ci: add e18e dependency diff workflow

[serhalp]

🔗 Linked issue

N/A

🧭 Context

See https://github.com/e18e/action-dependency-diff.

📚 Description

This configures the e18e/action-dependency-diff workflow. I've tried to tune it to avoid being noisy, but we may have to iterate a bit on it once merged.

Note that the action doesn't have sophisticated monorepo handling, so it won't report the base app + cli + docs separately, since they share a lockfile.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
npmx.dev	Ready	Preview, Comment	Apr 10, 2026 11:17am

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ignored	Preview	Apr 10, 2026 11:17am
npmx-lunaria	Ignored		Apr 10, 2026 11:17am

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 105d9a52-f3b8-433e-be92-27460824236b

📥 Commits

Reviewing files that changed from the base of the PR and between cb41e32 and 2998826.

📒 Files selected for processing (2)

• .github/workflows/dependency-diff-comment.yml
• .github/workflows/dependency-diff.yml

✅ Files skipped from review due to trivial changes (2)

• .github/workflows/dependency-diff-comment.yml
• .github/workflows/dependency-diff.yml

---

📝 Walkthrough

Walkthrough

Adds two GitHub Actions workflows. dependency-diff runs on pull requests to main or release when dependency-related files change (package.json, pnpm-lock.yaml, pnpm-workspace.yaml, and package.json under docs/ and cli/). It uses concurrency controls, contents: read permission, checks out full history, runs e18e/action-dependency-diff in artifact mode with thresholds and replacement detection, and uploads an e18e-diff-result artifact when produced. dependency-diff-comment runs on workflow_run after a successful dependency-diff, downloads the artifact and posts a PR comment via e18e/action-dependency-diff in comment-from-artifact mode.

Suggested reviewers

• ghostdevv

🚥 Pre-merge checks | ✅ 1

✅ Passed checks (1 passed)

Check name	Status	Explanation
Description check	✅ Passed	The pull request description clearly describes the changeset, explaining that it configures the e18e/action-dependency-diff workflow and includes relevant context about monorepo limitations.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch serhalp/add-dependency-diff-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}