merge main into production

.editorconfig

@@ -1,6 +1,11 @@
-[*.{js,jsx,mjs,cjs,ts,tsx,mts,cts,vue}]
+# Applies to every file, so config and markup match the source instead of
+# depending on whatever the editor defaults to.
+[*]
 charset = utf-8
-indent_size = 2
-indent_style = space
+end_of_line = lf
 insert_final_newline = true
 trim_trailing_whitespace = true
+
+[*.{js,jsx,mjs,cjs,ts,tsx,mts,cts,vue}]
+indent_size = 2
+indent_style = space

.gitattributes

@@ -0,0 +1,19 @@
+# Line endings.
+#
+# Everything here is already stored as LF. Without this file that only stays
+# true because this machine happens to have core.autocrlf=true — a per-machine
+# git setting that doesn't travel with a clone. Declaring it here means the next
+# machine, and CI, get the same result regardless of local config.
+* text=auto eol=lf
+
+# Binaries: never normalise, never diff as text.
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.ico binary
+*.pdf binary
+*.woff binary
+*.woff2 binary
+
+# SVG is markup, so it normalises like any other text file.
+*.svg text eol=lf

.github/workflows/ci.yml

@@ -2,7 +2,9 @@ name: CI
 
 on:
   pull_request:
-    branches: [master]
+    # `master` catches feature work; `production` catches the release PR, which
+    # would otherwise merge and deploy without ever being checked.
+    branches: [master, production]
   workflow_dispatch:
 
 jobs:

.github/workflows/deploy.yml

@@ -2,7 +2,7 @@ name: Deploy to GitHub Pages
 
 on:
   push:
-    branches: [master]
+    branches: [production]
   # Lets you re-deploy from the Actions tab without pushing a commit.
   workflow_dispatch:
 
@@ -34,6 +34,11 @@ jobs:
       - name: Lint
         run: npm run lint:check
 
+      # Same gate as ci.yml, so a direct push can't deploy formatting drift that
+      # a pull request would have rejected.
+      - name: Check formatting
+        run: npm run format:check
+
       - name: Build
         run: npm run build
 

.gitignore

@@ -5,26 +5,26 @@ npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 pnpm-debug.log*
-lerna-debug.log*
 
 node_modules
-.DS_Store
 dist
-dist-ssr
 coverage
 *.local
 
-/cypress/videos/
-/cypress/screenshots/
+# Env files. Nothing here holds a real secret — this is a static build, so
+# anything in an env file ends up in the bundle anyway — but that's exactly why
+# committing one by reflex is worth preventing.
+.env
+.env.*
+!.env.example
+
+# OS junk. .DS_Store is macOS; the other two are what Windows leaves behind.
+.DS_Store
+Thumbs.db
+desktop.ini
 
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json
 .idea
-*.suo
-*.ntvs*
-*.njsproj
-*.sln
 *.sw?
-
-*.tsbuildinfo