Supply chain improvements

.github/actions/setup/action.yml

@@ -5,9 +5,9 @@ runs:
   using: composite
   steps:
     - name: Set up Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
       with:
-        node-version: '24.x'
+        node-version: '26.x'
         cache: npm
         registry-url: https://registry.npmjs.org
     - name: Install npm dependencies

.github/workflows/nodejs.yml

@@ -16,17 +16,17 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [22.x, 24.x]
+        node-version: [24.x, 26.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
       with:
         node-version: ${{ matrix.node-version }}
         cache: 'npm'
-    - name: npm install
+    - name: npm ci
       run: npm ci
     - name: npm build
       run: npm run build --if-present

.github/workflows/publish.yml

@@ -12,10 +12,10 @@ jobs:
   publish-npm:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
-          node-version: 24
+          node-version: 26
           registry-url: https://registry.npmjs.org/
           cache: npm
       - run: npm ci

.github/workflows/release.yml

@@ -22,7 +22,7 @@ jobs:
       new-tag: ${{ steps.new-tag.outputs.new-tag }}
     steps:
       - name: Checkout ref
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
       - name: Preparation
         uses: ./.github/actions/setup
       - run: npx playwright install chromium
@@ -47,13 +47,13 @@ jobs:
     needs: bump-version
     steps:
       - name: Checkout ref
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           ref: ${{ needs.bump-version.outputs.new-tag }}
       - name: Preparation
         uses: ./.github/actions/setup
       - name: Create release
-        uses: actions/github-script@v5
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -67,7 +67,7 @@ jobs:
     needs: [bump-version, create-release]
     steps:
       - name: Checkout ref
-        uses: actions/checkout@v4
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
         with:
           ref: ${{ needs.bump-version.outputs.new-tag }}
       - name: Preparation

.npmrc

@@ -0,0 +1 @@
+min-release-age=3

.travis.yml

@@ -1,7 +1,9 @@
 language: node_js
 sudo: required
 node_js:
-  - "node"
+  - "26"
+install:
+  - npm ci
 addons:
   chrome: stable
 cache: