build(deps): bump the codeql-action group with 3 updates #80

	name: Pull Request

	on:
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	test:
	name: Test
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- name: 📥 Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	ref: ${{ github.head_ref }}

	- name: 📦 Setup pnpm
	uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6

	- name: 🟢 Setup Node.js
	uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
	with:
	node-version: '24'
	cache: 'pnpm'

	- name: 📦 Install dependencies
	run: pnpm install --frozen-lockfile

	- name: 🔍 Type check
	run: pnpm typecheck

	- name: 🧪 Run tests
	run: pnpm test

	- name: 🏗️ Build
	run: pnpm build

	- name: 📦 Commit dist/ to PR branch
	run: \|
	git config user.name "github-actions[bot]"
	git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
	git add dist/
	if ! git diff --staged --quiet; then
	git commit -m "build: auto-update dist/ [skip ci]"
	git push origin HEAD:${{ github.head_ref }}
	else
	echo "dist/ is already up to date."
	fi

	- name: 🔒 Audit dependencies
	run: pnpm audit --audit-level high

Navigation Menu