feat(ci): add landingpage CI workflows and dependabot config

.github/dependabot.yml

@@ -72,6 +72,23 @@ updates:
       development-dependencies:
         dependency-type: "development"
 
+  - package-ecosystem: "npm"
+    directory: "/landingpage"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    target-branch: "deps"
+    commit-message:
+      prefix: "chore(deps):"
+    groups:
+      production-dependencies:
+        dependency-type: "production"
+      development-dependencies:
+        dependency-type: "development"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
   - package-ecosystem: "docker"
     directory: "/src/server/api/go"
     schedule:

.github/workflows/landingpage-test.yaml

@@ -0,0 +1,127 @@
+name: Landing Page Test
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+    paths:
+      - "landingpage/**"
+      - ".github/workflows/landingpage-test.yaml"
+  pull_request:
+    branches:
+      - main
+      - dev
+    paths:
+      - "landingpage/**"
+      - ".github/workflows/landingpage-test.yaml"
+
+jobs:
+  lint-and-build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: landingpage
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: "pnpm"
+          cache-dependency-path: landingpage/pnpm-lock.yaml
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run lint
+        run: pnpm run lint
+
+  test-int:
+    runs-on: ubuntu-latest
+    needs: lint-and-build
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: landingpage
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: "pnpm"
+          cache-dependency-path: landingpage/pnpm-lock.yaml
+
+      - name: Generate .env
+        run: |
+          echo "PAYLOAD_SECRET=$(openssl rand -hex 32)" >> .env
+          echo 'NEXT_PUBLIC_SERVER_URL="http://localhost:3000"' >> .env
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run integration tests
+        run: pnpm run test:int
+
+  test-e2e:
+    runs-on: ubuntu-latest
+    needs: lint-and-build
+    permissions:
+      contents: read
+    defaults:
+      run:
+        working-directory: landingpage
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "22"
+          cache: "pnpm"
+          cache-dependency-path: landingpage/pnpm-lock.yaml
+
+      - name: Generate .env
+        run: |
+          echo "PAYLOAD_SECRET=$(openssl rand -hex 32)" >> .env
+          echo 'NEXT_PUBLIC_SERVER_URL="http://localhost:3000"' >> .env
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Install Playwright browsers
+        run: pnpm exec playwright install --with-deps chromium
+
+      - name: Run e2e tests
+        run: pnpm run test:e2e
+        env:
+          CI: true
+
+      - name: Upload Playwright report
+        uses: actions/upload-artifact@v6
+        if: ${{ !cancelled() }}
+        with:
+          name: playwright-report
+          path: landingpage/playwright-report/
+          retention-days: 30

.github/workflows/security-reusable.yaml

@@ -71,3 +71,6 @@ jobs:
       - name: Audit UI
         working-directory: src/server/ui
         run: pnpm audit --audit-level=high --prod
+      - name: Audit Landing Page
+        working-directory: landingpage
+        run: pnpm audit --audit-level=high --prod

.github/workflows/security-scan.yaml

@@ -16,6 +16,8 @@ on:
       - 'src/client/acontext-ts/package-lock.json'
       - 'src/server/ui/package.json'
       - 'src/server/ui/pnpm-lock.yaml'
+      - 'landingpage/package.json'
+      - 'landingpage/pnpm-lock.yaml'
       - '.github/workflows/security-scan.yaml'
       - '.github/workflows/security-reusable.yaml'
   pull_request:
@@ -33,6 +35,8 @@ on:
       - 'src/client/acontext-ts/package-lock.json'
       - 'src/server/ui/package.json'
       - 'src/server/ui/pnpm-lock.yaml'
+      - 'landingpage/package.json'
+      - 'landingpage/pnpm-lock.yaml'
       - '.github/workflows/security-scan.yaml'
       - '.github/workflows/security-reusable.yaml'
   workflow_dispatch:

landingpage/package.json

@@ -27,13 +27,13 @@
   "dependencies": {
     "@gsap/react": "^2.1.2",
     "@next/third-parties": "^16.1.6",
-    "@opennextjs/cloudflare": "^1.16.2",
-    "@payloadcms/db-d1-sqlite": "3.74.0",
-    "@payloadcms/next": "3.74.0",
-    "@payloadcms/plugin-seo": "^3.74.0",
-    "@payloadcms/richtext-lexical": "3.74.0",
-    "@payloadcms/storage-r2": "3.74.0",
-    "@payloadcms/ui": "3.74.0",
+    "@opennextjs/cloudflare": "^1.16.5",
+    "@payloadcms/db-d1-sqlite": "3.76.1",
+    "@payloadcms/next": "3.76.1",
+    "@payloadcms/plugin-seo": "^3.76.1",
+    "@payloadcms/richtext-lexical": "3.76.1",
+    "@payloadcms/storage-r2": "3.76.1",
+    "@payloadcms/ui": "3.76.1",
     "@radix-ui/react-slot": "^1.2.4",
     "@tailwindcss/postcss": "^4.1.18",
     "class-variance-authority": "^0.7.1",
@@ -42,11 +42,11 @@
     "dotenv": "16.6.1",
     "graphql": "^16.12.0",
     "gsap": "^3.14.2",
-    "lucide-react": "^0.563.0",
-    "motion": "^12.31.0",
+    "lucide-react": "^0.564.0",
+    "motion": "^12.34.0",
     "next": "15.5.12",
     "next-themes": "^0.4.6",
-    "payload": "3.74.0",
+    "payload": "3.76.1",
     "postcss": "^8.5.6",
     "react": "19.2.4",
     "react-dom": "19.2.4",
@@ -55,23 +55,24 @@
     "tailwindcss": "^4.1.18"
   },
   "devDependencies": {
-    "@playwright/test": "1.58.1",
+    "@eslint/eslintrc": "^3.3.3",
+    "@playwright/test": "1.58.2",
     "@testing-library/react": "16.3.2",
-    "@types/node": "^22.19.8",
-    "@types/react": "19.2.11",
+    "@types/node": "^22.19.11",
+    "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "@vitejs/plugin-react": "4.7.0",
     "eslint": "^9.39.2",
     "eslint-config-next": "15.5.12",
     "jsdom": "26.1.0",
-    "playwright": "1.58.1",
-    "playwright-core": "1.58.1",
+    "playwright": "1.58.2",
+    "playwright-core": "1.58.2",
     "prettier": "^3.8.1",
     "tw-animate-css": "^1.4.0",
     "typescript": "5.9.3",
     "vite-tsconfig-paths": "5.1.4",
     "vitest": "3.2.4",
-    "wrangler": "~4.62.0"
+    "wrangler": "~4.65.0"
   },
   "engines": {
     "node": "^18.20.2 || >=20.9.0",
@@ -84,7 +85,10 @@
       "sharp",
       "unrs-resolver",
       "workerd"
-    ]
+    ],
+    "overrides": {
+      "@isaacs/brace-expansion": ">=5.0.1"
+    }
   },
   "cloudflare": {
     "bindings": {