chore: add public-repo CI, Prettier, and GitHub hygiene - #13
Conversation
Bring EmMail in line with VGP public-repo standards: Prettier (double quotes), CI format/test/build, conventional PR-title lint, Dependabot, CodeQL, and community templates. Format src/ and tests/ against current main.
Avoid floating @main on a privileged reusable workflow that receives repository write permissions.
Self-hosters told that .env* is gitignored must not be able to accidentally stage credential files with git add -A.
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
Upgrade wrangler and @cloudflare/workers-types, and apply lockfile fixes for transitive nanoid/postcss advisories so the new security workflow can stay fail-closed.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d9aaeed2fb
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Vite 8.0.16 requires Node ^20.19 or >=22.12; the previous >=22 floor incorrectly advertised early 22.x support.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 6addf1f78e
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Summary
Add VGP-standard public-repo hygiene to EmMail: Prettier (double quotes), CI format/test/build, conventional PR-title lint, Dependabot (+ pinned auto-merge reusable workflow), CodeQL, and community templates (SECURITY, CODEOWNERS, issue/PR templates, CONTRIBUTING). Formats
src/andtests/against currentmain.Changes
format/format:check/lintscripts; formatsrc/andtests/[codex]/[wip]prefixes)@AGENTS.md,.editorconfig.env*so documented secret handling is enforceableTest plan
npm run format:checknpm run test:run(102 tests)npm run typecheck/npm run buildNotes for reviewers
src//tests/plus new hygiene files.verygoodplugins/.githubcommit20252be6…(not floating@main).gh.