build: fix dependabot pkg type, install pnpm in action

Signed-off-by: rare-magma <[email protected]>

.github/dependabot.yml

@@ -5,7 +5,7 @@
 
 version: 2
 updates:
-  - package-ecosystem: "pnpm" # See documentation for possible values
+  - package-ecosystem: "npm" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
       interval: "monthly"

.github/workflows/release.yml

@@ -12,14 +12,21 @@ jobs:
         uses: actions/checkout@v3
         with:
           persist-credentials: false
+
       - name: Setup Node
         uses: actions/setup-node@v3
         with:
           cache: "pnpm"
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+
       - name: Install dependencies
         run: pnpm clean-install
+
       - name: Run tests
         run: pnpm test -- --run
+
   release:
     name: release
     runs-on: ubuntu-latest
@@ -29,14 +36,15 @@ jobs:
         uses: actions/checkout@v3
         with:
           persist-credentials: false
-      # TODO workaround for https://github.com/cycjimmy/semantic-release-action/issues/159
+
       - name: Setup Node
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 20
           cache: "pnpm"
+
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@v3
+        uses: cycjimmy/semantic-release-action@v4
         with:
           extra_plugins: |
             @semantic-release/commit-analyzer