chore: Update dependencies (security), improve CI workflow

.github/workflows/ci.yml

@@ -29,17 +29,20 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Build
-        run: pnpm build
+      - name: Check formatting
+        run: pnpm format:check
 
       - name: Lint
         run: pnpm lint
 
+      - name: Check types
+        run: pnpm typecheck
+
       - name: Run tests with coverage
         run: pnpm test:coverage
 
       - name: Report test coverage
         uses: davelosert/vitest-coverage-report-action@v2
 
-      - name: Run knip
+      - name: Check unused files and dependencies with knip
         run: pnpm run knip

.oxlintrc.json

@@ -31,7 +31,9 @@
     ],
     "@typescript-eslint/no-explicit-any": "off",
     "@typescript-eslint/no-unsafe-declaration-merging": "off",
+    "eslint/arrow-body-style": ["error", "as-needed"],
     "eslint/curly": "error",
+    "eslint/id-length": "off",
     "eslint/max-depth": "off",
     "eslint/max-lines": "off",
     "eslint/max-lines-per-function": "off",
@@ -47,6 +49,7 @@
       }
     ],
     "import/exports-last": "off",
+    "import/extensions": "off",
     "import/group-exports": "off",
     "import/max-dependencies": "off",
     "import/no-anonymous-default-export": [
@@ -56,6 +59,7 @@
       }
     ],
     "import/no-default-export": "off",
+    "import/prefer-default-export": "off",
     "max-params": "off",
     "no-async-await": "off",
     "no-console": "off",

.prettierignore

@@ -0,0 +1,2 @@
+pnpm-lock.yaml
+pnpm-workspace.yaml

package.json

@@ -47,30 +47,30 @@
     "test": "vitest",
     "typecheck": "tsc --noEmit",
     "test:coverage": "vitest --coverage",
-    "format": "prettier . --write",
-    "format:check": "prettier . --check",
+    "format": "prettier . --write --experimental-cli",
+    "format:check": "prettier . --check --experimental-cli",
     "knip": "knip",
     "knip:fix": "knip --fix"
   },
   "dependencies": {
-    "graphql": "^16.0.0",
-    "inflection": "^3.0.0",
-    "jsonld": "^8.3.2",
+    "graphql": "^16.11.0",
+    "inflection": "^3.0.2",
+    "jsonld": "^8.3.3",
     "jsonref": "^9.0.0"
   },
   "devDependencies": {
-    "@types/jsonld": "^1.5.0",
-    "@types/node": "^22.0.0",
-    "@vitest/coverage-v8": "3.2.2",
-    "msw": "^2.9.0",
-    "openapi-types": "^12.0.0",
-    "oxlint": "^1.1.0",
-    "prettier": "^3.0.0",
-    "typescript": "^5.7.0",
+    "@types/jsonld": "^1.5.15",
+    "@types/node": "^22.15.34",
+    "@vitest/coverage-v8": "3.2.4",
     "knip": "^5.61.3",
-    "vitest": "^3.2.2"
+    "msw": "^2.10.2",
+    "openapi-types": "^12.1.3",
+    "oxlint": "^1.4.0",
+    "prettier": "^3.6.2",
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.4"
   },
-  "packageManager": "pnpm@10.11.0+sha512.6540583f41cc5f628eb3d9773ecee802f4f9ef9923cc45b69890fb47991d4b092964694ec3a4f738a420c918a333062c8b925d312f42e4f0c263eb603551f977",
+  "packageManager": "pnpm@10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184",
   "engines": {
     "node": ">=18"
   },