chore(deps): update tibdex/github-app-token action to v2 (#135) #501
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: CI | |
| run-name: >- | |
| ${{ | |
| inputs.release && inputs.test && 'CI ➤ Test ➤ Release' || | |
| inputs.test && 'CI ➤ Test' || | |
| inputs.release && 'CI ➤ Release' || | |
| '' | |
| }} | |
| on: | |
| pull_request: | |
| types: [opened, synchronize] | |
| push: | |
| branches: [main] | |
| workflow_dispatch: | |
| inputs: | |
| test: | |
| description: Test | |
| required: true | |
| default: true | |
| type: boolean | |
| release: | |
| description: Release | |
| required: true | |
| default: false | |
| type: boolean | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read # for checkout | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| cache: npm | |
| node-version: lts/* | |
| - run: npm ci | |
| - run: npm run prepublishOnly | |
| - run: npm run typecheck | |
| - name: Register Problem Matcher for ESLint that handles --report-unused-disable-directives | |
| run: echo "::add-matcher::.github/eslint-compact.json" | |
| - if: github.head_ref | |
| # On PRs, do not allow warnings or unused directives | |
| run: "npm run lint -- --report-unused-disable-directives --max-warnings 0 --rule 'prettier/prettier: off' -f compact" | |
| - if: github.head_ref == '' | |
| # While on commits pushed to main branches only show errors, no warnings | |
| run: npm run lint -- --quiet | |
| test: | |
| needs: build | |
| if: github.event.inputs.test != 'false' | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [macos-latest, ubuntu-latest, windows-latest] | |
| node: [lts/*] | |
| include: | |
| - os: ubuntu-latest | |
| node: current | |
| steps: | |
| - name: Set git to use LF | |
| if: matrix.os == 'windows-latest' | |
| run: | | |
| git config --global core.autocrlf false | |
| git config --global core.eol lf | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| cache: npm | |
| - run: npm i | |
| - run: npm test -- --coverage | |
| - run: npx ls-engines | |
| release: | |
| permissions: | |
| contents: write # to be able to publish a GitHub release | |
| issues: write # to be able to comment on released issues | |
| pull-requests: write # to be able to comment on released pull requests | |
| id-token: write # to enable use of OIDC for npm provenance | |
| needs: [build, test] | |
| # only run if opt-in during workflow_dispatch | |
| if: always() && github.event.inputs.release == 'true' && needs.build.result != 'failure' && needs.test.result != 'failure' && needs.test.result != 'cancelled' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| # Need to fetch entire commit history to | |
| # analyze every commit since last release | |
| fetch-depth: 0 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: lts/* | |
| cache: npm | |
| - run: npm ci | |
| # Branches that will release new versions are defined in .releaserc.json | |
| - run: npx semantic-release | |
| # Don't allow interrupting the release step if the job is cancelled, as it can lead to an inconsistent state | |
| # e.g. git tags were pushed but it exited before `npm publish` | |
| if: always() | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }} |