Configure 0.x graduation guard and fix tag format #16

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ci-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	commitlint:
	name: Commitlint
	runs-on: ubuntu-latest
	if: github.event_name == 'pull_request'
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: pnpm/action-setup@v4
	- uses: actions/setup-node@v4
	with:
	node-version: '22'
	cache: 'pnpm'
	- run: pnpm install --frozen-lockfile
	- name: Validate PR commits
	run: \|
	npx commitlint \
	--from "${{ github.event.pull_request.base.sha }}" \
	--to "${{ github.event.pull_request.head.sha }}" \
	--verbose

	quality:
	name: Quality Gates
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v4
	- uses: actions/setup-node@v4
	with:
	node-version: '22'
	cache: 'pnpm'

	- run: pnpm install --frozen-lockfile
	- name: Lint
	run: pnpm lint
	- name: Typecheck
	run: pnpm typecheck
	- name: Test
	run: pnpm test
	- name: Build
	run: pnpm build

	- name: Self-scan
	run: node packages/cli/dist/index.js . --severity high --format json --output scan-results.json
	continue-on-error: true

	- name: Upload scan results
	if: always()
	uses: actions/upload-artifact@v4
	with:
	name: security-scan
	path: scan-results.json

Navigation Menu