Refresh site maintenance tooling

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: "pnpm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      dev-tooling:
+        dependency-type: "development"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -8,12 +8,12 @@ on:
 jobs:
   build:
     name: Build
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 22
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@a0ea98b2dc7d387a59324835f7421c1d5f8357b4 # v6.0.5
       - run: pnpm install --frozen-lockfile
       - run: pnpm run ci

.github/workflows/e2e.yml

@@ -9,12 +9,12 @@ on:
 jobs:
   test_setup:
     name: Wait for Preview
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
     outputs:
       preview_url: ${{ steps.waitForVercelPreviewDeployment.outputs.url }}
     steps:
       - name: Wait for Vercel preview deployment to be ready
-        uses: patrickedqvist/wait-for-vercel-preview@v1.3.2
+        uses: patrickedqvist/wait-for-vercel-preview@d7982701e6fcd3ae073bff929e408e004404d38d # v1.3.3
         id: waitForVercelPreviewDeployment
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -23,13 +23,13 @@ jobs:
     name: Playwright Tests
     needs: test_setup
     timeout-minutes: 10
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 22
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@a0ea98b2dc7d387a59324835f7421c1d5f8357b4 # v6.0.5
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
       - name: Install Playwright Browsers

package.json

@@ -6,51 +6,54 @@
   "engines": {
     "node": ">=22"
   },
-  "packageManager": "pnpm@9.15.0",
+  "packageManager": "pnpm@11.0.8",
   "scripts": {
     "dev": "vite dev",
     "build": "vite build",
     "preview": "vite preview",
     "prepare": "svelte-kit sync && husky",
     "check": "svelte-check --tsconfig ./tsconfig.json",
     "check:watch": "svelte-check --tsconfig ./tsconfig.json --watch",
-    "lint": "prettier --check . && eslint .",
-    "lint:fix": "prettier --write . && eslint --fix .",
+    "lint": "prettier --plugin prettier-plugin-svelte --check . && eslint .",
+    "lint:fix": "prettier --plugin prettier-plugin-svelte --write . && eslint --fix .",
     "ci": "pnpm run lint && pnpm run check && pnpm run build",
     "e2e": "playwright test"
   },
   "devDependencies": {
-    "@opentelemetry/api": "^1.9.0",
-    "@playwright/test": "^1.54.2",
-    "@sveltejs/adapter-static": "3.0.9",
-    "@sveltejs/kit": "2.31.0",
-    "@sveltejs/vite-plugin-svelte": "^6.1.2",
-    "@tailwindcss/postcss": "^4.1.12",
-    "@tailwindcss/vite": "^4.1.12",
-    "@typescript-eslint/eslint-plugin": "^8.39.1",
-    "@typescript-eslint/parser": "^8.39.1",
-    "autoprefixer": "^10.4.21",
-    "eslint": "^9.33.0",
+    "@eslint/js": "^10.0.1",
+    "@opentelemetry/api": "^1.9.1",
+    "@playwright/test": "^1.59.1",
+    "@sveltejs/adapter-static": "3.0.10",
+    "@sveltejs/kit": "2.59.1",
+    "@sveltejs/vite-plugin-svelte": "^7.1.2",
+    "@tailwindcss/postcss": "^4.2.4",
+    "@tailwindcss/vite": "^4.2.4",
+    "@types/node": "^25.6.2",
+    "@typescript-eslint/eslint-plugin": "^8.59.2",
+    "@typescript-eslint/parser": "^8.59.2",
+    "autoprefixer": "^10.5.0",
+    "eslint": "^10.3.0",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-svelte": "^3.11.0",
+    "eslint-plugin-svelte": "^3.17.1",
     "husky": "^9.1.7",
-    "lint-staged": "^16.1.5",
-    "mdsvex": "^0.12.6",
-    "postcss": "^8.5.6",
-    "prettier": "^3.6.2",
-    "prettier-plugin-svelte": "^3.4.0",
+    "lint-staged": "^17.0.2",
+    "mdsvex": "^0.12.7",
+    "postcss": "^8.5.14",
+    "prettier": "^3.8.3",
+    "prettier-plugin-svelte": "^3.5.1",
     "prism-themes": "^1.9.0",
-    "svelte": "^5.38.1",
-    "svelte-check": "^4.3.1",
-    "tailwindcss": "^4.1.12",
+    "svelte": "^5.55.5",
+    "svelte-check": "^4.4.8",
+    "svelte-eslint-parser": "^1.6.1",
+    "tailwindcss": "^4.2.4",
     "tslib": "^2.8.1",
-    "typescript": "^5.9.2",
-    "vite": "^7.1.2"
+    "typescript": "^6.0.3",
+    "vite": "^8.0.11"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,json,cjs,mjs,svelte}": [
-      "pnpm run check",
-      "prettier --write",
+      "bash -c 'pnpm run check'",
+      "prettier --plugin prettier-plugin-svelte --write",
       "eslint --fix"
     ]
   }