From cfe8ca96e156514db6afb8a6f9171ef009e21941 Mon Sep 17 00:00:00 2001
From: Bernd Rodler <brvncde@gmail.com>
Date: Wed, 5 Aug 2026 21:50:43 +0200
Subject: [PATCH] =?UTF-8?q?ci(github):=20add=20PR=20Verify=20workflow=20?=
 =?UTF-8?q?=E2=80=94=20required=20check=20for=20main=20protection?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Mirrors .gitlab-ci.yml's verify stage (typecheck/lint/translations/build)
on GitHub Actions, since GitHub is being reactivated as a working build
path while gitlab.vnc.biz's own registry and runner are blocked (see
docs memory: gitlab-registry-dependency-proxy). Runs on PRs into main or
dev; wired as main's required status check.
---
 .github/workflows/pr-verify.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .github/workflows/pr-verify.yml

diff --git a/.github/workflows/pr-verify.yml b/.github/workflows/pr-verify.yml
new file mode 100644
index 00000000..f2b654bb
--- /dev/null
+++ b/.github/workflows/pr-verify.yml
@@ -0,0 +1,28 @@
+name: PR Verify
+
+# Required status check on `main` (Settings -> Branches). Mirrors the GitLab
+# CI `verify` stage (.gitlab-ci.yml) so both remotes gate merges the same
+# way: typecheck, lint, translations, and a real production build — no
+# registry, no cluster, nothing that can be blocked by infra that's down.
+on:
+  pull_request:
+    branches:
+      - main
+      - dev
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci
+      - run: npm run typecheck
+      - run: npm run lint
+      - run: npm run test:translations
+      - run: npm run build
+        env:
+          GIT_COMMIT: ${{ github.sha }}