feat: add GitHub Actions CI workflow for backend and web — there is no automated testing or build validation on PRs, allowing broken TypeScript or failing tests to be merged

[divyanshim27]

🐛 Problem Statement

The DevCard monorepo has a .github/workflows/ directory but no CI workflow that runs on pull requests. This means:

1. No TypeScript compilation check — a PR can introduce type errors in apps/backend/ (Fastify + TypeScript) or apps/web/ (SvelteKit) that only surface when someone pulls and builds locally
2. No Prisma migration validation — a malformed migration file in packages/shared/ or apps/backend/ won't be caught until deployment
3. No lint enforcement — the project has eslint and TypeScript configured but these are never run automatically in CI

With 57 open issues and 29 PRs, this is a real risk to code quality.

Proposed Fix

# .github/workflows/ci.yml
name: CI

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]

jobs:
  backend:
    name: Backend — TypeCheck & Build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        with: { version: 9 }
      - uses: actions/setup-node@v4
        with: { node-version: '20', cache: 'pnpm' }
      - run: pnpm install --frozen-lockfile
      - name: TypeScript check (backend)
        run: cd apps/backend && pnpm exec tsc --noEmit
      - name: ESLint (backend)
        run: cd apps/backend && pnpm exec eslint src/ --max-warnings 0

  web:
    name: Web — Build Check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        with: { version: 9 }
      - uses: actions/setup-node@v4
        with: { node-version: '20', cache: 'pnpm' }
      - run: pnpm install --frozen-lockfile
      - name: SvelteKit build
        run: cd apps/web && pnpm run build

  shared:
    name: Shared Types — TypeCheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        with: { version: 9 }
      - uses: actions/setup-node@v4
        with: { node-version: '20', cache: 'pnpm' }
      - run: pnpm install --frozen-lockfile
      - name: TypeScript check (shared)
        run: cd packages/shared && pnpm exec tsc --noEmit

Files to Create

File	Purpose
.github/workflows/ci.yml	New CI workflow

Suggested labels: enhancement, CI/CD, level: beginner

I would like to work on this. Could you please assign it to me?

[github-actions]

Hi @divyanshim27,

Thanks for opening this issue.

Please reply with one of the following areas so the issue can be routed to the appropriate team member:

- /backend
- /web
- /mobile
- /devops

Once an area is selected, the corresponding label will be added automatically.

[divyanshim27]

Hey @maintainers,
Please assign it to me under GSSoC 2026.
/claim /assign /claim-assignment

[Mohitmhatre32]

Hi @maintainers,

I'd like to work on this issue under GSSoC 2026. I have 2 years of full-stack development experience and experience setting up GitHub Actions CI pipelines for TypeScript monorepos. I can implement a robust CI workflow for build, type checking, and linting while ensuring it integrates smoothly with the existing project structure.

Kindly assign this issue to me. Thank you!

[Harxhit]

@divyanshim27 I have assigned this issue to you.

[github-actions]

Hey @ShantKhatri (Project Admin) and @Harxhit (Maintainer),

This issue (previously assigned to @divyanshim27) has been automatically unassigned because no linked pull request was found within 5 days of assignment.

If work is in progress, please open and link a PR to keep the assignment active.