build(deps): 更新 npm 依赖与 GitHub Actions，修复依赖安全漏洞

.github/dependabot.yml

@@ -10,3 +10,7 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/autocorrect.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check source code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: AutoCorrect
         uses: huacnlee/autocorrect-action@v2

.github/workflows/build.yml

@@ -35,7 +35,7 @@ jobs:
     steps:
       # checkout 必须在 setup-zig 之前：checkout 的 clean 会清掉 setup-zig
       # 恢复的本地 .zig-cache
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           # 不把 github.token 写进 .git/config，避免被 PR 中的构建代码读走
           persist-credentials: false

.github/workflows/check.yml

@@ -14,12 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0 # Not needed if lastUpdated is not enabled
           persist-credentials: false
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: pnpm
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
       - name: Setup Zig
@@ -52,7 +52,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
       - name: Setup Zig

.github/workflows/deploy.yml

@@ -34,11 +34,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0 # Not needed if lastUpdated is not enabled
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
+      - uses: pnpm/action-setup@v6
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: pnpm
@@ -48,7 +48,7 @@ jobs:
         run: pnpm run build
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: ./course/.vitepress/dist
 
@@ -61,4 +61,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/mirror.yml

@@ -10,7 +10,7 @@ jobs:
     if: github.repository_owner == 'zigcc'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - uses: pixta-dev/repository-mirroring-action@v1

.github/workflows/opencode.yml

@@ -21,7 +21,7 @@ jobs:
       issues: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 

.github/workflows/release.yml

@@ -15,11 +15,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 24
           cache: pnpm
@@ -34,7 +34,7 @@ jobs:
         run: pnpm epub
 
       - name: Create and Upload Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: |
             books/zig_course.pdf

package.json

@@ -11,23 +11,23 @@
     "pdf:fonts": "node scripts/pdf/build-fonts.ts",
     "epub": "node course/.vitepress/epub/build.ts"
   },
-  "packageManager": "pnpm@11.3.0",
+  "packageManager": "pnpm@11.28.2",
   "engines": {
     "node": ">=24"
   },
   "devDependencies": {
     "@resvg/resvg-js": "^2.6.2",
-    "@types/node": "^26.6.1",
+    "@types/node": "^26.6.4",
     "@vite-pwa/vitepress": "^1.1.0",
     "jspdf": "^4.2.1",
     "jszip": "^3.10.2",
     "less": "^4.9.1",
     "markdown-it": "^15.0.2",
-    "marked": "^18.0.13",
-    "prettier": "^3.9.8",
-    "sharp": "^0.35.4",
-    "shiki": "4.4.3",
-    "subset-font": "^2.7.0",
+    "marked": "^18.0.14",
+    "prettier": "^3.9.9",
+    "sharp": "^0.35.5",
+    "shiki": "4.5.0",
+    "subset-font": "^2.9.0",
     "typescript": "^7.0.2",
     "vite-plugin-pwa": "^1.3.0",
     "vitepress": "^1.6.4"