chore: scoria の導入と依存更新 (2026-10-18)

.c8rc.json

@@ -0,0 +1,6 @@
+{
+  "all": true,
+  "include": ["src/**"],
+  "extension": [".ts", ".vue"],
+  "reporter": ["lcov", "text-summary"]
+}

.github/workflows/pull_request.yaml

@@ -1,5 +1,5 @@
 # This workflow runs lint / typecheck / build / test across
-# Linux + Windows + macOS on Node 22.x and 24.x.
+# Linux + Windows + macOS on Node 24.x and 26.x (engines: node >=24).
 # Reference: ../mulmoclaude/.github/workflows/pull_request.yaml
 
 name: Node.js CI
@@ -22,7 +22,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: [22.x, 24.x]
+        node-version: [24.x, 26.x]
         os: [ubuntu-latest, windows-latest, macos-latest]
     steps:
     - uses: actions/checkout@v7

.github/workflows/scoria.yml

@@ -0,0 +1,24 @@
+name: scoria
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  # Measures with scoria, uploads the findings to code scanning and publishes the README badge.
+  # The project's code runs only in the workflow's read-only job; see the workflow for how the
+  # write permissions below are split between its upload and badge jobs.
+  scoria:
+    uses: isamu/lab/.github/workflows/scoria-measure.yml@776e7bf844fbf93545fec617d177e64e58a49a7b
+    permissions:
+      contents: write
+      security-events: write
+    with:
+      # scoria only reads an existing coverage report (coverage/lcov.info); it never runs the tests itself.
+      before: yarn run test:coverage
+      scoria: yarn run quality

.gitignore

@@ -2,3 +2,4 @@ node_modules
 dist
 *.local
 .DS_Store
+coverage