chore: update deps and actions

.github/workflows/ci.yml

@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version-file: 'package.json'
       - run: npm ci
@@ -32,7 +32,6 @@ jobs:
       fail-fast: false
       matrix:
         node-version:
-          - 20.x
           - 22.x
           - 24.x
     permissions:
@@ -42,7 +41,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci
@@ -61,7 +60,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version-file: 'package.json'
       - run: npm ci

.github/workflows/lockfile.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Create GitHub App Token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         id: app-token
         with:
           app-id: ${{ vars.LOCKFILE_BOT_APP_ID }}

eslint.config.js

@@ -1,12 +1,11 @@
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
-import { includeIgnoreFile } from '@eslint/compat'
 import js from '@eslint/js'
 import pluginQuery from '@tanstack/eslint-plugin-query'
 import pluginVitest from '@vitest/eslint-plugin'
 import pluginReactHooks from 'eslint-plugin-react-hooks'
 import pluginTestingLibrary from 'eslint-plugin-testing-library'
-import { defineConfig } from 'eslint/config'
+import { defineConfig, includeIgnoreFile } from 'eslint/config'
 import globals from 'globals'
 import tseslint from 'typescript-eslint'
 
@@ -34,6 +33,20 @@ export default defineConfig(
 			pluginReactHooks.configs.flat.recommended,
 		],
 		rules: {
+			'@tanstack/query/exhaustive-deps': [
+				'error',
+				{
+					allowlist: {
+						variables: [
+							'clientApi',
+							'mapServerApi',
+							'projectApi',
+							'projectApi[docType]',
+						],
+						types: ['MapeoClientApi', 'MapServerApi', 'MapeoProjectApi'],
+					},
+				},
+			],
 			'@typescript-eslint/array-type': ['warn', { default: 'generic' }],
 			// Allow unused vars if prefixed with `_` (https://typescript-eslint.io/rules/no-unused-vars/)
 			'@typescript-eslint/no-unused-vars': [