Modernize package and publishing workflows (#3)

Align Node support, CI, package metadata, and npm publishing safeguards.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: aarongustafson

.github/workflows/ci.yml

@@ -12,13 +12,13 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [20.x, 22.x]
+        node-version: [22.x, 24.x, 26.x]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
           cache: "npm"
@@ -34,4 +34,4 @@ jobs:
 
       - name: Generate coverage report
         run: npm run test:coverage
-        if: matrix.node-version == '20.x'
+        if: matrix.node-version == '22.x'

.github/workflows/publish.yml

@@ -4,6 +4,16 @@ on:
   push:
     tags:
       - "v*"
+  workflow_dispatch:
+    inputs:
+      publish_mode:
+        description: Choose dry-run for testing or publish to release
+        required: true
+        default: dry-run
+        type: choice
+        options:
+          - dry-run
+          - publish
 
 permissions:
   id-token: write # Required for OIDC
@@ -14,22 +24,33 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: "20.x"
+          node-version: "24.x"
           registry-url: "https://registry.npmjs.org"
 
-      - name: Update npm
-        run: npm install -g npm@latest
+      - name: Verify tag matches package version
+        if: github.event_name == 'push'
+        run: |
+          expected_tag="v$(node -p "require('./package.json').version")"
+          test "$GITHUB_REF_NAME" = "$expected_tag"
 
       - name: Install dependencies
         run: npm ci
 
+      - name: Run linter
+        run: npm run lint
+
       - name: Run tests
         run: npm run test:run
 
+      - name: Dry-run npm publish
+        if: github.event_name == 'workflow_dispatch' && github.event.inputs.publish_mode != 'publish'
+        run: npm publish --dry-run --access public
+
       - name: Publish to npm
-        run: npm publish
+        if: github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && github.event.inputs.publish_mode == 'publish')
+        run: npm publish --provenance --access public

package-lock.json

@@ -24,6 +24,7 @@
 	"types": "form-saver.d.ts",
 	"exports": {
 		".": {
+			"types": "./form-saver.d.ts",
 			"import": "./index.js"
 		},
 		"./form-saver.js": {
@@ -45,10 +46,9 @@
 		"LICENSE"
 	],
 	"engines": {
-		"node": ">=20.0.0"
+		"node": ">=22.0.0"
 	},
 	"scripts": {
-		"setup": "node scripts/setup.js",
 		"test": "vitest",
 		"test:ui": "vitest --ui",
 		"test:run": "vitest run",

package.json

@@ -3,6 +3,7 @@ import { defineConfig } from 'vitest/config';
 export default defineConfig({
 	test: {
 		environment: 'happy-dom',
+		execArgv: ['--no-experimental-webstorage'],
 		globals: true,
 		setupFiles: ['./test/setup.js'],
 	},