Update development dependencies (#1558)

* Update development dependencies

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Enable pnpm's `lockfile.includeResolutionSettings`

Signed-off-by: Andrew Haines <haines@cerbos.dev>

* Remove deprecated `@types/adm-zip`

Signed-off-by: Andrew Haines <haines@cerbos.dev>

* Regenerate protobuf code

Signed-off-by: Andrew Haines <haines@cerbos.dev>

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Andrew Haines <haines@cerbos.dev>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Andrew Haines <haines@cerbos.dev>

Author: renovate[bot]

.github/actions/lint/action.yaml

@@ -46,7 +46,7 @@ runs:
 
     - name: Generate bot token
       if: inputs.github-app-client-id != ''
-      uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+      uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
       id: generate-token
       continue-on-error: true
       with:

.github/actions/setup-node/action.yaml

@@ -17,7 +17,7 @@ runs:
 
   steps:
     - name: Set up Node.js
-      uses: pnpm/setup@fbda4c85fc2e1e08721cd8763afea8f48d60f024 # v3.0.0
+      uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1
       with:
         cache: ${{ inputs.cache }}
         runtime: ${{ inputs.runtime }}

.github/workflows/ci.yaml

@@ -51,7 +51,7 @@ jobs:
         run: pnpm run generate
 
       - name: Check for uncommitted changes
-        uses: cerbos/actions/check-repo-status@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/check-repo-status@6f636d2f02ee257dd226044f85ca097b901b3572 # main
 
   test-matrix:
     name: Generate test matrix
@@ -145,6 +145,6 @@ jobs:
 
       - name: Notify Slack on failure
         if: failure() && github.event_name == 'schedule'
-        uses: cerbos/actions/notify-slack@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/notify-slack@6f636d2f02ee257dd226044f85ca097b901b3572 # main
         with:
           webhook-url: ${{ secrets.SLACK_CI_NOTIFICATIONS_WEBHOOK_URL }}

.github/workflows/publish-docs.yaml

@@ -37,7 +37,7 @@ jobs:
         run: tar --create --file "${RUNNER_TEMP}/artifact.tar" --verbose .
 
       - name: Upload artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: github-pages
           path: ${{ runner.temp }}/artifact.tar
@@ -46,7 +46,7 @@ jobs:
 
       - name: Notify Slack on failure
         if: failure()
-        uses: cerbos/actions/notify-slack@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/notify-slack@6f636d2f02ee257dd226044f85ca097b901b3572 # main
         with:
           webhook-url: ${{ secrets.SLACK_CI_NOTIFICATIONS_WEBHOOK_URL }}
 
@@ -67,6 +67,6 @@ jobs:
 
       - name: Notify Slack on failure
         if: failure()
-        uses: cerbos/actions/notify-slack@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/notify-slack@6f636d2f02ee257dd226044f85ca097b901b3572 # main
         with:
           webhook-url: ${{ secrets.SLACK_CI_NOTIFICATIONS_WEBHOOK_URL }}

.github/workflows/publish-npm.yaml

@@ -33,6 +33,6 @@ jobs:
 
       - name: Notify Slack on failure
         if: failure()
-        uses: cerbos/actions/notify-slack@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/notify-slack@6f636d2f02ee257dd226044f85ca097b901b3572 # main
         with:
           webhook-url: ${{ secrets.SLACK_CI_NOTIFICATIONS_WEBHOOK_URL }}

.github/workflows/update-protos.yaml

@@ -31,7 +31,7 @@ jobs:
         run: pnpm run generate
 
       - name: Create pull request
-        uses: cerbos/actions/create-pull-request@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/create-pull-request@6f636d2f02ee257dd226044f85ca097b901b3572 # main
         with:
           client-id: ${{ secrets.CERBOS_BOT_CLIENT_ID }}
           private-key: ${{ secrets.CERBOS_BOT_PRIVATE_KEY }}
@@ -47,6 +47,6 @@ jobs:
 
       - name: Notify Slack on failure
         if: failure()
-        uses: cerbos/actions/notify-slack@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/notify-slack@6f636d2f02ee257dd226044f85ca097b901b3572 # main
         with:
           webhook-url: ${{ secrets.SLACK_CI_NOTIFICATIONS_WEBHOOK_URL }}

.github/workflows/zizmor.yaml

@@ -27,4 +27,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: cerbos/actions/lint-actions@ba8869c5e94070146ec8e4e62e02527412697bae # main
+        uses: cerbos/actions/lint-actions@6f636d2f02ee257dd226044f85ca097b901b3572 # main

.node-version

@@ -1 +1 @@
-26.11.1
+26.12.0

package.json

@@ -4,12 +4,12 @@
   "devEngines": {
     "packageManager": {
       "name": "pnpm",
-      "version": "12.8.2",
+      "version": "12.13.0",
       "onFail": "download"
     },
     "runtime": {
       "name": "node",
-      "version": "26.11.1",
+      "version": "26.12.0",
       "onFail": "warn"
     }
   },
@@ -65,9 +65,9 @@
     "depcheck": "1.4.7",
     "eslint": "10.12.0",
     "npm": "12.2.0",
-    "prettier": "3.9.9",
+    "prettier": "3.9.10",
     "prettier-plugin-pkg": "0.22.1",
-    "ts-proto": "2.13.0",
+    "ts-proto": "2.15.3",
     "tsx": "4.23.15",
     "typedoc": "0.28.20",
     "typedoc-plugin-mdn-links": "5.1.1",