[Snyk] Upgrade dompurify from 2.3.3 to 2.5.7 #106
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - development | |
| - __release-* | |
| pull_request: | |
| jobs: | |
| build: | |
| name: ${{ matrix.friendlyName }} ${{ matrix.arch }} | |
| runs-on: ${{ matrix.os }} | |
| permissions: read-all | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: [14.15.4] | |
| os: [macos-10.15, windows-2019] | |
| arch: [x64, arm64] | |
| include: | |
| - os: macos-10.15 | |
| friendlyName: macOS | |
| - os: windows-2019 | |
| friendlyName: Windows | |
| timeout-minutes: 60 | |
| env: | |
| # Needed for macOS arm64 until hosted macos-11.0 runners become available | |
| SDKROOT: /Library/Developer/CommandLineTools/SDKs/MacOSX11.1.sdk | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| submodules: recursive | |
| - name: Use Node.js ${{ matrix.node }} | |
| uses: actions/setup-node@v1 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| - name: Get yarn cache directory path | |
| id: yarn-cache-dir-path | |
| run: echo "::set-output name=dir::$(yarn cache dir)" | |
| - uses: actions/cache@v2 | |
| id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) | |
| with: | |
| path: ${{ steps.yarn-cache-dir-path.outputs.dir }} | |
| key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }} | |
| ${{ runner.os }}-yarn- | |
| # This step can be removed as soon as official Windows arm64 builds are published: | |
| # https://github.com/nodejs/build/issues/2450#issuecomment-705853342 | |
| - name: Get NodeJS node-gyp lib for Windows arm64 | |
| if: ${{ matrix.os == 'windows-2019' && matrix.arch == 'arm64' }} | |
| run: .\script\download-nodejs-win-arm64.ps1 ${{ matrix.node }} | |
| - name: Install and build dependencies | |
| run: yarn | |
| env: | |
| npm_config_arch: ${{ matrix.arch }} | |
| TARGET_ARCH: ${{ matrix.arch }} | |
| - name: Lint | |
| run: yarn lint | |
| - name: Validate changelog | |
| run: yarn validate-changelog | |
| - name: Ensure a clean working directory | |
| run: yarn check-modified | |
| - name: Build production app | |
| run: yarn build:prod | |
| env: | |
| DESKTOP_OAUTH_CLIENT_ID: ${{ secrets.DESKTOP_OAUTH_CLIENT_ID }} | |
| DESKTOP_OAUTH_CLIENT_SECRET: | |
| ${{ secrets.DESKTOP_OAUTH_CLIENT_SECRET }} | |
| APPLE_ID: ${{ secrets.APPLE_ID }} | |
| APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }} | |
| DESKTOPBOT_TOKEN: ${{ secrets.DESKTOPBOT_TOKEN }} | |
| KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }} | |
| npm_config_arch: ${{ matrix.arch }} | |
| TARGET_ARCH: ${{ matrix.arch }} | |
| - name: Prepare testing environment | |
| if: matrix.arch == 'x64' | |
| run: yarn test:setup | |
| - name: Run unit tests | |
| if: matrix.arch == 'x64' | |
| run: yarn test:unit:cov | |
| - name: Run script tests | |
| if: matrix.arch == 'x64' | |
| run: yarn test:script:cov | |
| - name: Run integration tests | |
| if: matrix.arch == 'x64' | |
| timeout-minutes: 5 | |
| run: yarn test:integration | |
| - name: Publish production app | |
| run: yarn run publish | |
| env: | |
| npm_config_arch: ${{ matrix.arch }} | |
| DESKTOPBOT_TOKEN: ${{ secrets.DESKTOPBOT_TOKEN }} | |
| WINDOWS_CERT_PASSWORD: ${{ secrets.WINDOWS_CERT_PASSWORD }} | |
| KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }} | |
| DEPLOYMENT_SECRET: ${{ secrets.DEPLOYMENT_SECRET }} | |
| AZURE_STORAGE_ACCOUNT: ${{ secrets.AZURE_STORAGE_ACCOUNT }} | |
| AZURE_STORAGE_ACCESS_KEY: ${{ secrets.AZURE_STORAGE_ACCESS_KEY }} | |
| AZURE_BLOB_CONTAINER: ${{ secrets.AZURE_BLOB_CONTAINER }} | |
| AZURE_STORAGE_URL: ${{ secrets.AZURE_STORAGE_URL }} |