ci: add eslint, build workflows and dependabot configuration

[Copilot]

Implements high-priority CI/CD improvements from the gap assessment: dedicated linting workflow, build verification with Node matrix, and automated dependency updates.

New Workflows

• .github/workflows/lint.yml - ESLint on PRs/pushes to main, 5-minute timeout
• .github/workflows/build.yml - TypeScript build verification across Node 18/20/22 matrix, verifies dist/cli.js output

Dependabot Configuration

• npm (root + docs-site): Weekly, grouped by dependency type (production, dev, typescript, testing, astro)
• GitHub Actions: Weekly, minor/patch grouped
• Docker (containers/agent, containers/squid): Weekly

All action SHAs match existing workflows for consistency.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>CI/CD Pipeline Improvements - Tracking Issue</issue_title>
<issue_description>## Overview

This tracking issue consolidates all action items identified in the CI/CD Pipeline Gap Assessment (Discussion #227).

High Priority (Immediate)

• [High Priority] Add dedicated ESLint CI workflow #231 - Add dedicated ESLint CI workflow (~2 hours)
• [High Priority] Add build verification workflow for PRs #232 - Add build verification workflow for PRs (~1 hour)
• [High Priority] Enable Dependabot for automated dependency updates #233 - Enable Dependabot for automated dependency updates (~30 minutes)

Medium Priority (Month 1)

• [Medium Priority] Add coverage regression detection #234 - Add coverage regression detection (~4 hours)
• [Medium Priority] Add documentation preview environment for PRs #235 - Add documentation preview environment for PRs
• [Medium Priority] Expand integration test coverage #236 - Expand integration test coverage (target 50%+)

Long-term (Quarterly)

• [Long-term] Implement test parallelization to reduce CI time #239 - Implement test parallelization to reduce CI time by 30-50%
• [Long-term] Add performance benchmarking suite #240 - Add performance benchmarking suite
• [Long-term] Enhance test matrix with multiple Node and OS versions #241 - Enhance test matrix with multiple Node and OS versions

Related

• Discussion CI/CD Pipeline and Integration Tests - Gap Assessment #227 - CI/CD Pipeline Gap Assessment

Progress

Track overall progress by monitoring the linked issues above. Close this issue when all sub-issues are resolved or explicitly deferred.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes CI/CD Pipeline Improvements - Tracking Issue #243

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

Smoke Test Results - Claude Engine

Last 2 Merged PRs:

• ci: pin GitHub Actions to commit SHAs for supply chain security #266: ci: pin GitHub Actions to commit SHAs for supply chain security
• chore: delete existing firewall tests and migrate smoke tests #229: chore: delete existing firewall tests and migrate smoke tests

Test Results:

• ✅ GitHub MCP: Retrieved recent PRs
• ✅ Playwright: Page title contains "GitHub"
• ✅ File Writing: Created test file successfully
• ✅ Bash Tool: Verified file contents

Status: PASS

AI generated by Smoke Claude

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• chore: delete existing firewall tests and migrate smoke tests #229: chore: delete existing firewall tests and migrate smoke tests
• feat(ci): add coverage regression detection #244: feat(ci): add coverage regression detection

Test Results:

• ✅ GitHub MCP: Successfully retrieved PR information
• ❌ Playwright: Requires sudo (firewall needs iptables)
• ✅ File Writing: Test file created
• ✅ Bash Tool: File verified successfully

Overall: PARTIAL PASS (3/4 tests passed)

cc @Mossaka @copilot

AI generated by Smoke Copilot

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

[github-actions]

Smoke Test Results (Claude)

Last 2 PRs:

• chore: remove smoke-codex workflow due to missing key #291: chore: remove smoke-codex workflow due to missing key
• ci: add agentic documentation preview workflow with Playwright #246: ci: add agentic documentation preview workflow with Playwright

✅ GitHub MCP: Retrieved PRs
✅ Playwright: Page title verified (contains "GitHub")
✅ File Writing: Created test file
✅ Bash: Read file back successfully

Status: PASS

AI generated by Smoke Claude

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• feat: port plan workflow from gh-aw repository #230: feat: port plan workflow from gh-aw repository
• ci: pin GitHub Actions to commit SHAs for supply chain security #266: ci: pin GitHub Actions to commit SHAs for supply chain security

Test Results:

• ✅ GitHub MCP (fetched merged PRs)
• ❌ Playwright (blocked by firewall: playwright-akamai.azureedge.net)
• ✅ File Writing (created test file)
• ✅ Bash Tool (verified file contents)

Overall Status: FAIL

Note: @Mossaka - Playwright browser downloads blocked by firewall. Test validated with curl instead, which confirmed GitHub title contains "GitHub".

AI generated by Smoke Copilot