Update github's actions

.github/workflows/changelog.yml

@@ -9,16 +9,18 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
-          fetch-depth: 0 # fetch all history
+          show-progress: false
+          fetch-depth: 0 # fetch all reachable commits
+          filter: tree:0 # while fetching trees and blobs on-demand
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
 
       - name: Install Dependencies
         run: npm ci --ignore-scripts
@@ -29,7 +31,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload npm folder
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: changelog
           path: ./changelog.txt

.github/workflows/ci.yml

@@ -8,23 +8,23 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
 
       - name: Install Dependencies
         run: npm ci --ignore-scripts
 
       - name: Run tests
         run: npm run testonly
 
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         if: always()
         with:
           name: playwright-report
@@ -37,15 +37,15 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
 
       - name: Install Dependencies
         run: npm ci --ignore-scripts
@@ -74,7 +74,7 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
@@ -100,15 +100,15 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
 
       - name: Install Dependencies
         run: npm ci --ignore-scripts
@@ -130,17 +130,18 @@ jobs:
       security-events: write # for codeql-action
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
-          languages: 'javascript, typescript'
+          languages: 'javascript, typescript' # TODO: add c-cpp
+          queries: security-and-quality
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
 
   buildDemo:
     name: Build Demo
@@ -149,15 +150,15 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
 
       - name: Install Dependencies
         run: npm ci --ignore-scripts
@@ -166,7 +167,7 @@ jobs:
         run: npm run build:demo
 
       - name: Upload demo-dist folder
-        uses: actions/upload-pages-artifact@v1
+        uses: actions/upload-pages-artifact@v3
         with:
           name: demoDist
           path: ./demo-dist
@@ -178,15 +179,15 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
 
       - name: Install Dependencies
         run: npm ci --ignore-scripts
@@ -195,7 +196,7 @@ jobs:
         run: npm run build:release
 
       - name: Upload npm folder
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: npmDist
           path: |

.github/workflows/publish.yml

@@ -28,19 +28,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version-file: '.node-version'
+          node-version-file: 'package.json'
           # 'registry-url' is required for 'npm publish'
           registry-url: 'https://registry.npmjs.org'
 
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: npmDist
           path: npmDist

.github/workflows/pull_request.yml

@@ -15,9 +15,11 @@ jobs:
       contents: read # for actions/checkout
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
       - name: Dependency review
-        uses: actions/dependency-review-action@v2
+        uses: actions/dependency-review-action@v4
+        with:
+          comment-summary-in-pr: always

.github/workflows/push.yml

@@ -27,6 +27,6 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v2
+        uses: actions/deploy-pages@v4
         with:
           artifact_name: demoDist

package.json

@@ -13,6 +13,9 @@
   "bugs": {
     "url": "https://github.com/graphql-kit/graphql-voyager/issues"
   },
+  "engines": {
+    "node": ">=20.0.0"
+  },
   "main": "dist/voyager.lib.js",
   "types": "typings/index.d.ts",
   "scripts": {
@@ -27,7 +30,7 @@
     "bundle:lib": "webpack --mode=production --env lib",
     "bundle": "rm -rf dist && npm run bundle:lib && npm run bundle:standalone",
     "compile:middleware": "tsc -d src/middleware/index.ts --outDir middleware --lib ES6,DOM,esnext.asynciterable",
-    "build:worker": "npm run clean:worker && docker-compose up --abort-on-container-exit --build build-worker",
+    "build:worker": "npm run clean:worker && docker compose up --abort-on-container-exit --build build-worker",
     "build:release": "npm run build:worker && npm run bundle && npm run compile:middleware && npm run declarations",
     "build:demo": "npm run build:release && rm -rf demo-dist && cp -R demo/ demo-dist/ && cp dist/voyager.css* dist/voyager.standalone.js* demo-dist/",
     "stats": "NODE_ENV=production webpack --json --mode=production > stats.json",
@@ -36,9 +39,9 @@
     "prettier": "prettier --write --list-different . **/*.svg",
     "prettier:check": "prettier --check . **/*.svg",
     "check:spelling": "cspell --cache --no-progress '**/*'",
-    "testonly": "npm run build:demo && npm pack && docker-compose up --abort-on-container-exit --build test",
+    "testonly": "npm run build:demo && npm pack && docker compose up --abort-on-container-exit --build test",
     "declarations": "tsc --emitDeclarationOnly -p tsconfig.lib.json",
-    "update-snapshots": "docker-compose up --build update-snapshots"
+    "update-snapshots": "docker compose up --build update-snapshots"
   },
   "peerDependencies": {
     "graphql": ">=16.5.0",