node-next.yml

name: Node.js Next (nightly)

on:
  schedule:
    # Run weekly on Mondays at 06:00 UTC
    - cron: '0 6 * * 1'
  workflow_dispatch:

# Set default permissions to read-only
permissions: read-all

jobs:
  test-node-next:
    name: Build & Test on Node.js Nightly
    runs-on: ubuntu-latest
    continue-on-error: true
    permissions:
      contents: read
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
        with:
          egress-policy: audit

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Node.js nightly
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 'nightly'
          check-latest: true
          cache: 'npm'

      - name: Display Node.js version
        run: node --version && npm --version

      - name: Install dependencies
        run: npm ci

      - name: Run TypeScript check
        run: npm run check

      - name: Run linter
        run: npm run lint

      - name: Run unit tests
        run: npm run test -- --reporter=verbose
        env:
          CI: true

      - name: Build
        run: npm run build