From 2a16d90433c2568726f7c4422576a94e13896260 Mon Sep 17 00:00:00 2001
From: Joel Natividad <1980690+jqnatividad@users.noreply.github.com>
Date: Thu, 8 Oct 2026 20:14:19 -0400
Subject: [PATCH] ci: run the JS (Vitest) suite in the Unit Tests workflow

The 12 tests under tests/js/ pin the polling contract between
scheming-ai-suggestions.js and the Python pipeline, but no workflow ran them,
so Dependabot's npm bumps (vitest, jsdom, jquery) merged unchecked. Adds a
js-tests job (Node 22, npm ci + npm test) alongside the Python unit suite.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/test.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1ea9543..18b9a14 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -84,3 +84,26 @@ jobs:
           # docker-compose stack (Prefect, Postgres, Redis, Solr).
           python3 -m pytest tests/ --ignore=tests/integration \
             -o addopts= -p no:cacheprovider -q
+
+  js-tests:
+    name: JS suite (Vitest, Node 22)
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout datapusher-plus
+        uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+
+      # Pins the polling contract between scheming-ai-suggestions.js and the
+      # Python pipeline (tests/js/). Running it here also exercises
+      # Dependabot's npm bumps (vitest, jsdom, jquery) before they merge.
+      - name: Install JS dependencies
+        run: npm ci
+
+      - name: Run JS test suite
+        run: npm test