chore(docker): security upgrade grafana/grafana from 8.5.25 to 8.5.27 #20885
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Tests | |
| # only one can run at a time | |
| concurrency: | |
| # If PR, cancel prev commits. head_ref = source branch name on pull_request, null if push | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| on: | |
| push: | |
| # We intentionally don't run push on feature branches. See PR for rational. | |
| branches: [unstable, stable] | |
| pull_request: | |
| workflow_dispatch: | |
| jobs: | |
| tests-main: | |
| name: Tests | |
| runs-on: buildjet-4vcpu-ubuntu-2204 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: [20] | |
| steps: | |
| # <common-build> - Uses YAML anchors in the future | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{matrix.node}} | |
| check-latest: true | |
| - name: Node.js version | |
| id: node | |
| run: echo "v8CppApiVersion=$(node --print "process.versions.modules")" >> $GITHUB_OUTPUT | |
| - name: Restore dependencies | |
| uses: actions/cache@master | |
| id: cache-deps | |
| with: | |
| path: | | |
| node_modules | |
| packages/*/node_modules | |
| key: ${{ runner.os }}-${{ steps.node.outputs.v8CppApiVersion }}-${{ hashFiles('**/yarn.lock', '**/package.json') }} | |
| - name: Install & build | |
| if: steps.cache-deps.outputs.cache-hit != 'true' | |
| run: yarn install --frozen-lockfile && yarn build | |
| - name: Build | |
| run: yarn build | |
| if: steps.cache-deps.outputs.cache-hit == 'true' | |
| # </common-build> | |
| # Cache validator slashing protection data tests | |
| - name: Restore spec tests cache | |
| uses: actions/cache@master | |
| with: | |
| path: packages/validator/spec-tests | |
| key: spec-test-data-${{ hashFiles('packages/validator/test/spec/params.ts') }} | |
| - name: Assert yarn prints no warnings | |
| run: scripts/assert_no_yarn_warnings.sh | |
| # Misc sanity checks | |
| - name: Lint Grafana dashboards | |
| run: scripts/validate-grafana-dashboards.sh | |
| - name: Test root binary exists | |
| run: ./lodestar --version | |
| - name: Reject yarn.lock changes | |
| run: .github/workflows/scripts/reject_yarn_lock_changes.sh | |
| # Run only on forks | |
| if: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository }} | |
| - name: Assert ESM module exports | |
| run: node scripts/assert_exports.mjs | |
| - name: Assert eslintrc rules sorted | |
| run: scripts/assert_eslintrc_sorted.mjs | |
| - name: Check Types | |
| run: yarn check-types | |
| - name: README check | |
| run: yarn check-readme | |
| - name: Lint | |
| run: yarn lint | |
| - name: Check Build | |
| run: yarn check-build | |
| - name: Unit tests | |
| run: yarn test:unit | |
| - name: Upload coverage data | |
| run: yarn coverage |