Repository navigation
CHORE - Bump the minor-patch group across 1 directory with 3 updates #32
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Continuous integration for pull requests and pushes to the default branch. | |
| # Fails when formatting, lint, type check, tests, build, the built-package | |
| # smoke test, the production dependency audit, the pull request commit lint | |
| # or `openspec validate` fails. | |
| # Read-only permissions. See openspec/changes/add-release-pipeline. | |
| name: CI | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| jobs: | |
| format: | |
| name: Format check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm format:check | |
| lint: | |
| name: Lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm lint | |
| typecheck: | |
| name: Type check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm typecheck | |
| test: | |
| name: Test (Node ${{ matrix.node }}) | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| node: ['24.7.0', '24'] | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm test | |
| build-smoke: | |
| name: Build and smoke test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm build | |
| - run: pnpm smoke | |
| audit: | |
| name: Production audit | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm audit:prod | |
| commitlint: | |
| name: Commit lint | |
| if: github.event_name == 'pull_request' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| with: | |
| fetch-depth: 0 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - run: pnpm exec commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose | |
| fallow: | |
| name: Fallow | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| steps: | |
| - uses: actions/checkout@v7 | |
| with: | |
| fetch-depth: 0 | |
| - uses: pnpm/action-setup@v6 | |
| with: | |
| version: 12.8.1 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| cache: pnpm | |
| - run: pnpm install --frozen-lockfile | |
| - name: Run Fallow audit | |
| env: | |
| FALLOW_TELEMETRY_DISABLED: '1' | |
| DO_NOT_TRACK: '1' | |
| run: | | |
| set +e | |
| npx --yes fallow@3.37.0 audit --format json -o fallow-results.json | |
| echo $? > fallow-exit.txt | |
| - name: Render Fallow summary | |
| if: always() | |
| env: | |
| FALLOW_TELEMETRY_DISABLED: '1' | |
| DO_NOT_TRACK: '1' | |
| run: npx --yes fallow@3.37.0 report --from fallow-results.json --format github-summary > fallow-summary.md | |
| - name: Post PR comment | |
| if: always() && github.event_name == 'pull_request' | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: gh pr comment ${{ github.event.pull_request.number }} --body-file fallow-summary.md | |
| - name: Enforce Fallow result | |
| run: exit $(cat fallow-exit.txt) | |
| openspec: | |
| name: OpenSpec validate | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 24.7.0 | |
| - run: npx --yes @fission-ai/openspec@1.14.0 validate --all --strict |