Migrate to ESM and update all npm packages to latest versions (#234)

* Migrate to ESM and update all npm packages to latest versions

- Add type: module to package.json
- Update @actions/core, @actions/exec, @actions/io to v3 (ESM-only)
- Update @actions/tool-cache to v4 (ESM-only)
- Update semver, ts-jest, jest, prettier, nock, eslint-plugin-github,
  eslint-plugin-jest, @types/node, @typescript-eslint/parser
- Switch tsconfig module to nodenext with matching moduleResolution
- Enable isolatedModules for ts-jest ESM compatibility
- Add .js extensions to all relative imports
- Replace __dirname with import.meta.dirname in tests
- Convert jest.config.js to ESM with useESM and moduleNameMapper
- Use --experimental-vm-modules for Jest ESM support
- Regenerate lib/ and dist/ output

Co-authored-by: Copilot <[email protected]>

* Update codeql workflow

---------

Co-authored-by: Copilot <[email protected]>

Author: jeffkl

.github/workflows/codeql.yml

@@ -1,59 +1,38 @@
-name: "Code scanning - action"
-
+name: "CodeQL Scanning"
 
 on:
   push:
+    branches: [ main ]
     paths-ignore:
       - dist/**
-
   pull_request:
+    branches: [ main ]
     paths-ignore:
       - dist/**
-
   schedule:
-    - cron: '0 19 * * 0'
+    - cron: '28 9 * * 0'
 
 jobs:
-  CodeQL-Build:
-
-    # CodeQL runs on ubuntu-latest and windows-latest
+  analyze:
+    name: Run CodeQL Analysis
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
 
     steps:
     - name: Checkout repository
       uses: actions/checkout@v6
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
 
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-      
-    # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4
-      # Override language selection by uncommenting this and choosing your languages
-      # with:
-      #   languages: go, javascript, csharp, python, cpp, java
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v4
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
+      with:
+        languages: javascript
 
-    #- run: |
-    #   make bootstrap
-    #   make release
+    - run: npm ci
+    - run: npm run build
+    - run: rm -rf dist # We want code scanning to analyze lib instead (individual .js files)
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v4

__tests__/installer.test.ts

@@ -4,8 +4,8 @@ import * as path from 'path';
 import * as io from '@actions/io';
 import * as fs from 'fs';
 
-const toolDir = path.join(__dirname, 'runner', 'tools');
-const tempDir = path.join(__dirname, 'runner', 'temp');
+const toolDir = path.join(import.meta.dirname, 'runner', 'tools');
+const tempDir = path.join(import.meta.dirname, 'runner', 'temp');
 const IS_WINDOWS = process.platform === 'win32';
 const HOST = 'https://dist.nuget.org';
 const PATH = '/tools.json';
@@ -48,7 +48,7 @@ process.env['RUNNER_TOOL_CACHE'] = toolDir;
 process.env['RUNNER_TEMP'] = tempDir;
 
 import * as tc from '@actions/tool-cache';
-import installer from '../src/installer';
+import installer from '../src/installer.js';
 
 describe('installer tests', () => {
   beforeAll(async () => {

__tests__/pick-version.test.ts

@@ -1,5 +1,5 @@
-import nock = require('nock');
-import pickVersion from '../src/pick-version';
+import nock from 'nock';
+import pickVersion from '../src/pick-version.js';
 
 const HOST = 'https://dist.nuget.org';
 const PATH = '/tools.json';