[Snyk] Security upgrade next from 11.1.3 to 14.2.15 #179
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # NOTE: Changes to this file should also be applied to './test-windows.yml' | |
| name: Node.js Tests | |
| # **What it does**: Runs our tests. | |
| # **Why we have it**: We want our tests to pass before merging code. | |
| # **Who does it impact**: Docs engineering, open-source engineering contributors. | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| permissions: | |
| contents: read | |
| # Needed for the 'trilom/file-changes-action' action | |
| pull-requests: read | |
| # This allows a subsequently queued workflow run to interrupt previous runs | |
| concurrency: | |
| group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}' | |
| cancel-in-progress: true | |
| env: | |
| CI: true | |
| jobs: | |
| test: | |
| # Run on self-hosted if the private repo or ubuntu-latest if the public repo | |
| # See pull # 17442 in the private repo for context | |
| runs-on: ${{ fromJSON('["ubuntu-latest", "self-hosted"]')[github.repository == 'github/docs-internal'] }} | |
| timeout-minutes: 60 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # The same array lives in test-windows.yml, so make any updates there too. | |
| test-group: | |
| [ | |
| content, | |
| graphql, | |
| meta, | |
| rendering, | |
| routing, | |
| unit, | |
| linting, | |
| translations, | |
| ] | |
| steps: | |
| # Each of these ifs needs to be repeated at each step to make sure the required check still runs | |
| # Even if if doesn't do anything | |
| - name: Check out repo | |
| uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 | |
| with: | |
| # Enables cloning the Early Access repo later with the relevant PAT | |
| persist-credentials: 'false' | |
| - name: Gather files changed | |
| uses: trilom/file-changes-action@a6ca26c14274c33b15e6499323aac178af06ad4b | |
| id: get_diff_files | |
| with: | |
| # So that `steps.get_diff_files.outputs.files` becomes | |
| # a string like `foo.js path/bar.md` | |
| output: ' ' | |
| - name: Insight into changed files | |
| run: | | |
| # Must to do this because the list of files can be HUGE. Especially | |
| # in a repo-sync when there are lots of translation files involved. | |
| echo "${{ steps.get_diff_files.outputs.files }}" > get_diff_files.txt | |
| - name: Setup node | |
| uses: actions/setup-node@04c56d2f954f1e4c69436aa54cfef261a018f458 | |
| with: | |
| node-version: 16.13.x | |
| cache: npm | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Clone early access | |
| if: ${{ github.repository == 'github/docs-internal' }} | |
| run: script/early-access/clone-for-build.js | |
| env: | |
| DOCUBOT_REPO_PAT: ${{ secrets.DOCUBOT_REPO_PAT }} | |
| GIT_BRANCH: ${{ github.head_ref || github.ref }} | |
| - name: Cache nextjs build | |
| uses: actions/cache@c64c572235d810460d0d6876e9c705ad5002b353 | |
| with: | |
| path: .next/cache | |
| key: ${{ runner.os }}-nextjs-${{ hashFiles('package*.json') }} | |
| - name: Run build script | |
| run: npm run build | |
| - name: Run tests | |
| env: | |
| DIFF_FILE: get_diff_files.txt | |
| run: npm run test tests/${{ matrix.test-group }}/ |