feat: 接入原生视觉工作流与可信 CI，并优化多区域刷选

.github/workflows/statplots-test.yml

@@ -4,6 +4,9 @@ on:
     paths:
       - 'packages/vchart-statplots/**'
       - 'packages/vchart/src/**'
+      - 'packages/vchart-extension/scripts/visual/**'
+      - 'packages/vchart-extension/__tests__/runtime/visual-build.test.cjs'
+      - 'common/config/flow-ci.json'
       - 'common/config/rush/**'
       - 'rush.json'
       - '.github/workflows/statplots-test.yml'
@@ -14,6 +17,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          persist-credentials: false
       - uses: actions/setup-node@v4
         with:
           node-version: '22'
@@ -36,9 +42,16 @@ jobs:
       - run: npm test --prefix packages/vchart-statplots -- --runInBand
       - name: Skill resource synchronization regression
         run: node --test packages/vchart-statplots/__tests__/runtime/skill-resources.test.cjs
-      - run: npm run test:browser --prefix packages/vchart-statplots
+      - name: Visual suite build regression
+        run: node --test packages/vchart-extension/__tests__/runtime/visual-build.test.cjs
+      - run: npm run test:browser --prefix packages/vchart-statplots -- --reporter=json,html,line
+        env:
+          PLAYWRIGHT_JSON_OUTPUT_FILE: ${{ github.workspace }}/.vchart-statplots/statplots-browser.json
+          PLAYWRIGHT_HTML_OUTPUT_DIR: ${{ github.workspace }}/.vchart-statplots/report
       - uses: actions/upload-artifact@v4
         if: always()
         with:
           name: statplots-browser-report
-          path: .vchart-statplots/report
+          path: |
+            .vchart-statplots/report
+            .vchart-statplots/statplots-browser.json

.github/workflows/visactor-trusted-ci.yml

@@ -0,0 +1,36 @@
+name: VisActor trusted CI dispatch
+run-name: VisActor trusted CI / ${{ inputs.request_digest }}
+
+# 只受理默认分支的固定控制请求；PR 代码不会在持有 GitHub 凭据的 job 中执行。
+on:
+  workflow_dispatch:
+    inputs:
+      request:
+        description: Version-bound CI request from the trusted controller
+        required: true
+        type: string
+      request_digest:
+        description: SHA-256 of the canonical request
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  dispatch:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ github.sha }}
+          persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22.22.2'
+      - name: Confirm the bound request (does not execute tests)
+        env:
+          FLOW_CI_REQUEST: ${{ inputs.request }}
+          FLOW_CI_REQUEST_DIGEST: ${{ inputs.request_digest }}
+        run: node common/scripts/flow-ci-dispatch.mjs

common/changes/@visactor/vchart/upgrade-vutils-vrender_2026-10-16.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@visactor/vchart",
+      "comment": "升级 VUtils 家族依赖至 ~1.0.28、VRender 家族依赖至 1.1.12，恢复 LOWESS 历史默认参数并保留算法正确性修复。",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@visactor/vchart"
+}

common/config/flow-ci.json

@@ -0,0 +1,67 @@
+{
+  "schemaVersion": 1,
+  "kind": "trusted_ci_policy",
+  "repository": "VisActor/VChart",
+  "baseRef": "develop",
+  "nodeMajor": 22,
+  "rushVersion": "5.148.0",
+  "pnpmVersion": "10.7.0",
+  "unitPackages": [
+    "vchart",
+    "vchart-extension",
+    "vchart-statplots",
+    "vchart-schema",
+    "vutils-extension"
+  ],
+  "buildTargets": [
+    "@visactor/vchart",
+    "@visactor/vchart-extension",
+    "@visactor/vchart-statplots"
+  ],
+  "visualProduct": "vchart",
+  "visualSelection": "full",
+  "requiredChecks": [
+    "VisActor Flow / Build",
+    "VisActor Flow / Unit",
+    "VisActor Flow / Repository visual"
+  ],
+  "firefoxPaste": false,
+  "preBuildScripts": [
+    {
+      "package": "vchart-statplots",
+      "script": "build:schema"
+    }
+  ],
+  "visualSuites": [
+    "core",
+    "extension"
+  ],
+  "browserChecks": [
+    {
+      "package": "vchart-statplots",
+      "config": "__tests__/browser/playwright.config.ts",
+      "shards": 2
+    }
+  ],
+  "buildFormats": [
+    "es",
+    "cjs"
+  ],
+  "nodeChecks": [
+    "packages/vchart-statplots/__tests__/runtime/skill-resources.test.cjs",
+    "packages/vchart-extension/__tests__/runtime/visual-build.test.cjs"
+  ],
+  "publishedUmd": {
+    "version": "2.1.8-alpha.0",
+    "files": {
+      "vchart": {
+        "integrity": "sha512-Ufk0lzLHcaJD9BrWcIxEp66UEYtNoiobD4z/dOjJy8qBWqwaclsnx0XZ3wr/S1Da1PQE/zUhy6vLG+uLvq/5yw==",
+        "sha256": "9d0f5651b1e322f383c7101b54265c9b3a7ee0f5cd7c9165db83f8f19f22cd0b"
+      },
+      "statplots": {
+        "integrity": "sha512-DgNAwc9LPG2aLW9DD7qR8Px6Oo20HCI4afwliyzRlkWSqKu30DyVL6yJQ9LtyddWMQ9TVPGcSdMIRxPdFUavBA==",
+        "sha256": "4902756722b23bd9f54b8b4b17ed20ccaba28301cc5f0971e734e1fc20655a04"
+      }
+    }
+  }
+}