chore: clear dependabot security alerts

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'yarn'
 
       - name: Install dependencies
@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20, 22, 24]
+        node-version: [22, 24]
     steps:
       - uses: actions/checkout@v4
 
@@ -46,15 +46,15 @@ jobs:
       # not three times. All other unit tests still run on every Node version.
       - name: Run unit tests
         env:
-          SKIP_TSC_TYPE_COMPAT: ${{ matrix.node-version != 20 && '1' || '' }}
+          SKIP_TSC_TYPE_COMPAT: ${{ matrix.node-version != 22 && '1' || '' }}
         run: yarn test
 
       # The build (tsup --dts + webpack) recompiles the full type graph for
       # declaration emit; that output is byte-identical across Node versions, so
       # building on every matrix entry just recompiles the same type graph N times.
       # Gate it to the primary Node version. Unit tests still run on all versions.
       - name: Build
-        if: matrix.node-version == 20
+        if: matrix.node-version == 22
         run: yarn build
 
   test-browser:
@@ -65,7 +65,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'yarn'
 
       - name: Install dependencies
@@ -85,7 +85,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'yarn'
 
       - name: Install dependencies

package.json

@@ -68,22 +68,22 @@
     "@typescript-eslint/eslint-plugin": "^8.18.0",
     "@typescript-eslint/parser": "^8.18.0",
     "@vitejs/plugin-react": "^5.1.2",
-    "@vitest/coverage-v8": "^4.0.16",
+    "@vitest/coverage-v8": "^4.1.11",
     "esbuild-loader": "^4.2.2",
     "eslint": "^9.39.2",
     "eslint-plugin-react": "^7.37.5",
     "globals": "^16.5.0",
     "jsdom": "^27.4.0",
     "pre-commit": "^1.2.2",
     "process": "^0.11.10",
-    "puppeteer": "^24.34.0",
+    "puppeteer": "^25.11.0",
     "react": "19",
     "react-dom": "19",
     "react-frame-component": "^5.2.7",
     "semver": "^7.7.3",
     "tsup": "^8.3.5",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.16",
+    "vitest": "^4.1.11",
     "webpack": "^5.104.1",
     "webpack-cli": "^6.0.1",
     "webpack-dev-server": "^5.2.2"