnpm test
           pnpm build

.github/workflows/publish.yml

@@ -1,9 +1,9 @@
-name: 'Publish'
+name: "Publish"
 
 on:
   push:
     tags:
-      - 'v*'
+      - "v*"
 
 jobs:
   build:
@@ -13,18 +13,22 @@ jobs:
       packages: write
 
     steps:
-      - run: npm install -g pnpm
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v6
         with:
-          node-version: '20.x'
-          cache: 'pnpm'
-          registry-url: 'https://registry.npmjs.org'
+          node-version: 24
+          cache: "pnpm"
+          registry-url: "https://registry.npmjs.org"
       - run: |
           pnpm install
           pnpm lint
           pnpm test
           pnpm build
-      - run: npm publish .
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - name: Dry-run npm publish
+        if: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run }}
+        run: npm publish --dry-run --access public
+      # OIDC trusted publishing: no NODE_AUTH_TOKEN, provenance is generated automatically.
+      - name: Publish to npm
+        if: ${{ github.event_name == 'push' || inputs.dry_run == false }}
+        run: npm publish --access public

package.json

@@ -1,7 +1,7 @@
 {
   "name": "xid-ts",
   "type": "module",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "author": "0xZensh <txr1883@gmail.com>",
   "description": "xid is a globally unique id generator thought for the web. A Typescript port of https://github.com/rs/xid.",
   "license": "MIT",
@@ -42,18 +42,18 @@
     "test": "vitest src --coverage --run"
   },
   "devDependencies": {
-    "@types/node": "^25.1.0",
-    "@typescript-eslint/eslint-plugin": "^8.54.0",
-    "@typescript-eslint/parser": "^8.54.0",
-    "@vitest/coverage-v8": "^4.0.18",
-    "cborg": "^4.5.8",
-    "eslint": "^9.39.2",
+    "@types/node": "^26.1.0",
+    "@typescript-eslint/eslint-plugin": "^8.62.1",
+    "@typescript-eslint/parser": "^8.62.1",
+    "@vitest/coverage-v8": "^4.1.9",
+    "cborg": "^5.1.7",
+    "eslint": "^10.6.0",
     "eslint-plugin-import": "^2.32.0",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-prettier": "^5.5.5",
-    "prettier": "^3.8.1",
-    "typescript": "^5.9.3",
-    "vitest": "^4.0.18"
+    "eslint-plugin-prettier": "^5.5.6",
+    "prettier": "^3.9.4",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
   },
   "dependencies": {},
   "keywords": [