chore: add renovate

.github/renovate.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "packageRules": [
+    {
+      "matchManagers": ["github-actions", "npm", "nvm"],
+      "groupName": "{{manager}}",
+      "automerge": true
+    }
+  ]
+}

.github/workflows/ci.yaml

@@ -0,0 +1,25 @@
+name: Continuous Integration
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
+      - name: Set up Node.js
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93
+      - name: Install dependencies
+        run: npm ci
+      - name: Build
+        run: npm run compile

.github/workflows/publish.yaml

@@ -5,18 +5,17 @@ on:
     tags:
       - v*
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
     steps:
-      - name: Checkout
-        uses: actions/checkout@v3
+      - name: Check out repository
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
       - name: Set up Node.js
-        uses: actions/[email protected]
-        with:
-          node-version: 20
+        uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93
       - name: Install dependencies
         run: npm ci
       - name: Publish

.nvmrc

@@ -0,0 +1 @@
+20.12.2