Merge branch 'master' into dependabot/bun/earendil-works/pi-coding-agent-0.80.10

Author: sm18lr88

.github/workflows/canary-release.yml

@@ -1,4 +1,4 @@
-name: Test
+name: CI
 
 on:
   pull_request:
@@ -15,58 +15,51 @@ on:
     branches: [master]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
-  test:
+  verify:
+    name: Build, test, and audit
     runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
+    timeout-minutes: 15
 
-      - name: Setup Node
-        uses: actions/setup-node@v6
-        with:
-          node-version: "20"
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+      - name: Set up pnpm
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
         with:
           version: 10
 
-      - name: Get pnpm store directory
-        id: pnpm-cache
-        shell: bash
-        run: |
-          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
-
-      - name: Cache pnpm dependencies
-        uses: actions/cache@v6
+      - name: Set up Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-pnpm-store-
+          node-version: "26"
+          cache: pnpm
 
-      - name: Install Dependencies
+      - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
       - name: Lint
-        run: pnpm lint:check
+        run: pnpm --filter @upstash/context7-mcp lint:check
 
       - name: Format
-        run: pnpm format:check
+        run: pnpm --filter @upstash/context7-mcp format:check
 
       - name: Build
-        run: pnpm build
+        run: pnpm --filter @upstash/context7-mcp build
 
       - name: Typecheck
-        run: pnpm typecheck
+        run: pnpm --filter @upstash/context7-mcp typecheck
+
+      - name: Test local MCP
+        run: pnpm --filter @upstash/context7-mcp test
 
-      - name: Test
-        run: pnpm test
-        env:
-          AWS_REGION: ${{ secrets.AWS_REGION }}
-          AWS_BEARER_TOKEN_BEDROCK: ${{ secrets.AWS_BEARER_TOKEN_BEDROCK }}
-          CONTEXT7_API_KEY: ${{ secrets.CONTEXT7_API_KEY }}
+      - name: Audit production dependencies
+        run: pnpm audit --prod --audit-level low

.github/workflows/ecr-deploy.yml

@@ -0,0 +1 @@
+26.5.0