name: PR on: [pull_request] # Read-only token: no step writes through GITHUB_TOKEN. permissions: contents: read jobs: pr: strategy: fail-fast: false matrix: step: ['lint', 'test', 'build', 'docs'] runs-on: ubuntu-latest env: YARN_ENABLE_SCRIPTS: false steps: - uses: actions/checkout@v7 - uses: actions/setup-node@v7 with: node-version: 'lts/*' - name: ${{ matrix.step }} run: | yarn install --immutable yarn ${{ matrix.step }}