chore: GitHub CI improvements (#262)

Github Actions Workflow:
- Use Node 22 and the latest checkout github action for code coverage job
- Replace HUSKY_SKIP_INSTALL with HUSKY=0 for Husky v9 compatibility
- Set HUSKY env variable once for entire workflow
- Use built-in npm module caching instead of manual cache setup
- Add TypeScript build step to static analysis
- Use codecov's official action for uploading coverage reports
- Remove redundant npm test execution from test-check-coverage
- Add automerge job for Dependabot

Dependabot Config:
- Set npm updates to weekly on Wednesdays at 00:00 UTC
- Batch npm update PRs by semver into separate major, minor, and patch groups
- Set monthly GitHub Actions updates on Wednesdays at 01:00 UTC

Author: YasharF

.github/dependabot.yml

@@ -1,11 +1,33 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
 version: 2
 updates:
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  # Dependency updates weekly batched by semver
+  - package-ecosystem: "npm"
+    directory: "/"
     schedule:
       interval: "weekly"
+      day: "wednesday"
+      time: "00:00"  # UTC
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      major-updates:
+        update-types: ["major"]
+      minor-updates:
+        update-types: ["minor"]
+      patch-updates:
+        update-types: ["patch"]
+
+  # GitHub Actions updates monthly
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+      day: "wednesday"
+      time: "01:00"
+    open-pull-requests-limit: 10
+
+    commit-message:
+      prefix: "chore"
+      include: "scope"

.github/workflows/main.yml

@@ -5,6 +5,9 @@ on: [push, pull_request]
 permissions:
   contents: read
 
+env:
+  HUSKY: 0
+
 jobs:
   static-analysis:
     runs-on: ubuntu-latest
@@ -16,18 +19,13 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: "22"
-      - name: Cache modules
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
+          cache: 'npm'
       - name: Install dependencies
         run: |
           npm ci
-        env:
-          HUSKY_SKIP_INSTALL: 1
+      - name: Build TypeScript types
+        run: |
+          npm run build
       - name: Prettier
         run: |
           npm run prettier:check
@@ -41,24 +39,19 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: "16"
-      - name: Cache npm
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
+          node-version: "22"
+          cache: 'npm'
       - name: Install dependencies
         run: |
           npm ci
-        env:
-          HUSKY_SKIP_INSTALL: 1
       - name: Integration
         run: |
           npm run test-check-coverage
       - name: Upload coverage report
-        run: bash <(curl -s https://codecov.io/bash) -F unit -s coverage/lcov.info
+        uses: codecov/codecov-action@v5
+        with:
+          files: ./coverage/lcov.info
+          fail_ci_if_error: true
 
   test:
     runs-on: ubuntu-latest
@@ -68,23 +61,15 @@ jobs:
         node-version: [20, 22, 24]
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-      - name: Cache modules
-        uses: actions/cache@v4
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
+          cache: 'npm'
       - name: Install dependencies
         run: |
           npm ci
-        env:
-          HUSKY_SKIP_INSTALL: 1
       - name: npm test
         run: npm test
 
@@ -109,4 +94,20 @@ jobs:
         run: |
           npm run test-cloud
 
-
+  dependabot-automerge:
+    needs: [static-analysis, coverage, test, saucelabs-test]
+    if: >
+      github.event_name == 'pull_request' &&
+      github.event.pull_request.user.login == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+    steps:
+      - name: Automerge Dependabot PRs if all checks have passed
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh pr merge --squash --auto ${{ github.event.pull_request.number }}

package.json

@@ -28,7 +28,7 @@
     "prepublishOnly": "npm run build && mkdocs gh-deploy -r upstream || mkdocs gh-deploy -r origin",
     "test": "mocha ./lib/*.test.js",
     "test-cloud": "./test-cloud.sh",
-    "test-check-coverage": "npm run test-coverage && c8 check-coverage --branches 100 --functions 100 --lines 100",
+    "test-check-coverage": "c8 --all --reporter text --reporter html --reporter lcovonly --check-coverage --branches 100 --functions 100 --lines 100 npm run test",
     "test-coverage": "c8 --all --reporter text --reporter html --reporter lcovonly npm run test",
     "test-headless": "mochify --driver puppeteer",
     "prettier:check": "prettier --check '**/*.{js,css,md}'",