chore(ci): skip expensive jobs on non-source changes

Add dorny/paths-filter gate so lint, build-check, and both test jobs
only run when source-affecting files change (src/, test/, package.json,
tsconfigs, Dockerfiles, etc.). Metadata checks (commit-lint,
changeset-check) remain unconditional.

Also restrict commit-lint to PRs/workflow_dispatch to avoid false
positives on squash-merge commits pushed to main, fix post-tests
Coveralls parallel-finished to not fire on skipped test runs, and bump
actions/checkout + actions/setup-node from v3 to v4.

Author: phoenix-server

.github/workflows/checks.yml

@@ -12,29 +12,59 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  changes:
+    name: Detect changed paths
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
+    outputs:
+      src: ${{ steps.filter.outputs.src }}
+    steps:
+      - uses: actions/checkout@v4
+      - id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            src:
+              - 'src/**'
+              - 'test/**'
+              - 'package.json'
+              - 'package-lock.json'
+              - 'tsconfig*.json'
+              - 'biome.json'
+              - '.knip.json'
+              - 'Dockerfile*'
+              - 'docker-compose*.yml'
+              - '.nvmrc'
+              - '.github/workflows/checks.yml'
+
   commit-lint:
     name: Lint commits
     runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
           cache: npm
       - name: Install package dependencies
         run: npm ci
       - name: Run commitlint
         uses: wagoid/commitlint-github-action@v5
+
   lint:
     name: Lint code
     runs-on: ubuntu-latest
+    needs: changes
+    if: needs.changes.outputs.src == 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -44,31 +74,40 @@ jobs:
         run: npm run lint
       - name: Run Knip
         run: npm run knip
+
   build-check:
     name: Build check
     runs-on: ubuntu-latest
+    needs: changes
+    if: needs.changes.outputs.src == 'true'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
           cache: npm
       - name: Install package dependencies
         run: npm ci
       - name: Run build check
         run: npm run build:check
+
   test-units-and-cover:
     name: Unit Tests And Coverage
     runs-on: ubuntu-latest
     needs:
-      - commit-lint
+      - changes
       - lint
       - build-check
+    if: |
+      always() &&
+      needs.changes.outputs.src == 'true' &&
+      needs.lint.result != 'failure' &&
+      needs.build-check.result != 'failure'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -93,17 +132,23 @@ jobs:
           flag-name: Unit
           github-token: ${{ secrets.GITHUB_TOKEN }}
           parallel: true
+
   test-integrations-and-cover:
     name: Integration Tests and Coverage
     runs-on: ubuntu-latest
     needs:
-      - commit-lint
+      - changes
       - lint
       - build-check
+    if: |
+      always() &&
+      needs.changes.outputs.src == 'true' &&
+      needs.lint.result != 'failure' &&
+      needs.build-check.result != 'failure'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+        uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
       - name: Run integration tests
@@ -131,27 +176,35 @@ jobs:
         with:
           name: integration-coverage-lcov
           path: .coverage/integration/lcov.info
+
   post-tests:
     name: Post Tests
-    needs: [test-units-and-cover, test-integrations-and-cover]
     runs-on: ubuntu-latest
+    needs:
+      - changes
+      - test-units-and-cover
+      - test-integrations-and-cover
     if: ${{ always() }}
     steps:
-    - name: Coveralls Finished
-      uses: coverallsapp/github-action@master
-      with:
-        github-token: ${{ secrets.GITHUB_TOKEN }}
-        parallel-finished: true
+      - name: Coveralls Finished
+        uses: coverallsapp/github-action@master
+        if: |
+          needs.test-units-and-cover.result != 'skipped' ||
+          needs.test-integrations-and-cover.result != 'skipped'
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          parallel-finished: true
+
   changeset-check:
     name: Changeset Required
     runs-on: ubuntu-latest
     if: github.event_name == 'pull_request' && github.head_ref != 'changeset-release/main'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
           cache: npm