build(deps): bump addressable from 2.8.8 to 2.9.0 in /docs #57

	name: CI

	on:
	pull_request:
	push:
	branches:
	- main

	permissions:
	contents: read

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	smoke:
	name: Smoke Tests
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version: "1.24.13"
	cache-dependency-path: go.sum

	- name: Run smoke suite
	run: make test-smoke

	fuzz:
	name: Fuzz Tests
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version: "1.24.13"
	cache-dependency-path: go.sum

	- name: Run fuzz suite
	run: make test-fuzz

	go-ci:
	name: Go Checks
	runs-on: ubuntu-latest
	needs: [smoke, fuzz]
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version: "1.24.13"
	cache-dependency-path: go.sum

	- name: Verify formatting (gofmt)
	run: \|
	unformatted="$(gofmt -l .)"
	if [ -n "$unformatted" ]; then
	echo "The following files are not gofmt-formatted:"
	echo "$unformatted"
	exit 1
	fi

	- name: Go vet
	run: go vet ./...

	- name: Run tests
	run: go test ./...

	- name: Enforce coverage gates
	run: make test-critical

	- name: Security check gate
	run: go run ./cmd/kafclaw security check

	- name: Run race detector
	run: go test -race ./...

	- name: Upload coverage artifact
	run: go test -coverprofile=coverage.out ./...

	- name: Store coverage file
	uses: actions/upload-artifact@v4
	with:
	name: coverage.out
	path: coverage.out

Provide feedback