fix: up dev, fix some vuls

.github/workflows/ci.yaml

@@ -0,0 +1,142 @@
+# This is a Github Workflow that runs tests on any push or pull request.
+# If the tests pass and this is a push to the master branch it also runs Semantic Release.
+name: CI
+on: [push, pull_request]
+jobs:
+  init:
+    name: init
+    runs-on: ubuntu-20.04
+    outputs:
+      skip: ${{ steps.ci-skip-step.outputs.ci-skip }}
+      skip-not: ${{ steps.ci-skip-step.outputs.ci-skip-not }}
+    steps:
+      - uses: actions/checkout@v3
+      - id: ci-skip-step
+        uses: mstachniuk/ci-skip@v1
+
+  build:
+    name: build
+    needs: init
+    if: ${{ needs.init.outputs.skip == 'false' }}
+    runs-on: ubuntu-20.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: 16
+
+      - name: Fetch deps
+        run: yarn
+
+      - name: Build target
+        run: yarn build
+
+      - name: Save artifact
+        uses: actions/upload-artifact@v3
+        with:
+          name: artifact-${{ github.run_id }}
+          retention-days: 1
+          path: |
+            docs
+            target
+            flow-typed
+            typings
+            buildstamp.json
+
+  test_push:
+    needs: build
+    if: github.event_name == 'push'
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Restore artifact
+        uses: actions/download-artifact@v3
+        with:
+          name: artifact-${{ github.run_id }}
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16
+      - run: yarn
+      - name: Unit test only
+        run: yarn test
+
+      - name: Update coverage
+        if: github.ref == 'refs/heads/master'
+        uses: actions/upload-artifact@v3
+        with:
+          name: artifact-${{ github.run_id }}
+          retention-days: 1
+          path: |
+            coverage
+            .nyc_output
+
+  test_pr:
+    if: github.event_name == 'pull_request'
+    needs: build
+    strategy:
+      matrix:
+        os: [ ubuntu-20.04 ]
+        node-version: [ 14, 16 ]
+    name: Test (Node v${{ matrix.node-version }}, OS ${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Restore artifact
+        uses: actions/download-artifact@v3
+        with:
+          name: artifact-${{ github.run_id }}
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: yarn
+      - name: Test only
+        if: matrix.node-version != '16' || matrix.os != 'ubuntu-20.04'
+        run: yarn test
+
+      - name: Test & push coverage
+        if: matrix.node-version == '16' && matrix.os == 'ubuntu-20.04'
+        run: test
+
+  release:
+    name: Release
+    # https://github.community/t/trigger-job-on-tag-push-only/18076
+    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+    needs: test_push
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Restore artifact
+        uses: actions/download-artifact@v3
+        with:
+          name: artifact-${{ github.run_id }}
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16
+
+      - name: Codeclimate
+        uses: paambaati/[email protected]
+        env:
+          CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
+        with:
+          coverageLocations: |
+            ${{github.workspace}}/coverage/*.lcov:lcov
+
+      - name: Release
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          GH_USER: 'qiwibot'
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GIT_AUTHOR_EMAIL: '[email protected]'
+          GIT_COMMITTER_EMAIL: '[email protected]'
+          GIT_AUTHOR_NAME: '@qiwibot'
+          GIT_COMMITTER_NAME: '@qiwibot'
+        run: npx -p @qiwi/semrel-toolkit semrel

package.json

@@ -59,26 +59,26 @@
     "postupdate": "yarn && yarn test:depauditfix && yarn build && yarn test"
   },
   "dependencies": {
-    "@qiwi/substrate": "^1.20.11",
-    "tslib": "^2.3.1"
+    "@qiwi/substrate": "^1.20.12",
+    "tslib": "^2.4.0"
   },
   "devDependencies": {
-    "@qiwi/libdefkit": "^4.0.0",
+    "@qiwi/libdefkit": "^4.0.6",
     "@qiwi/npm-run-all": "^4.1.7",
-    "@types/jest": "^27.0.2",
+    "@types/jest": "^27.4.1",
     "coveralls": "^3.1.1",
-    "eslint": "^8.2.0",
-    "eslint-config-prettier": "^8.3.0",
-    "eslint-config-qiwi": "^1.15.1",
+    "eslint": "^8.14.0",
+    "eslint-config-prettier": "^8.5.0",
+    "eslint-config-qiwi": "^1.16.1",
     "jest": "^28.0.0",
-    "microbundle": "^0.14.1",
+    "microbundle": "^0.14.2",
     "rimraf": "^3.0.2",
-    "terser": "^5.9.0",
-    "ts-jest": "^27.0.7",
-    "ts-node": "^10.4.0",
-    "tsc-esm-fix": "^2.7.3",
-    "typedoc": "^0.22.8",
-    "typescript": "^4.4.4"
+    "terser": "^5.12.1",
+    "ts-jest": "^28.0.0-next.0",
+    "ts-node": "^10.7.0",
+    "tsc-esm-fix": "^2.13.0",
+    "typedoc": "^0.22.15",
+    "typescript": "^4.6.3"
   },
   "repository": {
     "type": "git",