fix(test): make documentation contracts semantic

[ihor-sokoliuk]

Summary

• validate all release version surfaces against exact SemVer and package.json instead of a frozen release number
• derive documented Node support from package metadata and validate GitHub Actions by immutable pin/comment semantics
• split Node, workflow pin, and Dependabot documentation contracts while retaining provenance checks

Verification

• npm run lint
• npm run build
• npm run test:coverage (773/773, 96.04% lines)
• npm run test:e2e (35/35)
• npm run verify:packed-consumer
• focused version tests (4/4)
• focused documentation tests (23/23)

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[ihor-sokoliuk]

Addressed in 8c24e7d — verified valid. The exact SemVer contract now uses bounded structural parsing for core, prerelease, and build identifiers, eliminating the non-literal RegExp constructor while retaining malformed-version and drift rejection coverage. No review findings were left unchanged.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[ihor-sokoliuk]

Addressed in 22138d0 — verified valid. The structural SemVer validator is now split into small helpers for identifier, build metadata, core, and prerelease validation, retaining the same exact acceptance and rejection fixtures while reducing per-function complexity. No review findings were left unchanged.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

🟢 Approval recommended

The changes are test-only, and the new SemVer and workflow-pin logic was verified against the repository's actual manifests, README, CI matrix, and workflow files, leaving only one optional latent-robustness note.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 1
• Review effort level: Balanced