unif-design
diff --git a/‎.github/ISSUE_TEMPLATE/feature_request.yml‎
Lines changed: 81 additions & 0 deletions b/‎.github/ISSUE_TEMPLATE/feature_request.yml‎
Lines changed: 81 additions & 0 deletions
diff --git a/‎.github/workflows/ci.yml‎
Lines changed: 16 additions & 11 deletions b/‎.github/workflows/ci.yml‎
Lines changed: 16 additions & 11 deletions
diff --git a/‎.github/workflows/dependabot-automerge.yml‎
Lines changed: 51 additions & 0 deletions b/‎.github/workflows/dependabot-automerge.yml‎
Lines changed: 51 additions & 0 deletions
diff --git a/‎.github/workflows/deploy-docs.yml‎
Lines changed: 66 additions & 0 deletions b/‎.github/workflows/deploy-docs.yml‎
Lines changed: 66 additions & 0 deletions
diff --git a/‎.github/workflows/pr-agent.yml‎
Lines changed: 21 additions & 0 deletions b/‎.github/workflows/pr-agent.yml‎
Lines changed: 21 additions & 0 deletions
diff --git a/‎.github/workflows/release.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/release.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.gitignore‎
Lines changed: 4 additions & 0 deletions b/‎.gitignore‎
Lines changed: 4 additions & 0 deletions
diff --git a/‎.pr_agent.toml‎
Lines changed: 31 additions & 0 deletions b/‎.pr_agent.toml‎
Lines changed: 31 additions & 0 deletions
@@ -0,0 +1,81 @@
+name: 🚀 Feature request
+description: Suggest a new feature or enhancement.
+labels: [enhancement]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        # Feature request
+
+        👋 谢谢花时间提建议!
+
+        请尽量填完下面信息,方便我们判断优先级和实现路径。
+  - type: checkboxes
+    attributes:
+      label: 提交前自检
+      options:
+        - label: 我搜过现有 issue / discussion,没有重复
+          required: true
+        - label: 我看过文档站 https://unif-design.github.io/react-native-umeng/,确认现有 API 满足不了
+          required: true
+        - label: 这不是友盟 / 微信 / 钉钉官方 SDK 本身的功能缺失(那些应该报给对应官方)
+          required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: 想解决什么问题?
+      description: 描述你遇到的具体场景 / 痛点。"用户故事"格式最佳:作为 X,我希望 Y,这样 Z。
+      placeholder: |
+        作为接入友盟分享的开发者,我希望能 ...
+        因为现在 ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: 期望的 API / 行为
+      description: 用代码 / 伪代码描述你设想的接口,或描述期望表现。
+      render: ts
+      placeholder: |
+        // 比如新增一个 method
+        Share.shareVideo({
+          platform: Platform.WECHAT_SESSION,
+          videoUrl: 'https://example.com/clip.mp4',
+        });
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: 考虑过的备选方案
+      description: 列出你尝试过 / 想过但没采用的替代方案,以及为什么不行。
+
+  - type: dropdown
+    id: scope
+    attributes:
+      label: 影响范围
+      options:
+        - JS API (Common / Share / Analytics)
+        - ShareSheet UI 组件
+        - iOS native module
+        - Android native module
+        - TurboModule spec / codegen
+        - 文档 / 集成指南
+        - 其他
+
+  - type: dropdown
+    id: breaking
+    attributes:
+      label: 是否破坏向后兼容?
+      options:
+        - 不破坏(新增 API / 行为)
+        - 可能破坏(修改现有签名 / 默认行为)
+        - 必须破坏(major bump)
+        - 不确定
+
+  - type: textarea
+    id: extra
+    attributes:
+      label: 补充信息
+      description: 截图、参考资料、相关 RN / 友盟 SDK 文档链接等。
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup
         uses: ./.github/actions/setup
@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup
         uses: ./.github/actions/setup
@@ -49,7 +49,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup
         uses: ./.github/actions/setup
@@ -65,13 +65,13 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup
         uses: ./.github/actions/setup
 
