chore: update dependencies, CI and README

.dockerignore

@@ -0,0 +1,4 @@
+node_modules
+build
+coverage
+.git

.github/workflows/ci.yml

@@ -7,12 +7,13 @@ jobs:
     runs-on: ubuntu-latest
     name: Continous integration tests
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2-beta
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: '20'
+          node-version: '24'
+          cache: npm
       - name: Install system dependencies
-        run: sudo apt-get install -y libsctp-dev valgrind
+        run: sudo apt-get update && sudo apt-get install -y libsctp-dev valgrind
       - name: Install dependencies
         run: npm ci
       - name: Run tests

.github/workflows/pr.yml

@@ -19,11 +19,11 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - uses: amannn/action-semantic-pull-request@v5.5.3
+      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
         id: lint
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: marocchino/sticky-pull-request-comment@v2
+      - uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
         if: always() && (steps.lint.outputs.error_message != null)
         with:
           header: pr-title-lint-error
@@ -37,7 +37,7 @@ jobs:
             ```
             ${{ steps.lint.outputs.error_message }}
             ```
-      - uses: marocchino/sticky-pull-request-comment@v2
+      - uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5
         if: ${{ steps.lint.outputs.error_message == null }}
         with:
           header: pr-title-lint-error

.github/workflows/release.yml

@@ -22,7 +22,7 @@ jobs:
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         id: release
         with:
           config-file: .github/release-please-config.json
@@ -34,16 +34,13 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         name: Checkout source code
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: ${{ hashFiles('.node-version') == '' && '20.x' || '' }}
-          node-version-file: ${{ hashFiles('.node-version') != '' && '.node-version' || '' }}
+          node-version: '24'
           registry-url: 'https://registry.npmjs.org'
       - name: Install system dependencies
-        run: sudo apt-get install -y libsctp-dev
+        run: sudo apt-get update && sudo apt-get install -y libsctp-dev
       - run: npm ci
-      - run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - run: npm stage publish --access public

docker/Dockerfile

@@ -1,17 +1,9 @@
-FROM debian:bullseye-slim
+FROM node:24-trixie-slim
 
-RUN apt-get update && apt-get install -y libsctp-dev curl xz-utils python3 make g++
+RUN apt-get update && apt-get install -y libsctp-dev python3 make g++ valgrind
 
-RUN useradd -ms /bin/bash dev
-USER dev
+USER node
+WORKDIR /home/node/app
+COPY --chown=node:node . .
 
-RUN mkdir /home/dev/app
-COPY --chown=dev:dev . /home/dev/app/
-
-WORKDIR /home/dev
-RUN curl -o node.tar.xz https://nodejs.org/dist/v16.20.2/node-v16.20.2-linux-x64.tar.xz
-RUN tar -xf node.tar.xz && rm node.tar.xz && mv node-* node
-ENV PATH="/home/dev/node/bin:$PATH"
-
-WORKDIR /home/dev/app
-RUN npm install
+RUN npm ci