chore: add CI workflow and Dependabot config#4
Conversation
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull request overview
Adds basic automation to the repo by introducing a GitHub Actions CI workflow for PRs/pushes to main, plus a Dependabot configuration to keep npm and GitHub Actions dependencies up to date (per 100yenadmin/electric-sheep#1827 and #1828).
Changes:
- Add a CI workflow that runs
npm ci, TypeScript typechecking, andnpm run buildon PRs and pushes tomain. - Add Dependabot config for weekly npm and GitHub Actions update PRs (with a PR limit and labels).
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| .github/workflows/ci.yml | New CI workflow for install + typecheck + build on PR/push with concurrency cancellation. |
| .github/dependabot.yml | New Dependabot config for weekly npm and GitHub Actions updates. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| name: CI | ||
|
|
||
| on: | ||
| push: | ||
| branches: [main] | ||
| pull_request: | ||
| branches: [main] | ||
|
|
||
| concurrency: | ||
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | ||
| cancel-in-progress: true | ||
|
|
There was a problem hiding this comment.
Consider explicitly setting minimal permissions for the workflow/job (e.g., contents: read) since this CI only checks out code and runs builds. Relying on the repo default token permissions can unintentionally grant more access than needed.
|
|
||
| - uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: "20" |
There was a problem hiding this comment.
actions/setup-node supports built-in dependency caching (cache: 'npm' with cache-dependency-path: package-lock.json). Enabling it can significantly reduce CI runtime and network usage on repeated runs.
| node-version: "20" | |
| node-version: "20" | |
| cache: 'npm' | |
| cache-dependency-path: package-lock.json |
Part of 100yenadmin/electric-sheep#1827 and 100yenadmin/electric-sheep#1828
Adds: