Updated dependencies

AutoPrefixer   10.4.13 ->  10.4.17
cssnano         5.1.14 ->   6.0.3
DOMPurify       2.4.3  ->   3.0.8
Firebase       9.16.0  ->  10.8.0
FontAwesome     6.2.1  ->   6.5.1
GSAP           3.11.4  ->  3.12.5
PostCSS         8.4.21 ->   8.4.33
Preact        10.13.1  -> 10.19.3
React Timeago   7.1.0 ->    7.2.0
Sass           1.57.1  ->  1.70.0
TailwindCSS     3.2.4  ->   3.4.1
TypeScript      4.9.4  ->   5.3.3

.github/workflows/build+deploy.yml

@@ -22,21 +22,27 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - name: Set up NodeJS v16
+      - name: Set up NodeJS v20
         uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 20
           cache: npm
 
       - name: Cache .next
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ${{ github.workspace }}/.next/cache
           # Generate a new cache whenever packages or source files change
           key: ${{ runner.os }}-nextjs-${{ hashFiles('package-lock.json') }}-${{ hashFiles('public/**', 'src/**', '*.m?js', 'tsconfig.json', '!.*rc.m?js') }}
           # If source files changed but packages didn't, rebuild from a prior cache
           restore-keys: ${{ runner.os }}-nextjs-${{ hashFiles('package-lock.json') }}-
 
+      - name: Add dev/test/prod API masks
+        run: |
+          echo "::add-mask::${{ secrets.API_URL_DEV }}"
+          echo "::add-mask::${{ secrets.API_URL_TEST }}"
+          echo "::add-mask::${{ secrets.API_URL_PROD }}"
+
       - name: Build & bundle into gzipped tar
         run: |
           cat <<'EOF' > .env-cmdrc.js