Dep alert

.github/actions/ci-setup/action.yml

@@ -3,14 +3,14 @@ description: PNPM install deps
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@v4
       with:
-        node-version: 16
+        node-version: '18.17.0'
     - uses: pnpm/action-setup@v2
       name: Install pnpm
       id: pnpm-install
       with:
-        version: 7
+        version: 8
         run_install: false
 
     - name: Get pnpm store directory

.github/dependabot.yaml

@@ -0,0 +1,29 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/packages/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+      time: "16:00"
+    groups:
+      npm-dependencies:
+        patterns:
+          - "@npmcli/arborist"
+          - "nock"
+          - "npm"
+          - "semver"
+        exclude-patterns:
+          - "detect-indent"  # temp excluded due to https://github.com/dependabot/dependabot-core/pull/5683#issuecomment-1243468605
+      pnpm-dependencies:
+        patterns:
+          - "@pnpm/lockfile-file"
+          - "@pnpm/dependency-path"
+      dev-dependencies:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+    ignore:
+      - dependency-name: "npm"
+        update-types: ["version-update:semver-major"]

.github/workflows/lint.yaml

@@ -5,11 +5,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
         with:
-          node-version: 16
-      - uses: pnpm/action-setup@v2
-        with:
-          version: 7
-      - run: pnpm install
+          persist-credentials: false
+
+      - uses: ./.github/actions/ci-setup
+
       - run: pnpm -F "@bnb-chain/**" run lint

examples/nextjs/package.json

@@ -33,7 +33,7 @@
     "evmosjs": "^0.2.17",
     "lodash": "^4.17.21",
     "long": "^5.2.1",
-    "next": "13.5.0",
+    "next": "14.0.3",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "typescript": "^4.7.4",