Add GitHub workflows for check, publish, and test processes

Author: Rel1cx

.github/workflows/check-provenance.yml

@@ -0,0 +1,28 @@
+name: Check Provenance
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+    branches:
+      - main
+permissions:
+  contents: read
+jobs:
+  check-provenance:
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        with:
+          fetch-depth: 0
+      - name: Check provenance downgrades
+        uses: danielroe/provenance-action@main
+        id: check
+        with:
+          fail-on-provenance-change: true # optional, default: false
+          lockfile: pnpm-lock.yaml # optional
+          #   base-ref: origin/main         # optional, default: origin/main
+          fail-on-downgrade: true # optional, default: true
+      - name: Print result
+        run: "echo 'Downgraded: ${{ steps.check.outputs.downgraded }}'"

.github/workflows/check.yml

@@ -0,0 +1,31 @@
+name: Check
+on:
+  push:
+    branches:
+      - "**"
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+    branches:
+      - "**"
+env:
+  NODE_OPTIONS: --max_old_space_size=10240
+permissions:
+  contents: read
+jobs:
+  check:
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - name: Setup node@24
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version: 24
+      - name: Install pnpm
+        run: npm install -g pnpm
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Install front-end dependencies
+        run: pnpm install
+      - name: Build front-end assets
+        run: pnpm run build
+      - name: Check
+        run: pnpm run lint

.github/workflows/publish.yml

@@ -0,0 +1,53 @@
+name: Publish
+on:
+  push:
+    branches:
+      - main
+    tags-ignore:
+      - "**"
+    paths-ignore:
+      - "**/*.gitignore"
+      - .editorconfig
+      - apps/**
+      - examples/**
+      - decisions/**
+  pull_request: null
+jobs:
+  publish:
+    name: Publish
+    runs-on: ubuntu-24.04-arm
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - name: Setup node@24
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version: 24
+          registry-url: "https://registry.npmjs.org"
+      - name: Install latest npm
+        run: npm install -g npm@latest
+      - name: Install pnpm
+        run: npm install -g pnpm
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Install dependencies
+        run: pnpm install
+      - name: Build front-end assets
+        run: pnpm run build
+      - name: Run lint
+        run: pnpm run lint
+      - name: Publish
+        run: |
+          if git log -1 --pretty=%B | grep "^release: [0-9]\+\.[0-9]\+\.[0-9]\+$";
+          then
+            pnpm --filter "./packages/**" publish --provenance --access public
+          elif git log -1 --pretty=%B | grep "^release: [0-9]\+\.[0-9]\+\.[0-9]\+-beta\.[0-9]\+$";
+          then
+            pnpm --filter "./packages/**" publish --provenance --access public --tag beta --no-git-checks
+          elif git log -1 --pretty=%B | grep "^release: [0-9]\+\.[0-9]\+\.[0-9]\+-next\.[0-9]\+$";
+          then
+            pnpm --filter "./packages/**" publish --provenance --access public --tag next --no-git-checks
+          else
+            echo "Not a release, skipping publish"
+          fi

.github/workflows/test.yml

@@ -0,0 +1,37 @@
+name: Test
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+    branches:
+      - "**"
+env:
+  NODE_OPTIONS: --max_old_space_size=102400
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - name: Setup node@24
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version: 24
+      - name: Install pnpm
+        run: npm install -g pnpm
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Install front-end dependencies
+        run: pnpm install
+      - name: Build front-end assets
+        run: pnpm run build
+      - name: Test on node@24
+        run: pnpm run test
+      - name: Setup node@20
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+        with:
+          node-version: 20
+      - name: Test on node@20
+        run: pnpm run test