INTER-2697: ci: add daily and per-PR pnpm audit check

.github/workflows/audit.yml

@@ -0,0 +1,29 @@
+# Fail on critical advisories in runtime dependencies.
+# Runs daily too, because new advisories appear without any code change.
+# https://pnpm.io/cli/audit
+name: Dependency audit
+on:
+  pull_request:
+  schedule:
+    - cron: '17 6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  audit:
+    name: pnpm audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+
+      # Reads pnpm-lock.yaml, no install needed
+      - name: Audit runtime dependencies
+        run: pnpm audit --prod --audit-level critical

examples/next-appDir/package.json

@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@fingerprint/react": "workspace:*",
-    "next": "16.2.10"
+    "next": "16.4.2"
   },
   "devDependencies": {
     "@types/node": "catalog:",

examples/next/package.json

@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@fingerprint/react": "workspace:*",
-    "next": "16.2.10"
+    "next": "16.4.2"
   },
   "devDependencies": {
     "@types/node": "catalog:",