Sync from commercial

.github/dependabot.yml

@@ -3,5 +3,10 @@ updates:
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
     versioning-strategy: increase
+    groups:
+      minor-dependencies:
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/release.yaml

@@ -1,25 +1,85 @@
 name: "🚀 Release"
 
 on:
-  release:
-    types: [released]
+  workflow_dispatch:
+  push:
+    tags:
+      - "v*.*.*"
 
 jobs:
+  prebuilds:
+    name: create prebuilds
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        opts: [""]
+        include:
+          - os: macos-latest
+            opts: "--arch arm64"
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: checkout
+        uses: actions/checkout@v3
+      - name: node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 22
+          cache: "npm"
+      - name: MSVC (windows)
+        uses: ilammy/msvc-dev-cmd@v1
+        if: contains(matrix.os, 'windows')
+      - name: install dependencies
+        run: npm ci
+      - name: build
+        run: |
+          npm run prebuild --workspace=@jazzer.js/fuzzer -- ${{ matrix.opts }}
+          npm run build --workspace=@jazzer.js/fuzzer -- ${{ matrix.opts }}
+      - name: upload
+        uses: actions/upload-artifact@v3
+        with:
+          name: native-addon
+          path: packages/fuzzer/prebuilds
+          if-no-files-found: error
+
   release:
     name: release
-    runs-on: ubuntu-20.04
+    needs: [prebuilds]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # for creating releases
     steps:
       - name: checkout
         uses: actions/checkout@v3
       - name: node
         uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 22
           cache: "npm"
           registry-url: https://registry.npmjs.org
-      - name: install & build
-        run: npm ci && npm run build
-      - name: publish to npm
+      - name: install
+        run: npm ci
+      - name: build
+        run: npm run build
+      - name: download prebuilds
+        uses: actions/download-artifact@v3
+        with:
+          name: native-addon
+          path: packages/fuzzer/prebuilds
+          if-no-files-found: error
+      - name: publish
         run: npm publish --workspaces --access public
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_ACCESS_TOKEN}}
+      # create GitHub release
+      - name: read version
+        id: read-version
+        run: |
+          echo ::set-output name=version::\
+          $(cat ./package.json | jq '.version' | tr -d '"')
+        shell: bash
+      - name: create release
+        uses: softprops/action-gh-release@v1
+        with:
+          name: Release ${{ steps.read-version.outputs.version }}
+          body_path: ./.github/release_template.md
+          generate_release_notes: true

.github/workflows/run-all-tests-main.yaml

@@ -0,0 +1,38 @@
+name: "🔍 Fuzz Tests"
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  fuzz_tests:
+    name: fuzz tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v3
+      - uses: actions/cache@v3
+        id: cache-fuzzer
+        with:
+          path: |
+            packages/fuzzer/prebuilds
+          key:
+            fuzzer-cache-${{ runner.os }}-${{
+            hashFiles('packages/fuzzer/CMakeLists.txt',
+            'packages/fuzzer/**/*.h', 'packages/fuzzer/**/*.cpp') }}
+      - name: node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 22
+          cache: "npm"
+      - name: install dependencies
+        run: npm ci
+      - name: build project
+        run: npm run build
+      - name: build fuzzer
+        if: ${{ steps.cache-fuzzer.outputs.cache-hit != 'true' }}
+        run: npm run build --workspace=@jazzer.js/fuzzer
+      - name: run all fuzz tests
+        run: node fuzztests/runFuzzTests.js