Bump borp from 0.16.0 to 0.17.0 #349

	name: CI

	on:
	push:
	paths-ignore:
	- 'docs/**'
	- '*.md'
	pull_request:
	paths-ignore:
	- 'docs/**'
	- '*.md'

	# This allows a subsequently queued workflow run to interrupt previous runs
	concurrency:
	group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label \|\| github.head_ref \|\| github.ref }}"
	cancel-in-progress: true

	jobs:
	dependency-review:
	name: Dependency Review
	if: github.event_name == 'pull_request'
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Check out repo
	uses: actions/checkout@v4
	with:
	persist-credentials: false

	- name: Dependency review
	uses: actions/dependency-review-action@v4

	test:
	name: Test
	runs-on: ubuntu-latest
	permissions:
	contents: read
	strategy:
	fail-fast: false
	matrix:
	node-version: [18, 20]
	steps:
	- name: Check out repo
	uses: actions/checkout@v4
	with:
	persist-credentials: false

	- name: Setup Node ${{ matrix.node-version }}
	uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node-version }}

	- name: Install dependencies
	run: npm install --ignore-scripts
	env:
	NODE_ENV: development

	- name: Lint-CI
	run: npm run lint-ci

	- name: Test-Types
	run: npm run test-types

	- name: Test-CI
	run: npm run test-ci

	automerge:
	name: Automerge Dependabot PRs
	if: >
	github.event_name == 'pull_request' &&
	github.event.pull_request.user.login == 'dependabot[bot]'
	needs: test
	permissions:
	pull-requests: write
	contents: write
	runs-on: ubuntu-latest
	steps:
	- uses: fastify/github-action-merge-dependabot@v3
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback