🔄 synced file(s) with OrrisTech/.github

[iamzifei]

synced local file(s) with OrrisTech/.github.

This PR was automatically created by the org file sync workflow. It syncs the latest org standard files from the .github repo. Review the changes and merge when ready.

Changed files

• synced local .github/workflows/ci.yml with remote sync/.github/workflows/ci.yml

---

This PR was created automatically by the repo-file-sync-action workflow run #22211856352

[Copilot]

Pull request overview

This PR updates the repository’s thin CI caller workflow to match the organization-standard workflow in OrrisTech/.github, primarily changing how lint/typecheck and security audit failures affect the overall CI result.

Changes:

• Make lint-typecheck job advisory by allowing it to fail without failing the workflow (continue-on-error: true).
• Make security audit job advisory by allowing it to fail without failing the workflow (continue-on-error: true).
• Remove the build job’s dependency on lint-typecheck, allowing build to run independently.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Marking the Security Audit job as continue-on-error: true means the workflow will succeed even when the security audit fails (including on pushes to main/master). This significantly reduces the value of the audit; consider making failures blocking at least on default-branch pushes, or gating continue-on-error to PRs only.

Suggested change

	# Advisory only — does not block other jobs.
	continue-on-error: true
	# Advisory only on pull requests — blocks on pushes to main/master.
	continue-on-error: ${{ github.event_name == 'pull_request' }}

[Copilot]

continue-on-error: true makes lint/typecheck failures non-blocking for both PRs and pushes to main/master. If the intent is only to avoid blocking PRs while existing lint debt is worked down, consider making this conditional (e.g., allow failures on pull_request but enforce on push to default branches) so main stays protected.

Suggested change

	# Advisory only — does not block build or other jobs.
	# Remove continue-on-error once repo lint errors are resolved.
	continue-on-error: true
	# Advisory only for pull requests — does not block build or other jobs.
	# Remove or tighten continue-on-error once repo lint errors are resolved.
	continue-on-error: ${{ github.event_name == 'pull_request' }}