chore(deps-dev): bump @rollup/plugin-commonjs from 25.0.8 to 28.0.1 #271

	name: CI

	on:
	push:
	branches: [ main, 2.x ]
	pull_request:
	branches: [ main, 2.x ]

	jobs:
	ci:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-node@v4
	with:
	cache: npm

	- name: install
	run: npm ci

	- name: build
	run: npm run build

	- name: test
	run: xvfb-run --auto-servernum npm test
	shell: bash

	- name: cache coverage reports
	uses: actions/cache/save@v4
	with:
	path: \|
	coverage/chrome/lcov.info
	coverage/firefox/lcov.info
	key: coverage

	sonar:
	runs-on: ubuntu-latest
	needs: [ci]
	# dependabot etc pull request can't have the token, so lets run only on merges.
	if: ${{ github.event_name == 'push' }}
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis (SonarCloud)

	- uses: actions/setup-node@v4
	with:
	cache: npm

	- name: Restore coverage from cache
	uses: actions/cache/restore@v4
	with:
	path: \|
	coverage/chrome/lcov.info
	coverage/firefox/lcov.info
	key: coverage
	restore-keys: coverage

	- name: Read package version
	id: package-version
	uses: martinbeentjes/npm-get-version-action@v1.3.1

	- name: Set version
	run: echo -e "\nsonar.projectVersion=${{ steps.package-version.outputs.current-version}}" >> sonar-project.properties

	- name: SonarCloud Scan
	uses: SonarSource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback