fix(deps): remediate transitive vulns (npm audit fix, no --force) #11

	name: CI

	# Botsmann is deployed self-hosted on the Hetzner box "bitbaum" behind Caddy.
	# Deployment runs from the local `.husky/pre-push` hook (build -> rsync -> systemd
	# restart) when main is pushed. This workflow only validates build/lint/tests.

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	build-and-test:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '22'
	cache: 'npm'

	- name: Install dependencies and build
	run: npm run build:ci
	env:
	NEXT_PUBLIC_DEPLOY_TIME: ${{ github.event.head_commit.timestamp }}

	- name: Run format check
	run: npm run format:check --if-present

	- name: Run linting
	run: npm run lint --if-present

	- name: Run tests
	run: npm run test --if-present

Navigation Menu