@el-j/google-sheet-translations 2.2.0-beta.2 → 2.2.0-beta.3

package/dist/esm/index.js

@@ -4,17 +4,24 @@ import path4 from "node:path";
 import { GoogleSpreadsheet as GoogleSpreadsheet2 } from "google-spreadsheet";
 
 // src/utils/auth.ts
-import { JWT } from "google-auth-library";
+import { GoogleAuth } from "google-auth-library";
 
 // src/utils/validateEnv.ts
 function validateCredentials() {
+  if (process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+    return {
+      GOOGLE_CLIENT_EMAIL: process.env.GOOGLE_CLIENT_EMAIL ?? "",
+      GOOGLE_PRIVATE_KEY: process.env.GOOGLE_PRIVATE_KEY ?? ""
+    };
+  }
   const requiredVars = ["GOOGLE_CLIENT_EMAIL", "GOOGLE_PRIVATE_KEY"];
   const missing = requiredVars.filter((v) => !process.env[v]);
   if (missing.length > 0) {
     throw new Error(
       `Missing required environment variables: ${missing.join(", ")}
 
-Make sure these are set in your .env file or environment.`
+Make sure these are set in your .env file or environment.
+Alternatively, set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation.`
     );
   }
   return {
@@ -23,6 +30,21 @@ Make sure these are set in your .env file or environment.`
   };
 }
 function validateEnv() {
+  const spreadsheetId = process.env.GOOGLE_SPREADSHEET_ID;
+  if (!spreadsheetId) {
+    throw new Error(
+      `Missing required environment variable: GOOGLE_SPREADSHEET_ID
+
+Make sure this is set in your .env file or environment.`
+    );
+  }
+  if (process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+    return {
+      GOOGLE_CLIENT_EMAIL: process.env.GOOGLE_CLIENT_EMAIL ?? "",
+      GOOGLE_PRIVATE_KEY: process.env.GOOGLE_PRIVATE_KEY ?? "",
+      GOOGLE_SPREADSHEET_ID: spreadsheetId
+    };
+  }
   const requiredVars = [
     "GOOGLE_CLIENT_EMAIL",
     "GOOGLE_PRIVATE_KEY",
@@ -33,24 +55,43 @@ function validateEnv() {
     throw new Error(
       `Missing required environment variables: ${missingVars.join(", ")}
 
-Make sure these are set in your .env file or environment.`
+Make sure these are set in your .env file or environment.
+Alternatively, set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation.`
     );
   }
   return {
     GOOGLE_CLIENT_EMAIL: process.env.GOOGLE_CLIENT_EMAIL,
     GOOGLE_PRIVATE_KEY: process.env.GOOGLE_PRIVATE_KEY,
-    GOOGLE_SPREADSHEET_ID: process.env.GOOGLE_SPREADSHEET_ID
+    GOOGLE_SPREADSHEET_ID: spreadsheetId
   };
 }
 
 // src/utils/auth.ts
+function normalizePrivateKey(key) {
+  let normalized = key;
+  const outer = key.trim();
+  if (outer.startsWith('"') && outer.endsWith('"') || outer.startsWith("'") && outer.endsWith("'")) {
+    normalized = outer.slice(1, -1);
+  }
+  normalized = normalized.replace(/\\n/g, "\n");
+  normalized = normalized.replace(/\r\n/g, "\n");
+  return normalized;
+}
+function buildGoogleAuth(scopes, credentials) {
+  if (credentials) {
+    return new GoogleAuth({ credentials, scopes });
+  }
+  return new GoogleAuth({ scopes });
+}
 function createAuthClient() {
+  if (process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+    return buildGoogleAuth(["https://www.googleapis.com/auth/spreadsheets"]);
+  }
   const { GOOGLE_CLIENT_EMAIL, GOOGLE_PRIVATE_KEY } = validateCredentials();
-  const normalizedKey = GOOGLE_PRIVATE_KEY.replace(/\\n/g, "\n");
-  return new JWT({
-    email: GOOGLE_CLIENT_EMAIL,
-    key: normalizedKey,
-    scopes: ["https://www.googleapis.com/auth/spreadsheets"]
+  const normalizedKey = normalizePrivateKey(GOOGLE_PRIVATE_KEY);
+  return buildGoogleAuth(["https://www.googleapis.com/auth/spreadsheets"], {
+    client_email: GOOGLE_CLIENT_EMAIL,
+    private_key: normalizedKey
   });
 }
 
@@ -1037,7 +1078,6 @@ async function createSpreadsheet(authClient, options = {}) {
     targetLocales = DEFAULT_TARGET_LOCALES,
     seedKeys = STARTER_KEYS
   } = options;
-  await authClient.authorize();
   const createRes = await withRetry(
     () => authClient.request({
       url: "https://sheets.googleapis.com/v4/spreadsheets",
@@ -1359,23 +1399,22 @@ async function getMultipleSpreadSheetsData(docTitles, options = {}) {
 }
 
 // src/utils/driveFolderScanner.ts
-import { GoogleAuth } from "google-auth-library";
 var SPREADSHEET_MIME = "application/vnd.google-apps.spreadsheet";
 var FOLDER_MIME = "application/vnd.google-apps.folder";
 var DRIVE_FILES_URL = "https://www.googleapis.com/drive/v3/files";
+var DRIVE_SCOPES = ["https://www.googleapis.com/auth/drive.readonly"];
 async function getAccessToken(credentials) {
   const clientEmail = credentials?.GOOGLE_CLIENT_EMAIL ?? process.env.GOOGLE_CLIENT_EMAIL;
   const privateKey = credentials?.GOOGLE_PRIVATE_KEY ?? process.env.GOOGLE_PRIVATE_KEY;
-  if (!clientEmail || !privateKey) {
+  let driveCredentials;
+  if (clientEmail && privateKey) {
+    driveCredentials = { client_email: clientEmail, private_key: normalizePrivateKey(privateKey) };
+  } else if (!process.env.GOOGLE_APPLICATION_CREDENTIALS) {
     throw new Error(
-      "Google Drive credentials required: GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY"
+      "Google Drive credentials required: set GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY, or set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation."
     );
   }
-  const normalizedKey = privateKey.replace(/\\n/g, "\n");
-  const auth = new GoogleAuth({
-    credentials: { client_email: clientEmail, private_key: normalizedKey },
-    scopes: ["https://www.googleapis.com/auth/drive.readonly"]
-  });
+  const auth = buildGoogleAuth(DRIVE_SCOPES, driveCredentials);
   const client = await auth.getClient();
   const tokenResponse = await client.getAccessToken();
   return tokenResponse.token;
@@ -1450,7 +1489,6 @@ import { createWriteStream, mkdirSync, existsSync, readdirSync, unlinkSync, stat
 import { join, dirname } from "node:path";
 import { pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
-import { GoogleAuth as GoogleAuth2 } from "google-auth-library";
 var DEFAULT_IMAGE_MIME_TYPES = [
   "image/jpeg",
   "image/jpg",
@@ -1474,19 +1512,19 @@ function normalizeExtension(name) {
   if (ext === "jpeg") ext = "jpg";
   return `${base}.${ext}`;
 }
+var DRIVE_SCOPES2 = ["https://www.googleapis.com/auth/drive.readonly"];
 async function getAccessToken2(credentials) {
   const clientEmail = credentials?.GOOGLE_CLIENT_EMAIL ?? process.env.GOOGLE_CLIENT_EMAIL;
   const privateKey = credentials?.GOOGLE_PRIVATE_KEY ?? process.env.GOOGLE_PRIVATE_KEY;
-  if (!clientEmail || !privateKey) {
+  let driveCredentials;
+  if (clientEmail && privateKey) {
+    driveCredentials = { client_email: clientEmail, private_key: normalizePrivateKey(privateKey) };
+  } else if (!process.env.GOOGLE_APPLICATION_CREDENTIALS) {
     throw new Error(
-      "Google Drive credentials required: GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY"
+      "Google Drive credentials required: set GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY, or set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation."
     );
   }
-  const normalizedKey = privateKey.replace(/\\n/g, "\n");
-  const auth = new GoogleAuth2({
-    credentials: { client_email: clientEmail, private_key: normalizedKey },
-    scopes: ["https://www.googleapis.com/auth/drive.readonly"]
-  });
+  const auth = buildGoogleAuth(DRIVE_SCOPES2, driveCredentials);
   const client = await auth.getClient();
   const tokenResponse = await client.getAccessToken();
   return tokenResponse.token;
@@ -1912,6 +1950,7 @@ var index_default = getSpreadSheetData;
 export {
   DEFAULT_IMAGE_EXTENSIONS,
   DEFAULT_WAIT_SECONDS,
+  buildGoogleAuth,
   buildManifest,
   convertFromDataJsonFormat,
   convertToDataJsonFormat,
@@ -1936,6 +1975,7 @@ export {
   mergeSheets,
   normalizeExtension,
   normalizeLocaleCode,
+  normalizePrivateKey,
   processRawRows,
   readPublicSheet,
   resolveLocaleWithFallback,

package/dist/index.d.ts

@@ -7,7 +7,7 @@ export type { SpreadsheetOptions } from './utils/configurationHandler';
 export { wait } from './utils/wait';
 export { withRetry } from './utils/rateLimiter';
 export { validateEnv } from './utils/validateEnv';
-export { createAuthClient } from './utils/auth';
+export { createAuthClient, buildGoogleAuth, normalizePrivateKey } from './utils/auth';
 export { convertToDataJsonFormat } from './utils/dataConverter/convertToDataJsonFormat';
 export { convertFromDataJsonFormat } from './utils/dataConverter/convertFromDataJsonFormat';
 export { findLocalChanges } from './utils/dataConverter/findLocalChanges';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGhF,YAAY,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAGzE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACtG,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGnF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,YAAY,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAG9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAC5E,YAAY,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAG/F,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC1G,YAAY,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxG,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACzE,YAAY,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGhF,YAAY,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAG5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAGzE,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACtG,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGnF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,YAAY,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAG9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAC5E,YAAY,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAG/F,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC1G,YAAY,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxG,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACzE,YAAY,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,eAAe,kBAAkB,CAAC"}

package/dist/index.js

@@ -32,6 +32,7 @@ var index_exports = {};
 __export(index_exports, {
   DEFAULT_IMAGE_EXTENSIONS: () => DEFAULT_IMAGE_EXTENSIONS,
   DEFAULT_WAIT_SECONDS: () => DEFAULT_WAIT_SECONDS,
+  buildGoogleAuth: () => buildGoogleAuth,
   buildManifest: () => buildManifest,
   convertFromDataJsonFormat: () => convertFromDataJsonFormat,
   convertToDataJsonFormat: () => convertToDataJsonFormat,
@@ -56,6 +57,7 @@ __export(index_exports, {
   mergeSheets: () => mergeSheets,
   normalizeExtension: () => normalizeExtension,
   normalizeLocaleCode: () => normalizeLocaleCode,
+  normalizePrivateKey: () => normalizePrivateKey,
   processRawRows: () => processRawRows,
   readPublicSheet: () => readPublicSheet,
   resolveLocaleWithFallback: () => resolveLocaleWithFallback,
@@ -85,13 +87,20 @@ var import_google_auth_library = require("google-auth-library");
 
 // src/utils/validateEnv.ts
 function validateCredentials() {
+  if (process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+    return {
+      GOOGLE_CLIENT_EMAIL: process.env.GOOGLE_CLIENT_EMAIL ?? "",
+      GOOGLE_PRIVATE_KEY: process.env.GOOGLE_PRIVATE_KEY ?? ""
+    };
+  }
   const requiredVars = ["GOOGLE_CLIENT_EMAIL", "GOOGLE_PRIVATE_KEY"];
   const missing = requiredVars.filter((v) => !process.env[v]);
   if (missing.length > 0) {
     throw new Error(
       `Missing required environment variables: ${missing.join(", ")}
 
-Make sure these are set in your .env file or environment.`
+Make sure these are set in your .env file or environment.
+Alternatively, set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation.`
     );
   }
   return {
@@ -100,6 +109,21 @@ Make sure these are set in your .env file or environment.`
   };
 }
 function validateEnv() {
+  const spreadsheetId = process.env.GOOGLE_SPREADSHEET_ID;
+  if (!spreadsheetId) {
+    throw new Error(
+      `Missing required environment variable: GOOGLE_SPREADSHEET_ID
+
+Make sure this is set in your .env file or environment.`
+    );
+  }
+  if (process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+    return {
+      GOOGLE_CLIENT_EMAIL: process.env.GOOGLE_CLIENT_EMAIL ?? "",
+      GOOGLE_PRIVATE_KEY: process.env.GOOGLE_PRIVATE_KEY ?? "",
+      GOOGLE_SPREADSHEET_ID: spreadsheetId
+    };
+  }
   const requiredVars = [
     "GOOGLE_CLIENT_EMAIL",
     "GOOGLE_PRIVATE_KEY",
@@ -110,24 +134,43 @@ function validateEnv() {
     throw new Error(
       `Missing required environment variables: ${missingVars.join(", ")}
 
-Make sure these are set in your .env file or environment.`
+Make sure these are set in your .env file or environment.
+Alternatively, set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation.`
     );
   }
   return {
     GOOGLE_CLIENT_EMAIL: process.env.GOOGLE_CLIENT_EMAIL,
     GOOGLE_PRIVATE_KEY: process.env.GOOGLE_PRIVATE_KEY,
-    GOOGLE_SPREADSHEET_ID: process.env.GOOGLE_SPREADSHEET_ID
+    GOOGLE_SPREADSHEET_ID: spreadsheetId
   };
 }
 
 // src/utils/auth.ts
+function normalizePrivateKey(key) {
+  let normalized = key;
+  const outer = key.trim();
+  if (outer.startsWith('"') && outer.endsWith('"') || outer.startsWith("'") && outer.endsWith("'")) {
+    normalized = outer.slice(1, -1);
+  }
+  normalized = normalized.replace(/\\n/g, "\n");
+  normalized = normalized.replace(/\r\n/g, "\n");
+  return normalized;
+}
+function buildGoogleAuth(scopes, credentials) {
+  if (credentials) {
+    return new import_google_auth_library.GoogleAuth({ credentials, scopes });
+  }
+  return new import_google_auth_library.GoogleAuth({ scopes });
+}
 function createAuthClient() {
+  if (process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+    return buildGoogleAuth(["https://www.googleapis.com/auth/spreadsheets"]);
+  }
   const { GOOGLE_CLIENT_EMAIL, GOOGLE_PRIVATE_KEY } = validateCredentials();
-  const normalizedKey = GOOGLE_PRIVATE_KEY.replace(/\\n/g, "\n");
-  return new import_google_auth_library.JWT({
-    email: GOOGLE_CLIENT_EMAIL,
-    key: normalizedKey,
-    scopes: ["https://www.googleapis.com/auth/spreadsheets"]
+  const normalizedKey = normalizePrivateKey(GOOGLE_PRIVATE_KEY);
+  return buildGoogleAuth(["https://www.googleapis.com/auth/spreadsheets"], {
+    client_email: GOOGLE_CLIENT_EMAIL,
+    private_key: normalizedKey
   });
 }
 
@@ -1114,7 +1157,6 @@ async function createSpreadsheet(authClient, options = {}) {
     targetLocales = DEFAULT_TARGET_LOCALES,
     seedKeys = STARTER_KEYS
   } = options;
-  await authClient.authorize();
   const createRes = await withRetry(
     () => authClient.request({
       url: "https://sheets.googleapis.com/v4/spreadsheets",
@@ -1436,23 +1478,22 @@ async function getMultipleSpreadSheetsData(docTitles, options = {}) {
 }
 
 // src/utils/driveFolderScanner.ts
-var import_google_auth_library2 = require("google-auth-library");
 var SPREADSHEET_MIME = "application/vnd.google-apps.spreadsheet";
 var FOLDER_MIME = "application/vnd.google-apps.folder";
 var DRIVE_FILES_URL = "https://www.googleapis.com/drive/v3/files";
+var DRIVE_SCOPES = ["https://www.googleapis.com/auth/drive.readonly"];
 async function getAccessToken(credentials) {
   const clientEmail = credentials?.GOOGLE_CLIENT_EMAIL ?? process.env.GOOGLE_CLIENT_EMAIL;
   const privateKey = credentials?.GOOGLE_PRIVATE_KEY ?? process.env.GOOGLE_PRIVATE_KEY;
-  if (!clientEmail || !privateKey) {
+  let driveCredentials;
+  if (clientEmail && privateKey) {
+    driveCredentials = { client_email: clientEmail, private_key: normalizePrivateKey(privateKey) };
+  } else if (!process.env.GOOGLE_APPLICATION_CREDENTIALS) {
     throw new Error(
-      "Google Drive credentials required: GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY"
+      "Google Drive credentials required: set GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY, or set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation."
     );
   }
-  const normalizedKey = privateKey.replace(/\\n/g, "\n");
-  const auth = new import_google_auth_library2.GoogleAuth({
-    credentials: { client_email: clientEmail, private_key: normalizedKey },
-    scopes: ["https://www.googleapis.com/auth/drive.readonly"]
-  });
+  const auth = buildGoogleAuth(DRIVE_SCOPES, driveCredentials);
   const client = await auth.getClient();
   const tokenResponse = await client.getAccessToken();
   return tokenResponse.token;
@@ -1527,7 +1568,6 @@ var import_node_fs6 = require("node:fs");
 var import_node_path5 = require("node:path");
 var import_promises4 = require("node:stream/promises");
 var import_node_stream = require("node:stream");
-var import_google_auth_library3 = require("google-auth-library");
 var DEFAULT_IMAGE_MIME_TYPES = [
   "image/jpeg",
   "image/jpg",
@@ -1551,19 +1591,19 @@ function normalizeExtension(name) {
   if (ext === "jpeg") ext = "jpg";
   return `${base}.${ext}`;
 }
+var DRIVE_SCOPES2 = ["https://www.googleapis.com/auth/drive.readonly"];
 async function getAccessToken2(credentials) {
   const clientEmail = credentials?.GOOGLE_CLIENT_EMAIL ?? process.env.GOOGLE_CLIENT_EMAIL;
   const privateKey = credentials?.GOOGLE_PRIVATE_KEY ?? process.env.GOOGLE_PRIVATE_KEY;
-  if (!clientEmail || !privateKey) {
+  let driveCredentials;
+  if (clientEmail && privateKey) {
+    driveCredentials = { client_email: clientEmail, private_key: normalizePrivateKey(privateKey) };
+  } else if (!process.env.GOOGLE_APPLICATION_CREDENTIALS) {
     throw new Error(
-      "Google Drive credentials required: GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY"
+      "Google Drive credentials required: set GOOGLE_CLIENT_EMAIL and GOOGLE_PRIVATE_KEY, or set GOOGLE_APPLICATION_CREDENTIALS for Workload Identity Federation."
     );
   }
-  const normalizedKey = privateKey.replace(/\\n/g, "\n");
-  const auth = new import_google_auth_library3.GoogleAuth({
-    credentials: { client_email: clientEmail, private_key: normalizedKey },
-    scopes: ["https://www.googleapis.com/auth/drive.readonly"]
-  });
+  const auth = buildGoogleAuth(DRIVE_SCOPES2, driveCredentials);
   const client = await auth.getClient();
   const tokenResponse = await client.getAccessToken();
   return tokenResponse.token;
@@ -1990,6 +2030,7 @@ var index_default = getSpreadSheetData;
 0 && (module.exports = {
   DEFAULT_IMAGE_EXTENSIONS,
   DEFAULT_WAIT_SECONDS,
+  buildGoogleAuth,
   buildManifest,
   convertFromDataJsonFormat,
   convertToDataJsonFormat,
@@ -2013,6 +2054,7 @@ var index_default = getSpreadSheetData;
   mergeSheets,
   normalizeExtension,
   normalizeLocaleCode,
+  normalizePrivateKey,
   processRawRows,
   readPublicSheet,
   resolveLocaleWithFallback,

package/dist/utils/auth.d.ts

@@ -1,8 +1,48 @@
-import { JWT } from "google-auth-library";
+import { GoogleAuth } from "google-auth-library";
 /**
- * Creates and returns a JWT auth client for Google Sheets API
- * @returns JWT authentication client
+ * Normalizes a private key string from the many different ways secret-storage
+ * systems (GitHub Secrets, CI env vars, secret managers) encode it.
+ *
+ * Handles all of the following formats so the caller doesn't need to care
+ * whether the value came from a GitHub Secret, a plain env var, a `.env` file
+ * or any other source:
+ *
+ * - Real newlines  →  left as-is
+ * - Literal `\n` two-char sequences  →  converted to real newlines
+ * - Surrounding double or single quotes added by some tools  →  stripped
+ *   (leading/trailing whitespace outside the quotes is also stripped)
+ * - Windows-style `\r\n` line endings  →  normalised to `\n`
  */
-export declare function createAuthClient(): JWT;
+export declare function normalizePrivateKey(key: string): string;
+/**
+ * Low-level factory: creates a `GoogleAuth` instance for a given set of scopes.
+ *
+ * - When `credentials` are supplied, uses them directly (service-account key mode).
+ * - When `credentials` is omitted, the instance relies on Application Default
+ *   Credentials, i.e. the file pointed to by `GOOGLE_APPLICATION_CREDENTIALS`
+ *   (Workload Identity Federation, `gcloud auth application-default login`, etc.).
+ *
+ * @internal Shared by Drive utilities and `createAuthClient()`. Import
+ *   `createAuthClient()` for the standard Sheets use-case.
+ */
+export declare function buildGoogleAuth(scopes: string[], credentials?: {
+    client_email: string;
+    private_key: string;
+}): GoogleAuth;
+/**
+ * Creates and returns a GoogleAuth client for Google Sheets API.
+ *
+ * Supports two authentication modes (checked in order):
+ *
+ * 1. **Workload Identity Federation / Application Default Credentials (ADC)**:
+ *    Set `GOOGLE_APPLICATION_CREDENTIALS` to the path of a credential JSON file
+ *    (e.g. written by `google-github-actions/auth`). No service-account key needed.
+ *
+ * 2. **Service account key** (classic):
+ *    Set `GOOGLE_CLIENT_EMAIL` and `GOOGLE_PRIVATE_KEY` environment variables.
+ *
+ * @returns GoogleAuth client usable with google-spreadsheet and other Google APIs
+ */
+export declare function createAuthClient(): GoogleAuth;
 export default createAuthClient;
 //# sourceMappingURL=auth.d.ts.map

package/dist/utils/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAG1C;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,GAAG,CAatC;AAED,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/utils/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAuBvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,MAAM,EAAE,EAChB,WAAW,CAAC,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzD,UAAU,CAKZ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,CAmB7C;AAED,eAAe,gBAAgB,CAAC"}

package/dist/utils/driveFolderScanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"driveFolderScanner.d.ts","sourceRoot":"","sources":["../../src/utils/driveFolderScanner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AA8HD;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAKjC"}
+{"version":3,"file":"driveFolderScanner.d.ts","sourceRoot":"","sources":["../../src/utils/driveFolderScanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAgID;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAKjC"}

package/dist/utils/driveImageSync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"driveImageSync.d.ts","sourceRoot":"","sources":["../../src/utils/driveImageSync.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAwCD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOvD;AAyJD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CA4F/B"}
+{"version":3,"file":"driveImageSync.d.ts","sourceRoot":"","sources":["../../src/utils/driveImageSync.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAwCD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOvD;AA2JD;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CA4F/B"}

package/dist/utils/spreadsheetCreator.d.ts

@@ -1,4 +1,4 @@
-import type { JWT } from "google-auth-library";
+import type { GoogleAuth } from "google-auth-library";
 export interface CreateSpreadsheetOptions {
     /** Spreadsheet title (default: "google-sheet-translations") */
     title?: string;
@@ -19,5 +19,5 @@ export interface CreatedSpreadsheetInfo {
  *
  * Returns the spreadsheet ID and URL.
  */
-export declare function createSpreadsheet(authClient: JWT, options?: CreateSpreadsheetOptions): Promise<CreatedSpreadsheetInfo>;
+export declare function createSpreadsheet(authClient: GoogleAuth, options?: CreateSpreadsheetOptions): Promise<CreatedSpreadsheetInfo>;
 //# sourceMappingURL=spreadsheetCreator.d.ts.map

package/dist/utils/spreadsheetCreator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spreadsheetCreator.d.ts","sourceRoot":"","sources":["../../src/utils/spreadsheetCreator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AA2C/C,MAAM,WAAW,wBAAwB;IACxC,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACZ;AAiBD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,GAAG,EACf,OAAO,GAAE,wBAA6B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAmHjC"}
+{"version":3,"file":"spreadsheetCreator.d.ts","sourceRoot":"","sources":["../../src/utils/spreadsheetCreator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AA2CtD,MAAM,WAAW,wBAAwB;IACxC,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mGAAmG;IACnG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACZ;AAiBD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,wBAA6B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAkHjC"}

package/dist/utils/validateEnv.d.ts

@@ -1,12 +1,16 @@
 import type { GoogleEnvVars } from "../types";
 /**
- * Validates that the Google service-account credentials are present.
+ * Validates that Google service-account credentials are present.
  * Does NOT require GOOGLE_SPREADSHEET_ID — the caller may create one on first run.
+ *
+ * When `GOOGLE_APPLICATION_CREDENTIALS` is set (Workload Identity Federation / ADC),
+ * `GOOGLE_CLIENT_EMAIL` and `GOOGLE_PRIVATE_KEY` are not required.
  */
 export declare function validateCredentials(): Pick<GoogleEnvVars, 'GOOGLE_CLIENT_EMAIL' | 'GOOGLE_PRIVATE_KEY'>;
 /**
- * Validates all three required Google Sheets environment variables.
- * Throws if any are missing.
+ * Validates all Google Sheets environment variables, including the spreadsheet ID.
+ * Throws if GOOGLE_SPREADSHEET_ID is missing, or if neither service-account key
+ * credentials nor GOOGLE_APPLICATION_CREDENTIALS (WIF/ADC) are set.
  */
 export declare function validateEnv(): GoogleEnvVars;
 export default validateEnv;

package/dist/utils/validateEnv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validateEnv.d.ts","sourceRoot":"","sources":["../../src/utils/validateEnv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,aAAa,EAAE,qBAAqB,GAAG,oBAAoB,CAAC,CAYvG;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,aAAa,CAiB3C;AAED,eAAe,WAAW,CAAC"}
+{"version":3,"file":"validateEnv.d.ts","sourceRoot":"","sources":["../../src/utils/validateEnv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,aAAa,EAAE,qBAAqB,GAAG,oBAAoB,CAAC,CAoBvG;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,aAAa,CAiC3C;AAED,eAAe,WAAW,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@el-j/google-sheet-translations",
-  "version": "2.2.0-beta.2",
+  "version": "2.2.0-beta.3",
   "description": "A package to manage translations stored in Google Spreadsheets",
   "main": "dist/index.js",
   "module": "dist/esm/index.js",
@@ -30,7 +30,7 @@
     "clean": "rimraf dist",
     "prebuild": "npm run clean",
     "prepare": "npm run build",
-    "test": "jest",
+    "test": "vitest run --coverage",
     "lint": "eslint src/ --ext .ts --max-warnings 0",
     "dev": "tsc --watch",
     "release": "semantic-release",
@@ -38,7 +38,7 @@
     "docs:dev": "vitepress dev website",
     "docs:build": "vitepress build website",
     "docs:preview": "vitepress preview website",
-    "test:integration": "INTEGRATION=true jest --testPathPatterns=integration --testTimeout=60000 --coverage=false",
+    "test:integration": "INTEGRATION=true vitest run tests/integration --testTimeout=60000",
     "sync:translations": "node scripts/sync-demo-translations.mjs",
     "changelog:preview": "node scripts/changelog-preview.mjs"
   },
@@ -61,7 +61,7 @@
   "license": "MIT",
   "dependencies": {
     "@actions/core": "^3.0.0",
-    "google-auth-library": "^10.6.1",
+    "google-auth-library": "^10.6.2",
     "google-spreadsheet": "^5.2.0"
   },
   "peerDependencies": {
@@ -75,29 +75,29 @@
     "@semantic-release/github": "^12.0.6",
     "@semantic-release/npm": "^13.1.5",
     "@semantic-release/release-notes-generator": "^14.1.0",
-    "@types/jest": "^30.0.0",
-    "@types/node": "^25.5.0",
-    "@typescript-eslint/eslint-plugin": "^8.57.0",
-    "@typescript-eslint/parser": "^8.57.0",
-    "esbuild": "^0.27.4",
-    "conventional-changelog-conventionalcommits": "^9.3.0",
-    "dotenv": "17.3.1",
-    "eslint": "^10.0.3",
-    "jest": "^30.3.0",
-    "jest-mock-extended": "^4.0.0",
+    "@types/node": "^25.5.1",
+    "@typescript-eslint/eslint-plugin": "^8.58.0",
+    "@typescript-eslint/parser": "^8.58.0",
+    "@vitest/coverage-v8": "^4.1.2",
+    "conventional-changelog-conventionalcommits": "^9.3.1",
+    "dotenv": "17.4.0",
+    "esbuild": "^0.28.0",
+    "eslint": "^10.1.0",
+    "npm-check-updates": "^20.0.0",
     "rimraf": "^6.1.3",
     "semantic-release": "^25.0.3",
-    "ts-jest": "^29.4.6",
     "ts-node": "^10.9.2",
-    "typescript": "^5.9.3",
-    "vitepress": "^1.6.4"
+    "typescript": "^6.0.2",
+    "vitepress": "^1.6.4",
+    "vitest": "^4.1.2",
+    "vitest-mock-extended": "^3.1.1"
   },
   "engines": {
     "node": ">=18.0.0"
   },
   "overrides": {
     "google-spreadsheet": {
-      "google-auth-library": "^10.6.1"
+      "google-auth-library": "^10.6.2"
     },
     "vite": {
       "esbuild": "^0.25.0"