chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /landing #167

	name: CI

	# CI is now a thin caller of the reusable `_checks.yml` workflow. The same
	# checks gate Release via `release.yml::checks` so the two cannot drift —
	# v0.6.0 + v0.6.1 both shipped despite a red CI because the workflows were
	# independent. See `_checks.yml` header for the full rationale.

	on:
	push:
	branches: [main]
	pull_request:

	# Default to read-only at the workflow level. Reusable callers must declare
	# their own perms anyway, but this stops any future inline job here from
	# silently inheriting the GitHub default. Closes GHA-IAM-005 self-flag.
	permissions:
	contents: read

	jobs:
	checks:
	uses: ./.github/workflows/_checks.yml

Navigation Menu