feat(node-versions): raised the minimum required node version to v18

BREAKING CHANGE: the minimum required version of node is now v18

for #247

.github/workflows/release.yml

@@ -23,7 +23,8 @@ jobs:
  with:
  cache: npm
  node-version: lts/*
- - run: npm ci
+ - run: npm clean-install
+ - run: npm audit signatures
  - run: npx semantic-release
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -16,8 +16,9 @@ jobs:
  strategy:
  matrix:
  node-version:
- - 14.17
- - 16
+ - 18.0.0
+ - 19
+ - 20
 
  runs-on: ubuntu-latest
 
@@ -28,7 +29,8 @@ jobs:
  with:
  node-version: ${{ matrix.node-version }}
  cache: npm
- - run: npm ci
+ - run: npm clean-install
+ - run: npm audit signatures
  - run: npm run test:ci
 
  # separate job to set as required in branch protection,
@@ -40,9 +42,12 @@ jobs:
  - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3
  - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
  with:
- node-version: 16
+ node-version: lts/*
  cache: npm
- - run: npm ci
+ - run: npm clean-install
  - name: Ensure dependencies are compatible with the version of node
  run: npx ls-engines
  - run: npm run lint
+ # https://github.com/lirantal/lockfile-lint#readme
+ - name: Scan lockfile for security issues
+ run: npx lockfile-lint --path package-lock.json

package.json

@@ -19,7 +19,7 @@
  "xo": "0.39.1"
  },
  "engines": {
- "node": ">=14.17"
+ "node": ">=18"
  },
  "files": [
  "index.js"