everything-claude-code

feat: add coverage reporting to CI

- Run npm run coverage in test workflow (non-blocking)
- Upload coverage artifacts for visibility
- Uses existing c8 configuration with 80% baseline

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Don Joh · 2026-05-15 01:21:00 +07:00

2432e560f4

ci: keep package manager cache failures non-blocking

Affaan Mustafa · 2026-05-12 18:03:30 -04:00

6fbf58d590

build(deps): bump pnpm/action-setup from 6.0.0 to 6.0.6 (#1708 )

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.0 to 6.0.6.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/08c4be7e2e672a47d11bd04269e27e5f3e8529cb...91ab88e2619ed1f46221f0ba42d1492c02baf788)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2026-05-11 01:12:31 -04:00

c013479019

chore(deps): bump actions/cache from 5.0.4 to 5.0.5 (#1497 )

Bumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2026-05-11 01:11:50 -04:00

01b171947c

fix: relax pnpm strict build checks in CI

Affaan Mustafa · 2026-04-15 16:44:58 -07:00

6b7bd7156c

Merge pull request #1369 from affaan-m/dependabot/github_actions/pnpm/action-setup-6.0.0

build(deps): bump pnpm/action-setup from 5.0.0 to 6.0.0

Affaan Mustafa · 2026-04-13 01:05:16 -07:00

85e331e49a

fix: allow pnpm cache probe under node 18

Affaan Mustafa · 2026-04-13 00:21:42 -07:00

1a950e4f83

fix: use corepack pnpm on node 18

Affaan Mustafa · 2026-04-13 00:17:17 -07:00

ef7613c526

fix: use pnpm 9 for node 18 workflow jobs

Affaan Mustafa · 2026-04-13 00:13:54 -07:00

bd207aabe1

fix: pin pnpm version for setup action v6

Affaan Mustafa · 2026-04-13 00:10:39 -07:00

6eadf786f5

chore: update pnpm action version comments

Affaan Mustafa · 2026-04-12 23:53:57 -07:00

adb46a95a6

build(deps): bump pnpm/action-setup from 5.0.0 to 6.0.0

Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/fc06bc1257f339d1d5d8b3a19a8cae5388b55320...08c4be7e2e672a47d11bd04269e27e5f3e8529cb)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2026-04-12 04:52:33 +00:00

4b92288a27

build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2026-04-12 04:52:29 +00:00

45faeb90a7

chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 (#1060 )

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Affaan Mustafa <me@affaanmustafa.com>

dependabot[bot] · 2026-03-31 14:07:40 -07:00

87363f0e59

chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.0 (#1061 )

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2026-03-31 14:06:07 -07:00

a1cebd29f7

chore(deps): bump actions/setup-node from 4.4.0 to 6.3.0 (#1058 )

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...53b83947a5a98c8d113130e565377fae1a50d02f)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2026-03-31 14:06:02 -07:00

09398b42c2

chore(deps): bump actions/cache from 4.3.0 to 5.0.4 (#1057 )

Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc39830...668228422ae6a00e4ad889ee87cd7109ec5666a7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] · 2026-03-31 14:04:33 -07:00

d1e2209a52

chore: pin actions to commit SHAs and add Skills section to CLAUDE.md

Pin all GitHub Actions to commit SHAs instead of mutable version tags
across ci.yml, release.yml, maintenance.yml, and all reusable workflows.
This prevents supply-chain attacks via tag hijacking.

Add the required Skills section to CLAUDE.md mapping project files
(README.md, .github/workflows/*.yml) to their respective review skills.

Andriy Kalashnykov · 2026-03-29 17:16:56 -04:00

46f37ae4fb

fix: pin 6 actions to commit SHA, extract 1 expression to env var

dagecko · 2026-03-28 15:57:55 -04:00

28a1fbc3f2

fix(ci): remove --ignore-engines for Yarn Berry (v4+)

Yarn Berry removed the --ignore-engines flag; engine checking is no
longer a core feature. The deprecated flag causes yarn install to exit
with error code 1.

to.watanabe · 2026-03-28 12:27:04 +09:00

d8e3b9d593

fix(ci): enable Corepack for yarn and relax pnpm strict mode

All 18 pnpm/yarn CI jobs fail on main because:
1. pnpm v9+ refuses to install when package.json declares
   "packageManager": "yarn@4.9.2" — fixed by setting
   COREPACK_ENABLE_STRICT=0 and --no-frozen-lockfile
2. CI runners only have Yarn Classic (v1.x) but the project
   uses Yarn Berry (v4.x) — fixed by activating Corepack
   before the cache/install steps

to.watanabe · 2026-03-28 12:27:04 +09:00

7148d9006f

feat: add comprehensive CI/CD pipeline

Adds GitHub Actions workflows for CI, maintenance, and releases with multi-platform testing matrix.

Roei Bar Aviv · 2026-01-28 23:05:43 -08:00

7c0bc25982

22 Commits