dep fixes

.github/workflows/node-aught.yml

@@ -2,10 +2,20 @@ name: 'Tests: node.js < 10'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
     with:
       range: '< 10'
       type: minors
       command: npm run tests-only
+
+  node:
+    name: 'node < 10'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true

.github/workflows/node-pretest.yml

@@ -2,6 +2,9 @@ name: 'Tests: pretest/posttest'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/pretest.yml@main

.github/workflows/node-tens.yml

@@ -1,11 +1,21 @@
-name: 'Tests: node.js >= 10'
+name: 'Tests: node.js 10 - 20'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
     with:
-      range: '>= 10'
+      range: '>= 10 < 20'
       type: minors
       command: npm run tests-only
+
+  node:
+    name: 'node 10 - 20'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true

.github/workflows/node-twenties.yml

@@ -0,0 +1,21 @@
+name: 'Tests: node.js >= 20'
+
+on: [pull_request, push]
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    uses: ljharb/actions/.github/workflows/node.yml@main
+    with:
+      range: '>= 20'
+      type: minors
+      command: npm run tests-only
+
+  node:
+    name: 'node >= 20'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true

.github/workflows/rebase.yml

@@ -2,6 +2,10 @@ name: Automatic Rebase
 
 on: [pull_request_target]
 
+permissions:
+  contents: write  # for ljharb/rebase to push code to rebase
+  pull-requests: read  # for ljharb/rebase to get info about PR
+
 jobs:
   _:
     uses: ljharb/actions/.github/workflows/rebase.yml@main

.github/workflows/require-allow-edits.yml

@@ -2,8 +2,16 @@ name: Require “Allow Edits”
 
 on: [pull_request_target]
 
+permissions:
+  contents: read
+
+cache-mode: none
+
 jobs:
   _:
+    permissions:
+      pull-requests: read  # for ljharb/require-allow-edits to check 'allow edits' on PR
+
     name: "Require “Allow Edits”"
 
     runs-on: ubuntu-latest

implementation.js

@@ -2,10 +2,10 @@
 
 'use strict';
 
-var callBound = require('call-bind/callBound');
-var RequireObjectCoercible = require('es-abstract/2024/RequireObjectCoercible');
-var ToString = require('es-abstract/2024/ToString');
-var ToIntegerOrInfinity = require('es-abstract/2024/ToIntegerOrInfinity');
+var callBound = require('call-bound');
+var RequireObjectCoercible = require('es-abstract/2025/RequireObjectCoercible');
+var ToString = require('es-abstract/2025/ToString');
+var ToIntegerOrInfinity = require('es-abstract/2025/ToIntegerOrInfinity');
 var StringCharCodeAt = callBound('String.prototype.charCodeAt');
 
 module.exports = function codePointAt(position) {

package.json

@@ -38,19 +38,18 @@
 		"posttest": "npx npm@'>=10.2' audit --production"
 	},
 	"dependencies": {
-		"call-bind": "^1.0.7",
-		"es-abstract": "^1.23.3"
+		"call-bound": "^1.0.4",
+		"define-properties": "^1.2.1",
+		"es-abstract": "^1.24.2"
 	},
 	"devDependencies": {
 		"@es-shims/api": "^2.5.1",
-		"@ljharb/eslint-config": "^21.1.1",
-		"define-properties": "^1.2.1",
-		"eslint": "=8.8.0",
-		"function-bind": "^1.1.2",
+		"@ljharb/eslint-config": "^22.2.4",
+		"call-bind": "^1.0.9",
+		"eslint": "^8.57.1",
 		"functions-have-names": "^1.2.3",
-		"has-strict-mode": "^1.0.1",
-		"istanbul": "^0.4.5",
-		"tape": "^5.9.0"
+		"has-strict-mode": "^1.1.0",
+		"tape": "^5.10.2"
 	},
 	"directories": {
 		"test": "tests"