chore(ci): update actions

Author: natemoo-re

.github/workflows/ci.yml

@@ -1,7 +1,13 @@
 name: CI
 
 on:
+  push:
+    branches:
+      - main
   pull_request_target:
+    types: [assigned, opened, synchronize, reopened]
+    branches:
+      - main
 
 # Automatically cancel in-progress actions on the same branch
 concurrency:
@@ -13,13 +19,12 @@ jobs:
     name: Build Packages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: pnpm/action-setup@v2
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: "pnpm"
-      - if: ${{ steps.cache-node.outputs.cache-hit != 'true' }}
-        run: pnpm install
+      - run: pnpm install
       - run: pnpm run type-check
       - run: pnpm run test

.github/workflows/format.yml

@@ -11,21 +11,21 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.head_ref }}
           token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: pnpm/action-setup@v2
-      - uses: actions/setup-node@v3
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 16
+          node-version: 20
           cache: "pnpm"
       - name: Install dependencies
         run: pnpm install
       - name: Format code
         run: pnpm run ci:format
       - name: Commit changes
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@v5
         with:
           commit_message: "[ci] format"
           branch: ${{ github.head_ref }}

.github/workflows/lint.yml

@@ -11,13 +11,11 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: pnpm/action-setup@v2
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: "pnpm"
-      - if: ${{ steps.cache-node.outputs.cache-hit != 'true' }}
-        run: pnpm install
-      - run: pnpm build
+      - run: pnpm install
       - run: pnpm type-check

.github/workflows/release.yml

@@ -20,17 +20,15 @@ jobs:
     name: Build Packages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: pnpm/action-setup@v2
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: "pnpm"
-      - if: ${{ steps.cache-node.outputs.cache-hit != 'true' }}
-        run: pnpm install
+      - run: pnpm install
       # TODO: is this manual build step actually needed?
       # `prepack` hook _should_ run but doesn't seem to.
-      - run: pnpm run type-check
       - run: pnpm run build
       - uses: changesets/action@v1
         if: ${{ github.event_name != 'pull_request' }}

.github/workflows/require-allow-edits.yml

@@ -8,11 +8,11 @@ permissions:
 jobs:
   _:
     permissions:
-      pull-requests: read # for ljharb/require-allow-edits to check 'allow edits' on PR
+      pull-requests: read
 
     name: "Require “Allow Edits”"
 
     runs-on: ubuntu-latest
 
     steps:
-      - uses: ljharb/require-allow-edits@main
+      - uses: ljharb/require-allow-edits@v2