chore(deps): bump actions/setup-node from 4 to 6 #7
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI checks | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| commitlint: | |
| name: Commitlint | |
| runs-on: runs-on=${{ github.run_id }}/runner=evertrust | |
| if: github.event_name == 'pull_request' | |
| steps: | |
| - name: Configure Runs-On | |
| uses: runs-on/action@v2 | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: latest | |
| - name: Cache Bun dependencies | |
| uses: actions/cache@v5 | |
| with: | |
| path: ~/.bun/install/cache | |
| key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-bun- | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Lint commits | |
| run: bunx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose | |
| validate: | |
| name: Validate | |
| runs-on: runs-on=${{ github.run_id }}/runner=evertrust | |
| env: | |
| STREAM_E2E_URL: ${{ secrets.STREAM_E2E_URL }} | |
| STREAM_E2E_API_ID: ${{ secrets.STREAM_E2E_API_ID }} | |
| STREAM_E2E_API_KEY: ${{ secrets.STREAM_E2E_API_KEY }} | |
| steps: | |
| - name: Configure Runs-On | |
| uses: runs-on/action@v2 | |
| - uses: actions/checkout@v6 | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: latest | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Dependency audit (advisory) | |
| # Surfaces known-vulnerable dependencies. Advisory for now (does not fail | |
| # the build); promote to a hard gate once the tree is clean. | |
| run: bun audit --audit-level=high || true | |
| - name: Format check | |
| run: bun run format:check | |
| - name: Lint | |
| run: bun run lint | |
| - name: Typecheck | |
| run: bun run typecheck | |
| - name: Build | |
| run: bun run build | |
| - name: Verify API truth | |
| run: bun run verify:truth | |
| - name: Test (with coverage gate) | |
| run: bun run test:coverage | |
| - name: Scenario suite | |
| run: bun run test:scenarios | |
| - name: QA E2E smoke | |
| if: ${{ env.STREAM_E2E_URL != '' && env.STREAM_E2E_API_ID != '' && env.STREAM_E2E_API_KEY != '' }} | |
| run: bun run test:e2e:smoke |