Add workflow and dependabot

Author: koculu

.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ['*']
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    groups:
+      development-dependencies:
+        dependency-type: development
+        update-types: [minor, patch]

.github/pull_request_template.md

@@ -0,0 +1,11 @@
+## Change
+
+Describe the problem and resulting behavior. Link a related issue if applicable.
+
+## Validation
+
+Describe the checks you ran and include screenshots for visible UI changes.
+
+- [ ] Relevant tests and documentation updated.
+- [ ] CI passes.
+- [ ] Required generated assets regenerated manually, if applicable.

.github/workflows/ci.yml

@@ -0,0 +1,64 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  checks:
+    name: Checks (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        with:
+          persist-credentials: false
+
+      - name: Setup Node
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version: '24'
+          package-manager-cache: false
+
+      - name: Enable Corepack
+        run: corepack enable
+
+      - name: Install dependencies
+        run: yarn install --immutable
+
+      - name: Check line endings
+        run: yarn check-eol
+
+      - name: Lint without changing files
+        run: yarn lint:ci
+
+      - name: Type-check packages
+        run: yarn build
+
+      - name: Type-check VS Code extension with root TypeScript
+        run: yarn exec tsc -p packages/ts-ssg-vscode/tsconfig.json --noEmit
+
+      - name: Test
+        run: yarn test:ci
+
+      - name: Bundle distributable packages
+        if: runner.os == 'Linux'
+        run: yarn bundle
+
+      - name: Pack distributable packages
+        if: runner.os == 'Linux'
+        run: yarn package

CONTRIBUTING.md

@@ -0,0 +1,61 @@
+# Contributing
+
+Use short-lived branches and pull requests into `main`. Keep each pull request
+focused on one change so it is easy to review and revert.
+
+## Make a change
+
+1. Update your local `main`: `git switch main && git pull --ff-only`.
+2. Create a branch, such as `git switch -c feat/search` or `git switch -c fix/navigation`.
+3. Install dependencies with Node.js 24 and the Yarn version pinned in the root
+   `package.json`: `corepack enable` then `yarn install --immutable`.
+4. Make the change and update relevant tests and documentation.
+5. Run `yarn lint:ci`, `yarn build`, and `yarn test:ci` before requesting review.
+6. Push the branch and open a pull request targeting `main`.
+7. Resolve review feedback and CI failures, squash merge, then delete the branch.
+
+Use descriptive commits and pull request titles, for example `feat: add search`
+or `fix: preserve navigation state`. Squash merging gives `main` one commit per
+pull request. Use a new pull request to revert a change when necessary.
+
+CI runs on pull requests and pushes to `main`. It checks line endings, lints
+without modifying source, type-checks with TypeScript, and runs tests on Linux
+and Windows using Node.js 24. Linux also bundles and packs distributable packages.
+The VS Code extension is checked using the root TypeScript version.
+
+The existing `yarn lint` and `yarn pre-commit` commands modify files. Run
+generators deliberately and review their output before committing. When browser
+page scripts change, run `yarn embed` manually; do not edit generated files under
+`packages/ts-page-scripts/src/embed` directly. CI does not regenerate these files.
+
+## Configure GitHub once
+
+After pushing these files and obtaining the first successful CI run, create an
+active branch ruleset targeting `main` in **Settings → Rules → Rulesets**:
+
+- Require a pull request before merging and resolve all review conversations.
+- Require `Checks (ubuntu-latest)` and `Checks (windows-latest)` to pass.
+- Require branches to be up to date before merging.
+- Block force pushes and branch deletion.
+- For a team, require one approving review and dismiss stale approvals. Solo
+  maintainers can require pull requests without requiring another reviewer.
+
+Under **Settings → General → Pull Requests**, enable squash merging and automatic
+branch deletion. Disable merge commits and rebase merging to keep a consistent
+history. Under **Settings → Actions → General**, allow the official actions used
+by the workflows and keep default workflow token permissions read-only.
+
+These settings must be enabled on GitHub; committing workflow files does not
+enforce branch protection. See GitHub's [ruleset documentation](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/about-rulesets).
+
+## Dependencies and publishing
+
+Dependabot opens weekly pull requests for GitHub Actions and dependencies. Review
+them through the same CI and pull request process as other changes.
+
+The existing **Publish new npm packages** workflow remains a manual operation.
+It only publishes packages missing from npm; it is not a version-release workflow.
+Use its default dry run first and review the registry results before publishing.
+Restrict the `npm-publish` environment to `main` and configure required reviewers
+when a team is available. Publishing existing package versions needs a separate
+release process; merging a pull request does not publish to npm.

