fix: update vulnerable npm dependencies (#5)

* fix: update vulnerable npm dependencies

* ci: verify dependency updates on pull requests

* ci: use current GitHub Actions runtimes

* ci: validate package metadata in PR checks

---------

Co-authored-by: Esa-Pekka Pälvimäki <palvimaki@users.noreply.github.com>

Author: palvimaki

.github/workflows/pr-ci.yml

@@ -0,0 +1,25 @@
+name: PR CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: node scripts/check-package-metadata.mjs
+      - run: npm audit --audit-level=high
+      - run: ./node_modules/.bin/pwa-assets-generator --preset minimal-2023 assets/logo.png
+      - run: npm run build