chore(deps-dev): bump @types/node from 25.3.1 to 25.4.0 #301
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Enterprise CI Pipeline | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| # Concurrency: Auto-cancel old builds on the same PR to save resources | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| # Security: Lock down permissions to read-only by default | |
| permissions: | |
| contents: read | |
| jobs: | |
| quality-gate: | |
| name: 🛡️ Quality Gate | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| strategy: | |
| matrix: | |
| node-version: [20.x] # Standardize on LTS | |
| steps: | |
| - name: ⬇️ Checkout Code | |
| uses: actions/checkout@v6 | |
| - name: 🟢 Setup Node.js | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'npm' | |
| - name: 📦 Install Dependencies | |
| # 'npm ci' is faster and more reliable than 'npm install' for CI | |
| run: npm ci --legacy-peer-deps | |
| - name: 🔍 Type Check (Strict) | |
| # Enforces TypeScript strict mode | |
| run: npx tsc --noEmit | |
| - name: 🧹 Lint Check | |
| # Enforces ESLint rules | |
| run: npm run lint | |
| - name: 🎨 Format Check | |
| # Enforces Prettier formatting | |
| run: npm run format:check | |
| - name: 🧪 Unit Tests & Coverage | |
| # Enforces 80% coverage requirement | |
| run: npm run test:coverage | |
| - name: 🔒 Security Audit | |
| # Checks for known vulnerabilities in dependencies | |
| run: npm audit --audit-level=high | |
| - name: 🏗️ Logic Build Verification | |
| # Ensures the app actually builds without error | |
| run: npm run build | |
| - name: 📊 Bundle Config Check | |
| # Reports bundle size to keep performance in check | |
| run: | | |
| echo "Build size:" | |
| du -sh dist/ |