feat(template): 为项目添加持续集成和交付流程

- 添加 setup-npm action 以创建 node 环境
- 添加 dependabot 配置以自动更新依赖
- 添加 code-review workflow 以进行代码格式和质量检查
- 添加 dependency-review workflow 以扫描拉取请求中的依赖更改
- 添加 release-please workflow 以自动化版本管理和发布流程

Author: cloudcome

templates/default/.github/actions/setup-npm/action.yml

@@ -0,0 +1,17 @@
+name: setup
+description: 依照 nvmrc 创建 node 环境
+
+runs:
+  using: composite
+  steps:
+    - run: sudo timedatectl set-timezone Asia/Shanghai
+      shell: bash
+    - run: timedatectl
+      shell: bash
+    - uses: actions/setup-node@v4
+      with:
+        node-version-file: .nvmrc
+        cache: npm
+        cache-dependency-path: package-lock.json
+    - run: npm ci
+      shell: bash

templates/default/.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: daily

templates/default/.github/workflows/code-review.yml

@@ -0,0 +1,32 @@
+# 代码格式、基本质量检查
+
+name: code review
+
+on:
+  push:
+    branches:
+      - v*.x
+  pull_request:
+  schedule:
+    # 19:00(UTC) 每天，相当于 03:00(GMT+8)
+    - cron: '0 19 * * *'
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-npm
+      - run: npm run lint
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-npm
+      - run: npm run test:coverage
+      - uses: codacy/codacy-coverage-reporter-action@v1
+        if: github.actor != 'dependabot[bot]'
+        with:
+          api-token: ${{ secrets.CODACY_API_TOKEN }}
+          coverage-reports: coverage/lcov.info

templates/default/.github/workflows/dependency-review.yml

@@ -0,0 +1,15 @@
+# 此操作会扫描您的拉取请求以查找依赖项更改，如果引入任何漏洞或无效许可证，则会引发错误
+
+name: dependency review
+
+on:
+  pull_request:
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/dependency-review-action@v4

templates/default/.github/workflows/release-please.yml

@@ -0,0 +1,54 @@
+# 如果 devPR 到主干，则会根据约定式提交创建一个 releasePR，是一个新版本合并请求
+# 如果 releasePR 到主干，则会触发新版本发布到 npm/github 等仓库
+
+name: release please
+
+on:
+  push:
+    branches:
+      - v*.x
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+    steps:
+      - uses: googleapis/release-please-action@v4
+        id: release
+        with:
+          token: ${{secrets.GITHUB_TOKEN}}
+
+  publish-npm:
+    needs: release
+    if: needs.release.outputs.release_created
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-npm
+      - run: npm run build
+      - uses: FrontEndDev-org/publish-node-package-action@v2
+        with:
+          target: npm
+          token: ${{ secrets.NPM_TOKEN }}
+      - uses: FrontEndDev-org/npm-mirror-sync-action@v1
+
+  publish-github:
+    needs: release
+    if: needs.release.outputs.release_created
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-npm
+      - run: npm run build
+      - uses: FrontEndDev-org/[email protected]
+        with:
+          target: github
+          token: ${{ secrets.GITHUB_TOKEN }}