Update dependencies and upgrade build toolchain

.github/dependabot.yml

@@ -0,0 +1,9 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "production"
+    open-pull-requests-limit: 10

.github/workflows/cd.yml

@@ -11,16 +11,19 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v2.5.1
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           registry-url: https://registry.npmjs.org/
 
       - name: Install Dependencies
-        run: npm ci --force
+        run: npm ci
+
+      - name: Audit Production Dependencies
+        run: npm audit --omit=dev
 
       - name: Run Tests
         run: npm test
@@ -31,16 +34,16 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v2.5.1
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           registry-url: https://registry.npmjs.org/
 
       - name: Install Dependencies
-        run: npm ci --force
+        run: npm ci
 
       - name: Build Project
         run: npm run build

.github/workflows/ci.yml

@@ -11,16 +11,19 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@v2.5.1
+        uses: actions/setup-node@v4
         with:
           node-version: 18
           registry-url: https://registry.npmjs.org/
 
       - name: Install Dependencies
-        run: npm ci --force
+        run: npm ci
+
+      - name: Audit Production Dependencies
+        run: npm audit --omit=dev
 
       - name: Run Tests
         run: npm test

.gitignore

@@ -15,6 +15,7 @@
 .env.test.local
 .env.production.local
 
+*.tgz
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2025 Checkout.com
+Copyright (c) 2026 Checkout.com
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal