Merge branch 'develop' into dependabot/npm_and_yarn/develop/dev-depen… #66

	name: CI

	# Runs on GitHub Actions.
	on:
	push:
	pull_request:

	# Least privilege: this workflow only reads the repo to type-check, test, and build it.
	permissions:
	contents: read

	jobs:
	build:
	# Type-check, test, and build are OS-independent, so a single Linux runner is
	# enough. Pinned to Node 24 (current Active LTS), matching engines and the
	# CONTRIBUTING support claim.
	strategy:
	fail-fast: false
	matrix:
	node: [24]
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	- name: Set up Node ${{ matrix.node }}
	uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
	with:
	node-version: ${{ matrix.node }}
	cache: npm
	- name: Install dependencies
	run: npm ci
	- name: Type-check
	run: npm run typecheck
	- name: Test
	run: npm test
	- name: Build (multi-file + single-file)
	run: npm run build

	# Stable required-status gate. Branch protection requires only this job, so a
	# Node-matrix bump or a rename of `build` never invalidates the required check.
	ci-success:
	needs: [build]
	if: always()
	runs-on: ubuntu-latest
	steps:
	- name: Verify the build job succeeded
	run: \|
	if [ "${{ needs.build.result }}" != "success" ]; then
	echo "::error::build job did not succeed (result: ${{ needs.build.result }})"
	exit 1
	fi

Provide feedback