chore(deps-dev): bump @arethetypeswrong/cli from 0.18.3 to 0.18.4 #526
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| jobs: | |
| check: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: 24 | |
| - run: npm ci --ignore-scripts | |
| # Scoped to HIGH+ per Commander disposition 2026-06-19: the unscoped | |
| # gate fails RED on 13 residual MODERATE @changesets/* → js-yaml | |
| # dev-chain advisories with no non-major fix (@changesets/cli v3 is a | |
| # rejected breaking bump). --audit-level=high clears that unfixable | |
| # moderate noise while preserving HIGH+ detection across prod + dev | |
| # trees (a future form-data/vite-class HIGH still trips the gate). | |
| - run: npm audit --audit-level=high | |
| - run: npm run format:check | |
| - run: npm run lint | |
| - run: npm run build | |
| # PR-time dist validation (queue #107 class — validate at PR time, not | |
| # only at release). Asserts each package's published tarball carries the | |
| # four REQUIRED dual-format dist artifacts, present and non-empty, so an | |
| # empty/missing-dist regression (the fs-http 0.1.1/0.1.2 empty-tarball | |
| # incident) fails the PR check rather than surfacing only at publish. | |
| # Shares scripts/validate-dist.mjs with publish.yml — the two gates | |
| # cannot drift. | |
| - run: npm run validate:dist | |
| - run: npm run typecheck | |
| - run: npm run lint:pkg | |
| - run: npm run test:coverage | |
| - run: npm run test:mutation | |
| # Durable mutation-score artifact: each package's Stryker run writes | |
| # JSON + HTML to packages/<pkg>/reports/mutation/. Retain them as a | |
| # downloadable run artifact so the per-package score is retrievable | |
| # after the run, not just ephemeral stdout. if: always() captures the | |
| # report even when the break:90 gate fails (the score is the evidence). | |
| - name: Upload mutation reports | |
| if: always() | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| with: | |
| name: mutation-reports | |
| path: packages/*/reports/mutation/ | |
| retention-days: 30 | |
| if-no-files-found: warn |