Merge pull request #7 from RubenGlez/orchestrator/dependency-policy-cleanup

Align dependency policy and CI config

Author: RubenGlez

.github/workflows/ci.yml

@@ -12,11 +12,13 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: 24
-      - run: npm ci
-      - run: npm run tsc
-      - run: npm run lint
-      - run: npm audit --audit-level=high --omit=dev
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm tsc
+      - run: pnpm lint
+      - run: pnpm audit --audit-level=high --prod

.github/workflows/dependency-review.yml

@@ -12,5 +12,5 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/dependency-review-action@v4
+      - uses: actions/checkout@v5
+      - uses: actions/dependency-review-action@v5

.github/workflows/release.yml

@@ -12,28 +12,32 @@ jobs:
   build-mac:
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: 24
-      - run: npm ci
-      - run: npm run release
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   build-windows:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v5
+      - uses: actions/setup-node@v5
         with:
           node-version: 24
+          cache: pnpm
       - uses: actions/setup-python@v5
         with:
           python-version: '3.11'
-      - run: npm ci --ignore-scripts
-      - run: npx @electron/rebuild -f -w better-sqlite3
-      - run: npm run release
+      - run: pnpm install --frozen-lockfile --ignore-scripts
+      - run: pnpm exec electron-rebuild -f -w better-sqlite3
+      - run: pnpm release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 

.gitignore

@@ -24,7 +24,6 @@ release
 *.sln
 *.sw?
 
-pnpm-lock.yaml
 yarn.lock
 /test-results/
 /playwright-report/