ZenNotes 2.39.0: resize pictures by hand, copy links from a right-click, MCP follows a connected server, video embeds stop hijacking the keyboard #645

	name: CI

	on:
	push:
	branches:
	- main
	pull_request:

	permissions:
	contents: read

	concurrency:
	group: ci-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	production-dependency-audit:
	name: Production dependency audit
	runs-on: ubuntu-latest
	steps:
	- name: Check out repository
	uses: actions/checkout@v6

	- name: Set up Node.js
	uses: actions/setup-node@v6
	with:
	node-version: 22
	cache: npm

	- name: Reject high-severity production advisories
	run: npm audit --omit=dev --audit-level=high

	build:
	name: Build (${{ matrix.os }})
	runs-on: ${{ matrix.os }}
	strategy:
	fail-fast: false
	matrix:
	os:
	- ubuntu-latest
	# GitHub's free arm64 Linux runner for public repos.
	- ubuntu-24.04-arm
	- macos-latest
	- windows-latest
	steps:
	- name: Check out repository
	uses: actions/checkout@v6

	- name: Set up Node.js
	uses: actions/setup-node@v6
	with:
	node-version: 22
	cache: npm

	- name: Set up Go
	uses: actions/setup-go@v6
	with:
	# Pin a modern Go instead of go.mod's `go 1.22`: the 1.22 macOS
	# linker omits the LC_UUID load command, which the updated
	# macos-latest dyld now rejects ("missing LC_UUID", abort trap) when
	# launching `go test` binaries. go.mod stays at 1.22 (its real
	# minimum), so Nix/release builds are unaffected.
	go-version: stable
	cache-dependency-path: apps/server/go.sum

	- name: Install dependencies
	run: npm ci

	- name: Typecheck and build app
	env:
	GOCACHE: ${{ runner.temp }}/go-build-cache
	run: npm run build:prod

Navigation Menu