viyatb-oai
9f6879944e
## Summary - stop treating every `[bot]` actor as trusted when `allow-bots` is enabled - add `allow-bot-users` for explicit custom bot allowlists without wildcard support - document bot allowlist semantics and add CLI regression tests ## Test plan - `pnpm run check` - `pnpm test` - `git diff --check`
47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
name: Verify TypeScript Build
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
verify:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
|
|
|
|
- name: Setup pnpm
|
|
uses: pnpm/action-setup@02f6c237bd2518259fed6c71566509edfb3f2b74 # v4
|
|
with:
|
|
run_install: false
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
|
|
with:
|
|
node-version: 22
|
|
cache: "pnpm"
|
|
|
|
- name: Install dependencies
|
|
run: pnpm install --frozen-lockfile
|
|
|
|
- name: Typecheck
|
|
run: pnpm run check
|
|
|
|
- name: Test
|
|
run: pnpm test
|
|
|
|
- name: Build bundles
|
|
run: pnpm run build
|
|
|
|
- name: Ensure dist matches bundled output
|
|
run: |
|
|
status_output="$(git status --short -- dist)"
|
|
if [[ -n "$status_output" ]]; then
|
|
echo '::error::Detected modified files in dist/ after running pnpm run build. Please rebuild locally and commit the updated bundles.'
|
|
echo "$status_output"
|
|
exit 1
|
|
fi
|