ci: add workflow for typecheck, test, and build#3
Merged
Conversation
The repo had no .github/workflows/ despite 45 vitest tests and an actively published @cueapi/mcp package on npm (currently v0.2.0). Every prior release shipped without automated verification. Workflow runs on push to main + pull_request: - npm ci for reproducible installs - tsc --noEmit for typechecking (separate from build so a type error fails distinctly from a bundling error) - npm test → vitest run (45 tests across oauth-flow, pkce, token-store, tools) - npm run build → tsc Actions pinned to commit SHAs (checkout v4.1.7, setup-node v5.3.0) matching the pinning convention used in cuechain/cueapi-python. Local verification: all three steps pass on Node 20. Does NOT add branch protection — that's a separate settings-only change the repo owner can make after this lands and CI has a green baseline to gate on.
This was referenced Apr 20, 2026
govindkavaturi-art
pushed a commit
that referenced
this pull request
May 4, 2026
…y-paste error from #3) The SHA f677139bbe7f9c59b41e40162b753c062f5d49a3 is for actions/setup-python@v5.3.0, not actions/setup-node. CI failed with "Unable to resolve action ... unable to find version" on every run since #3 merged. Replacing with actions/setup-node@v4.4.0's correct SHA so CI actually runs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
govindkavaturi-art
added a commit
that referenced
this pull request
May 4, 2026
* chore(ci): add Mergify Dependabot batching + dependabot.yml Mirrors the pattern in cueapi-core / cueapi-cli / cueapi/cueapi: - .mergify.yml: 5-at-a-time Dependabot batch with 30 min max wait, gated on the new `Typecheck, Test, Build` check from #3. - .github/dependabot.yml: weekly Monday npm + GitHub Actions updates with patch+minor grouping. Mergify GitHub App is installed on the cueapi org with all-repositories access (since 2026-05-04T10:24); this config will activate on merge. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * fix(ci): correct actions/setup-node SHA (was setup-python's SHA — copy-paste error from #3) The SHA f677139bbe7f9c59b41e40162b753c062f5d49a3 is for actions/setup-python@v5.3.0, not actions/setup-node. CI failed with "Unable to resolve action ... unable to find version" on every run since #3 merged. Replacing with actions/setup-node@v4.4.0's correct SHA so CI actually runs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Gk <gk@Gks-MacBook-Pro.local> Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the first CI workflow to cueapi-mcp. The repo had no `.github/workflows/` despite 45 vitest tests and an actively published `@cueapi/mcp` package on npm (currently v0.2.0). Every prior release shipped without automated verification.
Workflow
Runs on push to main + pull_request:
Actions pinned to commit SHAs (`checkout` v4.1.7, `setup-node` v5.3.0) matching the pinning convention used in cuechain / cueapi-python.
Local verification
All three steps pass on Node 20:
Out of scope
Test plan