5 Commits

Author	SHA1	Message	Date
Danil Silantyev	c399abd63c	chore(ci): least-privilege permissions and cancel-stale concurrency ... The workflow only checks out, builds, and tests — it never writes to the repo, so scope GITHUB_TOKEN down to contents: read (GitHub's recommended least privilege; the default token grant is broader than this job needs). Also add a per-ref concurrency group so a new push to a PR cancels its superseded run. No job/step logic changed; Node stays on 22 (current LTS).	2026-07-04 23:22:12 -04:00
teamchong	9f25a4db3b	ci: move actions to Node 24 majors (checkout@v7, setup-node@v6, pnpm/action-setup@v6) ... Clears the Node 20 runtime deprecation warning on the runner. package.json already sets packageManager: pnpm@10.21.0, so action-setup@v6 resolves the pnpm version with no action input - same as the prior bare usage.	2026-06-26 00:24:58 -04:00
teamchong	39b77eb246	ci: let pnpm/action-setup read version from packageManager field (fixes multiple-version conflict)	2026-06-10 07:16:53 -04:00
teamchong	e406ec0de0	ci: switch release to npm Trusted Publisher (OIDC, environment: release), drop NPM_TOKEN	2026-06-10 07:15:09 -04:00
teamchong	bb48aa4017	ci: add CI (typecheck/test/build) and tag-triggered npm release workflows	2026-06-10 07:13:02 -04:00