chore(deps): bump the npm-dependencies group across 1 directory with 10 updates #31

	name: rac-localview Build

	# Builds the rac-localview static surface to a CI artifact only. There is
	# deliberately NO publish or deploy step: GATE-1 — the site must not go
	# public until external-communications policy review is complete.
	on:
	pull_request:
	paths:
	- "rac-localview/**"
	- ".github/workflows/rac-localview-build.yml"
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: rac-localview-build-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	build:
	name: build (vite static + viewer artifact)
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: rac-localview
	steps:
	- uses: actions/checkout@v5

	- uses: actions/setup-node@v5
	with:
	node-version: "22"
	cache: npm
	cache-dependency-path: rac-localview/package-lock.json

	- name: Install dependencies
	run: npm ci

	- name: Run viewer tests
	run: npm test

	- name: Design-system gate — no hex literals outside tokens.css
	run: \|
	if grep -rn '#[0-9a-fA-F]\{3,8\}' src/ index.html viewer/index.html demo/index.html \
	--include='.tsx' --include='.ts' --include='.css' --include='.html' \
	\| grep -v 'styles/tokens.css'; then
	echo 'Hex literal found outside tokens.css' >&2
	exit 1
	fi

	- name: Contrast report
	run: npm run contrast

	- name: Build static site
	run: npm run build

	- name: Build single-file viewer artifact
	run: npm run build:viewer

	# Upload only — no deploy (GATE-1).
	- name: Upload site artifact
	uses: actions/upload-artifact@v6
	with:
	name: rac-localview-dist
	path: rac-localview/dist/
	retention-days: 14

Navigation Menu