diff --git a/.github/workflows/guard-main.yml b/.github/workflows/guard-main.yml
index b073e88..468881b 100644
--- a/.github/workflows/guard-main.yml
+++ b/.github/workflows/guard-main.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Check the source branch
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const pr = context.payload.pull_request
diff --git a/.github/workflows/release-preview.yml b/.github/workflows/release-preview.yml
index ab1fcfc..dc2f5ed 100644
--- a/.github/workflows/release-preview.yml
+++ b/.github/workflows/release-preview.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout merge commit
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -34,10 +34,10 @@ jobs:
           BASE_REF: ${{ github.event.pull_request.base.ref }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
@@ -57,7 +57,7 @@ jobs:
         # Pull requests from forks get a read-only token, so the comment (and
         # the dry run itself) is skipped there — the job summary still shows it.
         if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs')
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d1732de..ed3d24f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,23 +25,23 @@ jobs:
     steps:
       - name: Generate Token
         id: generate_token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.workflow_run.head_branch }}
           fetch-depth: 0
           token: ${{ steps.generate_token.outputs.token }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index efcfe95..b277153 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -20,13 +20,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
@@ -43,13 +43,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
@@ -66,13 +66,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
@@ -92,13 +92,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
@@ -117,13 +117,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: '24'
           cache: 'pnpm'
diff --git a/lib/vitest.config.ts b/lib/vitest.config.mts
similarity index 100%
rename from lib/vitest.config.ts
rename to lib/vitest.config.mts
diff --git a/lib/vitest.workspace.ts b/lib/vitest.workspace.mts
similarity index 97%
rename from lib/vitest.workspace.ts
rename to lib/vitest.workspace.mts
index bee06e4..622dce1 100644
--- a/lib/vitest.workspace.ts
+++ b/lib/vitest.workspace.mts
@@ -12,7 +12,7 @@ const project = (name: string, appDir: string) => {
   const modules = resolve(__dir, `../${appDir}/node_modules`);
 
   return {
-    extends: "./vitest.config.ts",
+    extends: "./vitest.config.mts",
     test: { name },
     resolve: {
       // Order matters: the more specific react-dom entry points must precede
diff --git a/testapp18/package.json b/testapp18/package.json
index 5101171..0e38397 100644
--- a/testapp18/package.json
+++ b/testapp18/package.json
@@ -2,6 +2,7 @@
   "name": "testapp18",
   "version": "0.0.1",
   "private": true,
+  "type": "module",
   "scripts": {
     "dev": "vite",
     "build": "vite build",
diff --git a/testapp18/vite.config.ts b/testapp18/vite.config.ts
index 77c4c1c..87d6461 100644
--- a/testapp18/vite.config.ts
+++ b/testapp18/vite.config.ts
@@ -6,7 +6,7 @@ export default defineConfig({
   plugins: [react()],
   resolve: {
     alias: {
-      "@": path.resolve(__dirname, "src"),
+      "@": path.resolve(import.meta.dirname, "src"),
     },
   },
 });
diff --git a/testapp19/package.json b/testapp19/package.json
index 31d0ae3..40ee893 100644
--- a/testapp19/package.json
+++ b/testapp19/package.json
@@ -2,6 +2,7 @@
   "name": "testapp19",
   "version": "0.0.1",
   "private": true,
+  "type": "module",
   "scripts": {
     "dev": "vite",
     "build": "vite build",
diff --git a/testapp19/vite.config.ts b/testapp19/vite.config.ts
index 77c4c1c..87d6461 100644
--- a/testapp19/vite.config.ts
+++ b/testapp19/vite.config.ts
@@ -6,7 +6,7 @@ export default defineConfig({
   plugins: [react()],
   resolve: {
     alias: {
-      "@": path.resolve(__dirname, "src"),
+      "@": path.resolve(import.meta.dirname, "src"),
     },
   },
 });