feat: drop Node.js v16

BREAKING CHANGE: Node.js v16 is no longer supported.

.github/workflows/nodejs.yml

@@ -5,7 +5,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        node-version: [14, 16, 18]
+        node-version: [18, 20]
         os: [ubuntu-latest]
     steps:
     - name: Node.js ${{ matrix.node-version }}

.github/workflows/release.yml

@@ -1,25 +1,35 @@
-name: release
+name: Release
 on:
   push:
     branches:
       - master
+permissions:
+  contents: read
 jobs:
   release:
     name: release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+      issues: write
+      pull-requests: write
     steps:
-      - uses: actions/setup-node@v3.8.1
+      - name: Set up Node.js
+        uses: actions/setup-node@v3.8.1
         with:
           node-version: 20
       - name: Update npm
         run: |
           npm install -g npm
           npm --version
-      - uses: actions/checkout@v3.6.0
+      - name: Checkout code
+        uses: actions/checkout@v4.0.0
       - name: Install dependencies
-        uses: bahmutov/npm-install@v1.8.34
+        uses: bahmutov/npm-install@v1.8.35
         with:
           useLockFile: false
+      - run: npm audit signatures
       - name: Release
         run: npm run release
         env:

.npmrc

@@ -1 +1,2 @@
 package-lock = false
+provenance = true

package.json

@@ -15,7 +15,7 @@
     "LICENSE.txt"
   ],
   "engines": {
-    "node": "16 || 18 || >=20"
+    "node": "18 || >=20"
   },
   "scripts": {
     "lint": "eslint .",
@@ -24,13 +24,13 @@
     "release": "semantic-release"
   },
   "devDependencies": {
-    "@kenan/eslint-config": "^10.0.2",
+    "@kenan/eslint-config": "^11.0.1",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
-    "conventional-changelog-conventionalcommits": "^6.1.0",
-    "eslint": "^8.47.0",
+    "conventional-changelog-conventionalcommits": "^7.0.2",
+    "eslint": "^8.49.0",
     "lodash.isplainobject": "^4.0.6",
-    "semantic-release": "^21.0.7",
+    "semantic-release": "^22.0.0",
     "tape": "^5.6.6"
   }
 }