contractual next version

.github/dependabot.yml

@@ -0,0 +1,28 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    # The default branch is next. Omit target-branch so security groups apply too.
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "fix(*)"
+    groups:
+      security:
+        applies-to: security-updates
+        patterns: ["*"]
+      development:
+        dependency-type: development
+        update-types: [minor, patch]
+    versioning-strategy: increase
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    commit-message:
+      prefix: ci
+    groups:
+      actions:
+        patterns: ["*"]

.github/pull_request_template.md

@@ -0,0 +1,11 @@
+## Change
+
+Describe the problem and resulting behavior. Target `next` and use a Conventional Commit title, for example `fix(cli): handle missing snapshots`.
+
+## Validation
+
+List the relevant checks and their results.
+
+## Release impact
+
+Describe any compatibility change. Tagging or publishing requires Omer's explicit approval; a PR is not release approval.

.github/workflows/ci.yml

@@ -1,126 +1,43 @@
 name: Continuous Integration
-on: [pull_request]
-
+on:
+  pull_request:
+    branches: [next]
+  push:
+    branches: [next]
 permissions:
-  id-token: write
   contents: read
-  checks: write
-
+concurrency:
+  group: ci-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
 jobs:
-  build:
-    name: Build
+  verify:
+    name: Verify (Node ${{ matrix.node }})
     runs-on: ubuntu-latest
     strategy:
+      fail-fast: false
       matrix:
-        node-version: [18.x, 20.x, 22.x]
+        node: [22, 24, 26]
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-
-      - name: Use Node ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ matrix.node-version }}
-      - name: Install pnpm
-        uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 9.15.4
-      - uses: actions/cache@v2
-        with:
-          path: '**/node_modules'
-          key: ${{ runner.os }}-modules-${{ hashFiles('**/pnpm-lock.yaml') }}
-
-      - name: PNPM
-        run: pnpm install --frozen-lockfile
-
-      - name: Build
-        run: pnpm run build
-
-  lint:
-    name: Lint
+      - uses: actions/setup-node@v7
+        with:
+          node-version: ${{ matrix.node }}
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build
+      - run: pnpm lint
+      - run: pnpm test
+      - run: pnpm test:e2e
+  ci:
+    name: CI
+    if: always()
+    needs: [verify]
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: '22.x'
-      - name: Install pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9.15.4
-
-      - uses: actions/cache@v2
-        with:
-          path: '**/node_modules'
-          key: ${{ runner.os }}-modules-${{ hashFiles('**/pnpm-lock.yaml') }}
-
-      - name: PNPM
-        run: pnpm install --frozen-lockfile
-
-      - name: Lint
-        run: pnpm run lint
-
-      - name: Validate Packages
-        run: pnpm manypkg check
-
-  test:
-    name: Test
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        project: ['doubles.jest', 'doubles.sinon', 'core.unit', 'doubles.vitest', 'di.nestjs', 'di.inversify', 'unit']
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: '22.x'
-      - name: Install pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 9.15.4
-
-      - uses: actions/cache@v2
-        with:
-          path: '**/node_modules'
-          key: ${{ runner.os }}-modules-${{ hashFiles('**/pnpm-lock.yaml') }}
-
-      - name: PNPM
-        run: pnpm install --frozen-lockfile
-
-      - name: Create Coverage Directory
-        run: mkdir -p ${{ github.workspace }}/coverage
-
-      - name: Test
-        run: pnpm --filter @contractual/${{ matrix.project }} run test
+      - name: Require every verification job
         env:
-          JEST_JUNIT_OUTPUT_NAME: ${{ matrix.project }}.xml
-          JEST_JUNIT_OUTPUT_DIR: ${{ github.workspace }}/test-reports
-          JUNIT_OUTPUT_NAME: ${{ matrix.project }}
-          JUNIT_OUTPUT_DIR: ${{ github.workspace }}/test-reports
-          COVERAGE_DIR: ${{ github.workspace }}/coverage
-          COVERAGE_FILE: coverage-${{ matrix.project }}.xml
-
-      - name: Tests Results
-        uses: dorny/test-reporter@v1
-        if: always()
-        with:
-          reporter: 'jest-junit'
-          name: Tests Results (${{ matrix.project }})
-          path: ${{ github.workspace }}/test-reports/${{ matrix.project }}.xml
-          fail-on-error: false
-
-#      - name: Upload Report to Codecov
-#        uses: codecov/codecov-action@v3
-#        with:
-#          name: codecov-umbrella
-#          flags: ${{ matrix.project }}
-#          token: ${{ secrets.CODECOV_TOKEN }}
-#          fail_ci_if_error: true
-#          files: ${{ github.workspace }}/coverage/coverage-${{ matrix.project }}.xml
-#          verbose: true
+          RESULT: ${{ needs.verify.result }}
+        run: test "$RESULT" = success