Consolidates dependency updates to reduce noise:
- Schedule changed to weekly (Monday mornings only)
- All non-major updates grouped into single weekly PR
- Major updates still get individual PRs for review
- Security updates remain immediate (unchanged)
This reduces commit frequency from 10-15/week to ~1-2/week while
maintaining test requirements and security responsiveness.
Remove explicit PNPM_VERSION environment variable and version
specification from pnpm/action-setup@v4. The action now
automatically reads the version from package.json's
packageManager field, eliminating version duplication.
Consolidate package.json scripts from 17 to 10 by removing
redundant test variants and combining type-check + lint into
a single 'check' command. Update CI workflow to use simplified
commands and merge separate unit/integration test steps into
unified test execution. Update documentation to reflect new
script structure.
- Update version from 0.2.0 to 0.9.0
- Upgrade Vitest from v3 to v4 for improved testing capabilities
- Add @vitest/coverage-v8 for comprehensive code coverage reporting
- Enhance GitHub Actions CI workflow with separate unit and integration
test runs
- Integrate Codecov v5 for coverage reporting and test results tracking
- Add JUnit reporter for better test result analysis
- Configure @codecov/vite-plugin for automated coverage collection
Adds security-events: write permission to the CI workflow to allow the
Security Scan job to upload Trivy SARIF results to GitHub Code Scanning.
This resolves the "Resource not accessible by integration" error.
- Add GitHub Actions workflows for CI, release, and deployment
- Configure Renovate for automated dependency updates
- Set up Husky pre-commit hooks with lint-staged
- Add commitlint for enforcing Conventional Commits
- Configure semantic-release for automated versioning
- Add Prettier configuration for consistent formatting
- Reformat codebase with new formatting rules
