Add auth to Settings and Maintenance routes; document security in Swa… #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
| # Release Workflow | |
| # | |
| # This workflow is triggered when a release is created or when code is pushed to main. | |
| # It builds the production-ready code and can be extended to deploy to your hosting platform. | |
| # | |
| # Usage: | |
| # - Create a release tag (e.g., v1.0.0) to trigger this workflow | |
| # - Or push to main branch to build the latest version | |
| name: Release | |
| # Trigger on release creation or push to main | |
| on: | |
| release: | |
| types: [created, published] | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - 'v*' | |
| # Prevent concurrent runs | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: false | |
| jobs: | |
| # Build job for production | |
| build: | |
| name: Build Production | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Checkout the repository code | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| # Setup pnpm | |
| - name: Setup pnpm | |
| uses: pnpm/action-setup@v4 | |
| with: | |
| version: 8 | |
| # Setup Node.js | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20.x' | |
| cache: 'pnpm' | |
| # Install dependencies | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile --prod=false | |
| # Run type check | |
| - name: Type check | |
| run: pnpm check | |
| # Build production bundle | |
| - name: Build production | |
| run: pnpm build:prod | |
| env: | |
| NODE_ENV: production | |
| # Create build artifact | |
| - name: Upload build artifacts | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: dist | |
| path: dist/ | |
| retention-days: 30 |