humanspeak / svelte-markdown / 33002733107

95%

push

github

ci: trigger post-merge publish and deploy on push to main (#379)

Fork PRs don't receive repository secrets on pull_request events — even
the merged [closed] event — so npm publishes and Cloudflare deploys
silently failed for external contributions (first hit:
humanspeak/svelte-motion#466). Mirrors svelte-motion PR #468.

- npm-publish.yml and cloudflare-deploy.yml now trigger on push to main
  instead of pull_request[closed]; check-if-merged recovers the merged
  PR's labels/title/URL from the commit via the GitHub API, and all
  downstream github.event.pull_request.* references use those outputs.
- Bump actions: setup-node v6->v7, codeql-action v3->v4,
  setup-python v6->v7, stale v10->v11 (checkout, cache,
  upload-artifact, github-script, import-gpg were already current).
- Add trunk analytics uploads for vitest (junit-vitest.xml) and
  playwright (test-results/junit-playwright.xml) results in
  npm-publish.yml, marked continue-on-error so a flaky telemetry upload
  can never block a release.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

882 of 973 branches covered (90.65%)

Branch coverage included in aggregate %.

1457 of 1491 relevant lines covered (97.72%)

5629.41 hits per line