ci(action): update github/codeql-action action to v2.22.6 #270

	name: Test

	on:
	push:
	branches:
	- renovate/** # branches generated by https://github.com/apps/renovate
	pull_request:
	branches:
	- main
	- beta
	- '+([0-9])?(.{+([0-9]),x}).x'
	workflow_call:

	permissions:
	contents: read

	jobs:
	test_matrix:
	strategy:
	matrix:
	os: [ubuntu-latest, windows-latest, macos-latest]
	node: [16, 18, 20]

	runs-on: ${{ matrix.os }}
	timeout-minutes: 5

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
	with:
	egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

	- name: Checkout project
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

	- name: Use Node.js ${{ matrix.node }}
	uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4
	with:
	node-version: ${{ matrix.node }}
	cache: 'npm'

	- name: Install packages
	run: npm ci

	- name: Audit npm signatures
	run: npm audit signatures

	- name: Check codestyle compliance
	run: npm run lint

	- name: Build project
	run: npm run build

	- name: Run tests
	run: npm run test

	- name: Run fuzz tests
	run: npm run test:fuzz

	# separate job to set as required status check in branch protection
	required_check:
	runs-on: ubuntu-latest
	needs:
	- test_matrix
	if: always()
	steps:
	- name: All required jobs and matrix versions passed
	if: ${{ !(contains(needs.*.result, 'failure')) }}
	run: exit 0
	- name: Some required jobs or matrix versions failed
	if: ${{ contains(needs.*.result, 'failure') }}
	run: exit 1

Provide feedback