chore: tame Dependabot updates #11

	name: CI

	on:
	pull_request:
	branches: [main]
	push:
	branches: [main]
	merge_group:

	permissions:
	contents: read

	concurrency:
	group: ci-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	quality:
	name: Quality gate
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v6

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: 22

	- name: Set up pnpm
	run: \|
	corepack enable
	corepack prepare pnpm@11.9.0 --activate

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Lint and format check
	run: pnpm lint

	- name: Typecheck
	run: pnpm check

	- name: Test
	run: pnpm test

	- name: Build
	run: pnpm build

	- name: Smoke test production CLI and MCP
	run: pnpm smoke

	- name: Verify generated dist is committed
	run: git diff --exit-code -- dist

	- name: Verify npm package metadata
	run: pnpm package:check

	commitlint:
	name: Commitlint
	if: github.event_name == 'pull_request'
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v6
	with:
	fetch-depth: 0

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: 22

	- name: Set up pnpm
	run: \|
	corepack enable
	corepack prepare pnpm@11.9.0 --activate

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Lint commit messages
	run: pnpm exec commitlint --from "${{ github.event.pull_request.base.sha }}" --to "${{ github.event.pull_request.head.sha }}" --verbose

Navigation Menu