chore: package updates #12

	name: pull-request

	on:
	pull_request:
	branches:
	- main
	workflow_dispatch:
	# Allow workflow to be triggered manually.

	# Cancel in-progress runs when a new commit is pushed
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	detect-secrets:
	name: detect-secrets
	runs-on: ubuntu-latest
	timeout-minutes: 30

	steps:
	- name: Checkout repository
	uses: actions/checkout@v5

	- name: Setup Python
	uses: actions/setup-python@v6
	with:
	python-version: 3.12

	- name: Install detect-secrets
	run: \|
	pip install --upgrade "git+https://github.com/ibm/detect-secrets.git@master#egg=detect-secrets"

	- name: Run detect-secrets
	run: \|
	detect-secrets scan --update .secrets.baseline
	detect-secrets -v audit --report --fail-on-unaudited --fail-on-live --fail-on-audited-real .secrets.baseline

	build:
	name: Test on Node.js ${{ matrix.node-version }}
	needs: detect-secrets
	runs-on: ubuntu-latest
	timeout-minutes: 30
	strategy:
	matrix:
	node-version: [20, 22, 24]

	steps:
	- name: Checkout code
	uses: actions/checkout@v5

	- name: Setup Node.js ${{ matrix.node-version }}
	uses: actions/setup-node@v5
	with:
	node-version: ${{ matrix.node-version }}
	cache: 'npm'

	- name: Display Node.js and npm versions
	run: \|
	node --version
	npm --version

	- name: Install dependencies
	run: npm ci

	- name: Build
	run: npm run build

	- name: Run unit tests
	run: npm run test-unit

	- name: Run linter
	run: npm run lint

	- name: Check packages
	run: npm run check-packages

Provide feedback