ci: add permissions for read access to contents in CI and release wor… #22

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	lint:
	name: Lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: pnpm/action-setup@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: pnpm

	- run: pnpm install --frozen-lockfile

	- name: Run Biome
	run: pnpm lint

	typecheck:
	name: Typecheck
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: pnpm/action-setup@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: pnpm

	- run: pnpm install --frozen-lockfile

	- name: Run TypeScript
	run: pnpm typecheck

	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: pnpm/action-setup@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: pnpm

	- run: pnpm install --frozen-lockfile

	- name: Build packages
	run: pnpm build

	test:
	name: Test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: pnpm/action-setup@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: pnpm

	- run: pnpm install --frozen-lockfile

	# Tests import workspace packages by name (e.g. "@captigo/core") which resolve
	# to dist/. Build first so those imports resolve correctly.
	- name: Build packages
	run: pnpm build

	- name: Run tests
	run: pnpm test

Navigation Menu