Skip to content

chore(deps): bump commander from 14.0.3 to 15.0.0 #310

chore(deps): bump commander from 14.0.3 to 15.0.0

chore(deps): bump commander from 14.0.3 to 15.0.0 #310

Workflow file for this run

# Policy lint, build, and runtime tests
# dist/ はコミットしない。ビルドが成功し dist/edge/ が生成されることを確認する。
name: Policy Lint & Build Check
on:
push:
branches: [main]
pull_request:
branches: [main]
workflow_dispatch:
permissions:
contents: read
concurrency:
group: ci-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
lint-build-test:
runs-on: ubuntu-latest
env:
# CI-only token. Required because CloudFront Functions cannot read env
# at runtime, so static_token values are baked into the build artifact.
# This is not a production secret — real deployments use GitHub Secrets.
EDGE_ADMIN_TOKEN: ci-build-token-not-for-deploy
# Origin-auth secret is consumed by the microservice-origin archetype
# during drift checks; same CI-only convention applies.
ORIGIN_SECRET: ci-origin-secret-not-for-deploy
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Set up Node.js
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: '24'
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Quality gate (single source)
run: npm run test:ci
package-smoke-matrix:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
node-version: ['20.17.0', '22', '24']
env:
EDGE_ADMIN_TOKEN: ci-build-token-not-for-deploy
ORIGIN_SECRET: ci-origin-secret-not-for-deploy
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Set up Node.js
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: ${{ matrix.node-version }}
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: API contract
run: npm run test:api-contract
- name: Packed install smoke
run: npm run test:package