docs: bin-runnerのmise要件とCI設定例を追記 #48

	name: CI

	on:
	push:
	tags-ignore:
	- "*"
	branches:
	- "**"
	pull_request:
	branches:
	- master

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	env:
	PYTHONDEVMODE: "1"
	# サプライチェーン攻撃対策: uvがlockfileを常に尊重する
	UV_FROZEN: "1"

	jobs:
	test:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.11", "3.12", "3.13", "3.14"]
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: GitHub Actionsのピン留め検証
	run: \|
	go install github.com/suzuki-shunsuke/pinact/v3/cmd/pinact@v3.9.0
	GOPATH_BIN="$(go env GOPATH)/bin"
	export PATH="$GOPATH_BIN:$PATH"
	pinact run --check

	- name: Install uv
	uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
	with:
	python-version: ${{ matrix.python-version }}
	enable-cache: true

	- name: Setup Node.js
	uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
	with:
	node-version: "lts/*"

	- name: Setup pnpm
	uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
	with:
	version: latest

	- name: Configure pnpm security
	run: pnpm config set minimum-release-age 1440 --global

	- name: Setup mise
	uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1

	- name: Install dependencies
	run: uv sync --all-extras --all-groups

	- name: Test with pyfltr
	run: uv run pyfltr ci

	- name: Prune uv cache for CI
	run: uv cache prune --ci

Provide feedback