Which test suites exist, how to run them, and what CI requires before a merge to main.

Suites

A test file's directory decides its Vitest project. A component test under a data path fails with document is not defined. In apps/web, a bare bun test runs Bun's native runner. The package test script runs Vitest.

E2E modes

CI runs fullyParallel with two workers per shard and no retries. Local previews keep file-level parallelism. Waits use locators, URLs and expect.poll; never networkidle (the weather fetch and a clock keep the network busy) and never waitForTimeout. Shared waiters live in tests/_support/helpers.ts. Every Playwright project starts as a returning visitor with sections-choice set to expanded; specs that need fresh storage override it (playwright.config.ts). tests/accessibility-responsive.spec.ts runs 45 axe scans in each of the phone and tablet projects (15 per locale in EN, FR and ES) and is ignored by every other project; the desktop light and dark scans are unchanged.

CI

flowchart LR
  PR["PR to main"] --> CL["web.yml classify"]
  PR --> PG["web.yml prerelease-guard"]
  PR --> B["web.yml build<br/>one prebuilt site"]
  PR --> CW["web.yml ci-work"]
  CL & B --> E2E["web.yml e2e<br/>4 shards"]
  E2E -. "on failure" .-> REP["merged HTML report"]
  CL & PG & B & CW & E2E --> CI["web.yml ci"]
  PR --> CT["cms.yml test"]
  PR --> GL["secret-scan.yml gitleaks"]
  PR --> CQ["CodeQL default setup"]
  CI & CT & GL & CQ --> Q["merge queue<br/>same workflows on merge_group"]
  Q --> MERGE["squash merge to main"]
  MERGE --> LD["cms.yml live-diff<br/>read-only"]

The main ruleset 15785309 (read 2026-11-10) requires a pull request, the GitHub Actions checks gitleaks, ci and test (strict up-to-date off), and CodeQL code scanning results (errors, and security alerts high or higher). Merges go through a merge queue: squash, ALLGREEN, up to 5 entries built and merged per group, no wait, 45-minute check timeout. Repository admins bypass always (gh pr merge --admin skips the queue). Org ruleset 26919834 also protects the default branch: no deletion, no force push, changes through a pull request. E2E is required through ci.

Measured 2026-11-10 on one PR head (run 42776443667, attempts 1 to 3, runner wait 4 to 17 s): PR decision p50 6m24s, p90 6m28s, against p50 11.0 and p90 13.6 min before. The slowest e2e test step took 254 to 271 s, so the 4-minute shard aim is not met. Under a throttled runner queue, wall time grows with the wait. A queued check is not a result; if jobs never start, check GitHub Actions billing limits.

Shared CI setup is .github/actions/setup: Bun from .bun-version, a Bun cache keyed by bun.lock, then a frozen install. Turbo remote caching is enabled when TURBO_TOKEN and TURBO_TEAM are present and falls back to the local cache otherwise.

Conventions

Observable boundaries

Section tests cover first-visit expanded content with a Collapse all control and no stored choice, the bulk choice across pages and reload, and target reveal without changing the stored choice (tests/remembered-sections.spec.ts). These are maintained source contracts, not a fresh test execution in this documentation pass.