fix

Author: romainmenke

.github/workflows/test.yml

@@ -6,6 +6,10 @@ concurrency:
   group: branch-node-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents:
+    read
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -19,8 +23,8 @@ jobs:
         - os: windows-latest
           node: 'lts/*'
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ matrix.node }}
 

index.mjs

@@ -8,15 +8,15 @@ import postcss from 'postcss';
 const assign = (...objects) => Object.assign(...objects);
 const create = (...objects) => assign(Object.create(null), ...objects);
 
-const require = createRequire(import.meta.url);
+const require$1 = createRequire(import.meta.url);
 
 // get resolved filenames for normalize.css
-const normalizeCSS = require.resolve('@csstools/normalize.css');
+const normalizeCSS = require$1.resolve('@csstools/normalize.css');
 const normalizeDir = path.dirname(normalizeCSS);
 const normalizeOpinionatedCSS = path.join(normalizeDir, 'opinionated.css');
 
 // get resolved filenames for sanitize.css
-const sanitizeCSS = require.resolve('sanitize.css');
+const sanitizeCSS = require$1.resolve('sanitize.css');
 const sanitizeDir = path.dirname(sanitizeCSS);
 const sanitizeAssetsCSS = path.join(sanitizeDir, 'assets.css');
 const sanitizeFormsCSS = path.join(sanitizeDir, 'forms.css');