use workflow token instead of release PAT (#367) #376

Workflow file for this run

	name: 'Build & Test'
	on:
	push:
	branches:
	- main
	- release/**
	pull_request:

	env:
	CACHED_DEPENDENCY_PATHS: \|
	${{ github.workspace }}/node_modules

	CACHED_BUILD_PATHS: \|
	${{ github.workspace }}/dist

	CACHED_CARTHAGE_PATHS: \|
	${{ github.workspace }}/src/ios/Carthage/Build/

	BUILD_CACHE_KEY: ${{ github.sha }}

	jobs:
	job_install_deps:
	name: Install Dependencies
	runs-on: macos-latest
	timeout-minutes: 15
	steps:
	- name: Check out current commit (${{ github.sha }})
	uses: actions/checkout@v4
	- name: Set up Node
	uses: actions/setup-node@v4
	# we use a hash of yarn.lock as our cache key, because if it hasn't changed, our dependencies haven't changed,
	# so no need to reinstall them
	with:
	node-version: 18 # Specify the Node.js version explicitly
	- name: Compute dependency cache key
	id: compute_lockfile_hash
	run: echo "hash=${{ hashFiles('./yarn.lock') }}" >> "$GITHUB_OUTPUT"
	- name: Check dependency cache
	uses: actions/cache@v4
	id: cache_dependencies
	with:
	path: ${{ env.CACHED_DEPENDENCY_PATHS }}
	key: ${{ steps.compute_lockfile_hash.outputs.hash }}
	- name: Install dependencies
	if: steps.cache_dependencies.outputs.cache-hit != 'true'
	run: yarn install
	outputs:
	dependency_cache_key: ${{ steps.compute_lockfile_hash.outputs.hash }}

	job_unit_test:
	name: Test
	needs: job_build
	continue-on-error: true
	timeout-minutes: 30
	runs-on: macos-latest
	steps:
	- name: Check out current commit (${{ github.sha }})
	uses: actions/checkout@v4
	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: 18
	- name: Check dependency cache
	uses: actions/cache@v4
	with:
	path: ${{ env.CACHED_DEPENDENCY_PATHS }}
	key: ${{ needs.job_build.outputs.dependency_cache_key }}
	- name: Check build cache
	uses: actions/cache@v4
	with:
	path: ${{ env.CACHED_BUILD_PATHS }}
	key: ${{ env.BUILD_CACHE_KEY }}
	- name: Run tests
	run: yarn test

	job_build:
	name: Build
	needs: job_install_deps
	runs-on: macos-latest
	timeout-minutes: 15
	steps:
	- name: Check out current commit (${{ github.sha }})
	uses: actions/checkout@v4
	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: 18
	- name: Check dependency cache
	uses: actions/cache@v4
	with:
	path: ${{ env.CACHED_DEPENDENCY_PATHS }}
	key: ${{ needs.job_install_deps.outputs.dependency_cache_key }}
	- name: Check build cache
	uses: actions/cache@v4
	id: cache_built_packages
	with:
	path: ${{ env.CACHED_BUILD_PATHS }}
	key: ${{ env.BUILD_CACHE_KEY }}
	- name: Build packages
	# Under normal circumstances, using the git SHA as a cache key, there shouldn't ever be a cache hit on the built
	# packages, and so `yarn build` should always run. This `if` check is therefore only there for testing CI issues
	# where the built packages are beside the point. In that case, you can change `BUILD_CACHE_KEY` (at the top of
	# this file) to a constant and skip rebuilding all of the packages each time CI runs.
	if: steps.cache_built_packages.outputs.cache-hit != 'true'
	run: yarn build
	- name: Check if yarn.lock is dirty
	if: steps.cache_built_packages.outputs.cache-hit != 'true'
	run: yarn install --frozen-lockfile

	outputs:
	# this needs to be passed on, because the `needs` context only looks at direct ancestors (so steps which depend on
	# `job_build` can't see `job_install_deps` and what it returned)
	dependency_cache_key: ${{ needs.job_install_deps.outputs.dependency_cache_key }}

	job_carthage_build:
	name: Build Carthage Dependencies
	runs-on: macos-15
	timeout-minutes: 30
	steps:
	- name: Check out current commit (${{ github.sha }})
	uses: actions/checkout@v4
	- name: Check Carthage build cache
	uses: actions/cache@v4
	id: cache_built_carthage
	with:
	path: ${{ env.CACHED_CARTHAGE_PATHS }}
	key: ${{ hashFiles('src/ios/Cartfile') }}
	- name: Install Carthage
	if: steps.cache_built_carthage.outputs.cache-hit != 'true'
	run: brew install carthage
	- name: Build Cocoa SDK from Carthage
	if: steps.cache_built_carthage.outputs.cache-hit != 'true'
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: make build

	job_artifacts:
	name: Upload Artifacts
	needs: [job_build, job_carthage_build]
	runs-on: macos-latest
	steps:
	- name: Check out current commit (${{ github.sha }})
	uses: actions/checkout@v4
	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: 18
	- name: Check dependency cache
	uses: actions/cache@v4
	with:
	path: ${{ env.CACHED_DEPENDENCY_PATHS }}
	key: ${{ needs.job_build.outputs.dependency_cache_key }}
	- name: Check build cache
	uses: actions/cache@v4
	with:
	path: ${{ env.CACHED_BUILD_PATHS }}
	key: ${{ env.BUILD_CACHE_KEY }}
	- name: Check Carthage build cache
	uses: actions/cache@v4
	with:
	path: ${{ env.CACHED_CARTHAGE_PATHS }}
	key: ${{ hashFiles('src/ios/Cartfile') }}
	- name: Check that Carthage build exists
	run: test -d src/ios/Carthage \|\| exit 1
	- name: Pack
	run: yarn pack
	- name: Archive artifacts
	uses: actions/upload-artifact@v4
	with:
	name: ${{ github.sha }}
	path: \|
	${{ github.workspace }}/sentry-cordova-*

	job_check_symlink:
	name: Check for Symbolic Links
	needs: [job_artifacts]
	runs-on: macos-latest
	defaults:
	run:
	shell: pwsh
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Download test app artifact
	uses: actions/download-artifact@v4
	with:
	name: ${{ github.sha }}
	path: \|
	${{ github.workspace }}/artifact
	- name: Extract artifact
	run: \|
	cd ${{ github.workspace }}/artifact
	$bundleName = (Get-Item *.tgz).Name
	tar -xvzf "$bundleName"
	- name: Check if package contains any Symlink
	run: \|
	$symLinks = (find "${{ github.workspace }}" -type l -ls)
	if ($null -ne $symLinks) {
	Write-Error "Artifact contains illegal Symlinks`n$symLinks"
	}
	Write-Output "No Symbolic Links found, all good :)"

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

use workflow token instead of release PAT (#367) #376

Workflow file

use workflow token instead of release PAT (#367) #376

Jobs

Run details

Workflow file for this run