ci: bump actions to node24-compatible versions, use npm ci in release…

.github/actions/build-lib/action.yml

@@ -3,7 +3,7 @@ description: Build for the current OS
 runs:
   using: composite
   steps:
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v6
       with:
         node-version: 20
         registry-url: "https://npm.pkg.github.com"

.github/actions/build-windows/action.yml

@@ -78,7 +78,7 @@ runs:
     # --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
     # libMVRGdtf - setup
     - name: libMVRGdtf - checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         path: libMvrGdtf
 

.github/actions/release-as/action.yml

@@ -25,7 +25,7 @@ runs:
         git config --global user.email "simorolev@gmail.com"
         git config --global user.name "Simeon Rolev"
 
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v6
       with:
         node-version: 20
         registry-url: "https://npm.pkg.github.com"

.github/workflows/artifact.yml

@@ -18,15 +18,15 @@ jobs:
     name: Export artifact for ${{ inputs.runner }}
     steps:
       - name: libMVRGdtf - checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: libMvrGdtf
 
       - name: Build
         uses: ./libMvrGdtf/.github/actions/build-lib
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: libMVRgdtf-${{ inputs.runner }}
           path: |

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository under ./libMvrGdtf
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: libMvrGdtf
           ref: ${{ inputs.ref }}
@@ -45,7 +45,7 @@ jobs:
           git status -sb
 
       - name: Use Node.js 20.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 20
           registry-url: https://npm.pkg.github.com/
@@ -60,7 +60,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         working-directory: libMvrGdtf
         run: |
-          npm install
+          npm ci
           git config user.email "auto-release-bot@mvrdevelopment.com"
           git config user.name "Auto release bot"
 

.github/workflows/test.yml

@@ -8,13 +8,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: libMVRGdtf - checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           path: libMvrGdtf
 
       - name: Build
         uses: ./libMvrGdtf/.github/actions/build-lib
 
+      - name: Audit production dependencies
+        working-directory: libMvrGdtf
+        run: |
+          npm ci
+          npm audit --omit=dev
+
       - name: Testing...
         working-directory: libMvrGdtf/build
         run: |