Dev tama

.github/workflows/ci.yml

@@ -2,28 +2,50 @@ name: CI
 
 on:
   push:
-    branches: ['*']
+    branches: [main, develop]
   pull_request:
-    branches: ['*']
+    branches: [main, develop]
 
 jobs:
-  ci:
+  test:
+    name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
-      - uses: oven-sh/setup-bun@v2
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - name: Typecheck
-        run: bun run typecheck
-
-      - name: Lint
+      - name: Run linter
         run: bun run lint
 
-      - name: Test
+      - name: Run type check
+        run: bun run typecheck
+
+      - name: Run tests
         run: bun test
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    needs: test
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Build
+        run: bun run build

.github/workflows/version-bump.yml

@@ -0,0 +1,31 @@
+name: Version Bump
+
+on:
+  workflow_dispatch:
+    inputs:
+      version_type:
+        description: 'Version bump type'
+        required: true
+        default: 'patch'
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
+
+permissions:
+  contents: write
+
+jobs:
+  bump:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+      - run: npm version ${{ inputs.version_type }} -m "release: bump versi ke %s"
+      - run: git push && git push --tags

.gitignore

@@ -67,4 +67,27 @@ pids/
 .npm/
 .yarn-integrity
 .lock-wscript
-*.tgz
+*.tgz
+
+# Environment files - JANGAN PERNAH COMMIT
+*.env
+
+# Secrets dan credentials
+*.pem
+*.key
+*.secret
+secrets/
+credentials/
+*.credentials
+
+# API Keys dan Tokens
+*.token
+*.apikey
+api-keys.json
+tokens.json
+github-token*
+copilot-token*
+
+# Config dengan secrets
+config.local.json
+config.secret.json