       - name: Cache turborepo for Android
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: ${{ env.TURBO_CACHE_DIR }}
           key: ${{ runner.os }}-turborepo-android-${{ hashFiles('yarn.lock') }}
@@ -88,7 +88,7 @@ jobs:
 
       - name: Install JDK
         if: env.turbo_cache_hit != 1
-        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: 'zulu'
           java-version: '17'
@@ -101,7 +101,7 @@ jobs:
 
       - name: Cache Gradle
         if: env.turbo_cache_hit != 1
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.gradle/wrapper
@@ -122,18 +122,23 @@ jobs:
     env:
       XCODE_VERSION: 26
       TURBO_CACHE_DIR: .turbo/ios
-      RCT_USE_RN_DEP: 1
-      RCT_USE_PREBUILT_RNCORE: 1
+      # CI macos-15 上的 Xcode 26 只到 26.3 (本地 Xcode 26.5 测过 prebuilt 能过,
+      # CI 26.3 上 ReactCodegen .cpp 报 'memory' file not found —— stdlib include
+      # path 在 26.3 配置不全。禁 prebuilt 让 React-Core 从源码编译,CI 慢 5-10
+      # 分钟但 100% 稳。Podfile post_install 的 PR #56862 patch 保留(本地
+      # prebuilt=1 走快路径时用)。
+      RCT_USE_RN_DEP: 0
+      RCT_USE_PREBUILT_RNCORE: 0
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup
         uses: ./.github/actions/setup
 
       - name: Cache turborepo for iOS
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: ${{ env.TURBO_CACHE_DIR }}
           key: ${{ runner.os }}-turborepo-ios-${{ hashFiles('yarn.lock') }}
 
@@ -0,0 +1,51 @@
+name: Dependabot Auto-merge
+
+# 自动批准 + 合并 dependabot 的 patch / minor 类 PR,跳过人审。
+# 仅允许 patch / minor —— major bump 通常含 breaking changes,必须人审。
+#
+# 流程:
+#   1. dependabot 开 PR (push 到 dependabot/<ecosystem>/<dep>-<ver> 分支)
+#   2. 本 workflow 触发,fetch metadata 拿 update-type
+#   3. patch / minor → gh pr review --approve + gh pr merge --auto --squash
+#      ('--auto' 让 GitHub 等 required status checks 全绿后再自动 merge,
+#       配合 ruleset 'required_status_checks: lint/test/build-*' 一起工作)
+#   4. major → 不动,等人审
+#
+# 安全:
+#   - 用 pull_request_target 让 workflow 拿 base branch 上下文,GITHUB_TOKEN
+#     有 write 权限。dependabot PR 来源是仓库自己的 dependabot/* 分支
+#     (非 fork),无 code-injection 风险。
+#   - 双保险 actor == dependabot[bot] 防伪 PR 走这路径。
+#   - 所有外部输入 (PR url) 走 env: 注入,不在 run 命令体里展开 ${{ }}。
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  automerge:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]' && github.event.pull_request.user.login == 'dependabot[bot]'
+
+    steps:
+      - name: Fetch Dependabot metadata
+        id: meta
+        uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2.4.0
+
+      - name: Approve PR
+        if: steps.meta.outputs.update-type == 'version-update:semver-patch' || steps.meta.outputs.update-type == 'version-update:semver-minor'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+        run: gh pr review --approve "$PR_URL"
+
+      - name: Enable auto-merge (squash) for patch / minor
+        if: steps.meta.outputs.update-type == 'version-update:semver-patch' || steps.meta.outputs.update-type == 'version-update:semver-minor'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+        run: gh pr merge --auto --squash "$PR_URL"
@@ -0,0 +1,66 @@
+name: Deploy Docs
+
+# Docusaurus 站点部署到 GitHub Pages。
+# 默认 URL:https://unif-design.github.io/react-native-umeng/
+#
+# 前置(一次性):
+#   GitHub repo → Settings → Pages → Source: GitHub Actions
+#
+# 触发:
+#   - push:main 且改了 website/src/package 等
+#   - 手动 workflow_dispatch
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'website/**'
+      - 'src/**'                          # website 直接 import library 源码
+      - 'package.json'
+      - 'yarn.lock'
+      - '.github/workflows/deploy-docs.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# GitHub Pages 官方推荐:同一时间只 1 个 deploy in flight,新的等老的跑完
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0          # docusaurus 算 last-updated 时间要全历史
+
+      - name: Setup
+        uses: ./.github/actions/setup
+
+      - name: Build website
+        run: yarn workspace @unif/react-native-umeng-website build
+
+      - name: Configure Pages
+        uses: actions/configure-pages@v5
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: website/build
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4
@@ -0,0 +1,21 @@
+name: PR Agent
+
+# 调用 org 级 reusable workflow(unif-design/.github),走 DeepSeek 自动 review。
+# 项目特有 review 规则放在仓库根目录的 .pr_agent.toml,会被 PR-Agent 自动 merge。
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
+  issue_comment:
+    types: [created]
+
+permissions:
+  contents: read
+  pull-requests: write
+  issues: write
+
+jobs:
+  call:
+    uses: unif-design/.github/.github/workflows/pr-agent.yml@main
+    secrets:
+      DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0  # release-it 要全历史算 conventional-changelog
 
