Tighten release tag glob, pin runner and action versions, skip main on push, add Node 26 (#88)

.github/workflows/release.yaml

@@ -2,7 +2,7 @@ name: Release
 
 on:
   push:
-    tags: ['v*']
+    tags: ['v[0-9]+.[0-9]+.[0-9]+']
 
 permissions:
   contents: read
@@ -10,12 +10,12 @@ permissions:
 
 jobs:
   publish:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.0.0
         with:
           cache: npm
           node-version: 24

.github/workflows/test.yaml

@@ -2,7 +2,7 @@ name: Test
 
 on:
   push:
-    branches: ['**']
+    branches-ignore: ['main']
   pull_request:
 
 permissions:
@@ -10,13 +10,13 @@ permissions:
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.0.0
         with:
           cache: npm
           node-version: 24
@@ -25,18 +25,18 @@ jobs:
       - run: npm run build
 
   test:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: 10
     strategy:
       fail-fast: false
       matrix:
         # The floor in package.json engines, every LTS above it, and current.
-        node: ['18', '20', '22', '24']
+        node: ['18', '20', '22', '24', '26']
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v7.0.0
         with:
           cache: npm
           node-version: ${{ matrix.node }}