chore(deps): resolve all open security alerts + fix flaky 6h CI hang

.github/workflows/ci.yml

@@ -5,10 +5,18 @@ on:
     branches: [main]
   pull_request:
 
+# Keep apt-get / playwright --with-deps from stalling on an interactive
+# prompt (the root cause of past 6h CI hangs on the browser-install step).
+env:
+  DEBIAN_FRONTEND: noninteractive
+
 jobs:
   unit:
     name: Unit tests
     runs-on: ubuntu-latest
+    # A stalled apt/playwright install should fail fast, not burn the full
+    # 6h default job budget. The unit suite itself runs in seconds.
+    timeout-minutes: 20
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-node@v6
@@ -25,6 +33,7 @@ jobs:
     name: ci-smoke (${{ matrix.browser }})
     needs: unit
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     strategy:
       fail-fast: false
       matrix:

.github/workflows/publish.yml

@@ -7,11 +7,14 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     permissions:
       contents: read
       id-token: write
     env:
       FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+      # Prevent apt-get / playwright --with-deps stalling on a prompt.
+      DEBIAN_FRONTEND: noninteractive
     steps:
       - uses: actions/checkout@v6
 

example/package.json

@@ -11,5 +11,8 @@
     "@argo-video/cli": "latest",
     "@playwright/test": "^1.50.0",
     "playwright": "^1.50.0"
+  },
+  "overrides": {
+    "tar": "^7.5.16"
   }
 }