 
@@ -51,6 +51,10 @@ example/ios/*.xcworkspace
 example/vendor/
 example/Gemfile.lock
 
+# Docusaurus
+website/.docusaurus
+website/build
+
 # node.js
 #
 node_modules/
 
@@ -0,0 +1,31 @@
+[pr_reviewer]
+extra_instructions = """
+用中文 code review。除了 org 级通用规则,本仓库特有规则:
+- TurboModule spec(NativeUmengCommon/Share/Analytics)签名改动必须 JS spec
+  + iOS .mm + Android .kt 三端同步,否则 codegen 出来的 Native*Spec 跟实现
+  不一致,iOS / Android example app 编译会挂(Unresolved reference / 协议
+  实现不全)
+- PIPL 合规硬约束:JS Common.init() 之前桥不调任何友盟 API。新增 native
+  方法不能在 Module init / preInit 里直接采集上报,只允许 UMConfigure.preInit
+  这种"不上报"调用
+- 错误码必须走 src/types.ts 的 ErrorCode 枚举(E_PLATFORM_NOT_INSTALLED /
+  E_USER_CANCEL / E_SHARE_FAILED 等),不要在 share.ts 里直接抛 message
+  字串。新错误码必须同时改类型 + README 错误码表
+- iOS 友盟拼写遵循 SDK 原始错误:setPlaform(少一个 t)、UMSocialPlatformType
+  .dingDing(驼峰),不要"修正"
+- Android U-Share 必须走 Activity.runOnUiThread —— UMShareAPI.get(activity)
+  .share 不能在 JS thread / 非 main thread 调,会抛 RuntimeException
+- WeChat/DingTalk SDK 在 friend pod 上不传递依赖,podspec / build.gradle
+  显式列 wechat-sdk-android 6.8.34 / ddsharesdk 1.2.2,移除依赖前确认
+  友盟 SDK 版本兼容矩阵
+- ShareSheet UI 走 @unif/react-native-design 的 BottomSheet/Cell/Button,
+  不要绕开 design token 自定义 surface 颜色;新平台 leading tile 用
+  PLATFORM_BRAND_COLORS
+- 必须 conventional commits 前缀(feat / fix / chore / docs / test / refactor / ci)
+"""
+
+[pr_code_suggestions]
+extra_instructions = "用中文,引用具体行号,给可落地的代码改进(不要给\"考虑重构\"这种空泛建议)。"
+
+[pr_description]
+extra_instructions = "用中文,1-2 句概括 + 列变更点。如果有 BREAKING CHANGE 必须在 body 显式标注。"