Fix audit issues

.circleci/config.yml

@@ -1,14 +1,14 @@
 version: 2.1
 orbs:
-  node: circleci/node@5.0.3
+  node: circleci/node@7.2.1
 jobs:
   build:
     docker:
       - image: cimg/base:stable
     steps:
       - checkout
       - node/install:
-          node-version: '14.19.3'
+          node-version: '20'
       - node/install-packages:
           cache-path: ~/project/node_modules
           override-ci-command: npm install

.nsprc

@@ -1,10 +1 @@
-{
-    "GHSA-f8q6-p94x-37v3": {
-            "active": true,
-            "notes": "A long dependency chain from 'bunyan' till 'minimatch'. 'bunyan' uses 'minimatch' only via an optional dependency 'mv', which we don't install. So not affected"
-    },
-    "GHSA-27h2-hvpr-p74q": {
-        "active": true,
-        "notes": "The vulnerability is in maester-client v4.x because of cross-dependency with component-commons-library. Maester-client of v4.x doesn't use jwt.verify function. So not affected"
-    }
-}
+{}

CHANGELOG.md

@@ -1,3 +1,11 @@
+# 6.0.1 (January 31, 2026)
+* Updated development dependencies to support Node.js v20 and TypeScript v5.9.
+* Resolved TypeScript compilation errors related to `jsonwebtoken.sign` and `dom` types.
+* Added explicit return type annotations to `deleteOne` and `deleteAllByParams` to fix portable type error (TS2742).
+* Updated CircleCI configuration to use Node.js v20 and the latest `circleci/node` orb.
+* Added `engines` field to `package.json` to specify Node.js `^20.0.0` compatibility.
+* Fix audit vulnerability issues
+
 # 6.0.0 (March 21, 2025)
 * (breaking change) Bumped Axios from 0.27.2 to 1.8.2 ([#45](https://github.com/elasticio/maester-client/issues/45)) which brings several potential breaking changes. For example, Axios headers return as an Axios Headers instance, not as a plain JSON object.