Repository navigation

Merge pull request #178 from Weaverse/fix/pin-hydrogen-2026-4 #93

	name: CI

	on:
	pull_request:
	push:
	branches: [main]

	# Least privilege: this workflow only reads the checkout. Without an explicit
	# block the job would inherit the repository default, which can be write.
	permissions:
	contents: read

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	verify:
	name: Verify
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version-file: package.json
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Lint
	run: npm run biome

	- name: Typecheck
	run: npm run typecheck

	- name: Unit tests
	run: npm test

	# Typecheck does not see bundler-level breakage: a bad dynamic import, a
	# client-only module pulled into the worker bundle, or a Vite plugin
	# misconfiguration all typecheck clean and fail at deploy. The build
	# needs no storefront credentials, so it runs unauthenticated here.
	- name: Build
	run: npm run build