README.md

@@ -123,6 +123,8 @@ and DOM support.
 
 ## Develop this repository
 
+See [Contributing](CONTRIBUTING.md) for the branch, pull request, CI, and publishing workflow.
+
 This is a Yarn 4 workspace. Run commands from the repository root:
 
 ```sh

package.json

@@ -24,6 +24,7 @@
     "tsdown": "0.23.0",
     "tsx": "^4.21.0",
     "typescript": "7.0.2",
+    "typescript-parser": "npm:typescript@6.0.3",
     "vite": "^7.3.1",
     "vite-tsconfig-paths": "^6.1.1",
     "vitest": "^4.0.18"
@@ -40,12 +41,14 @@
     "gen-icons": "yarn tsx scripts/generate-icons.ts",
     "build": "echo 'Building...' && yarn workspaces foreach --no-private --all --verbose --topological -- run build",
     "lint": "yarn workspaces foreach --no-private --all --verbose --topological -- run lint",
-    "check-eol": "node scripts/check-eol.js",
+    "lint:ci": "yarn workspaces foreach --no-private --all --verbose --topological -- exec biome check ./src --formatter-enabled=false",
+    "check-eol": "yarn tsx scripts/check-eol.ts",
     "sync-purestack-version": "yarn tsx --no-warnings scripts/sync-purestack-version.ts",
     "bundle": "yarn tsx --no-warnings scripts/bundle.ts",
     "cleanup": "yarn tsx --no-warnings scripts/cleanup.ts",
     "publish-new-packages": "yarn tsx --no-warnings scripts/publish-new-packages.ts",
     "test": "vitest",
+    "test:ci": "vitest run",
     "package": "yarn workspaces foreach --no-private --all --parallel pack",
     "pack-vscode-ext": "yarn --cwd packages/ts-ssg-vscode build && yarn --cwd packages/ts-ssg-vscode package",
     "longest": "yarn tsx ./scripts/longest-functions.ts",

packages/ts-components/package.json

@@ -68,6 +68,7 @@
     "BtnGroup",
     "BtnGroupDropDown",
     "BtnLink",
+    "ClassicLogo",
     "CodeShowcase",
     "ComparisonColumn",
     "ComparisonFeature",

packages/ts-components/src/standard/composer/composer.test.ts

@@ -29,7 +29,8 @@ describe('Composer', () => {
       },
     )
     try {
-      const editor = document.querySelector<HTMLElement>('.composer__editor')!
+      const editor = document.querySelector<HTMLElement>('.composer__editor')
+      if (!editor) throw new Error('Composer editor was not rendered')
       expect(editor.textContent).toBe('Original draft')
 
       messageHtml(

packages/ts-components/src/standard/logo/logo.test.ts

@@ -73,7 +73,11 @@ describe('SiteLogo', () => {
       },
     )
     try {
-      const logo = () => document.querySelector<HTMLElement>('.site-logo')!
+      const logo = () => {
+        const element = document.querySelector<HTMLElement>('.site-logo')
+        if (!element) throw new Error('Site logo was not rendered')
+        return element
+      }
       expect(logo().textContent).toContain('First Brand')
       expect(logo().getAttribute('aria-label')).toBe('Custom accessible name')
       config({

packages/ts-components/src/standard/virtualList/variableMeasurement.test.ts

@@ -146,15 +146,18 @@ describe('variable row measurements', () => {
       expect(total()).toBeGreaterThan(beforeResize)
       expect(context?.visibleRows?.()[0]).toBe(firstRow)
       const emittedSizes: number[] = []
-      const stop = observe(context!.visibleRows!, (rows) => {
+      const visibleRows = context?.visibleRows
+      const viewport = context?.viewportElement?.()
+      if (!visibleRows || !viewport)
+        throw new Error('Virtual rows and viewport were not initialized')
+      const stop = observe(visibleRows, (rows) => {
         emittedSizes.push(rows.length)
       })
-      const viewport = context!.viewportElement!()!
       for (const position of [1000000, 1900000, 200000, 0]) {
         const beforeJump = rowMounts
         viewport.scrollTop = position
         viewport.dispatchEvent(new Event('scroll'))
-        expect(context!.visibleRows!().length).toBeLessThan(20)
+        expect(visibleRows().length).toBeLessThan(20)
         expect(rowMounts - beforeJump).toBeLessThan(40)
       }
       stop()