check-code-validation.yml

name: "[Check] Validation"

on: [pull_request]

env:
  NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_GHACTIONS_TOKEN }}

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  setup-and-cache:
    name: Setup and Cache Dependencies
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install node and yarn
        uses: actions/setup-node@v4
        with:
          node-version-file: ".nvmrc"
      - name: Get yarn cache directory path
        id: yarn-cache-dir-path
        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
      - name: Yarn Cache
        uses: actions/cache@v4
        with:
          path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
          key: yarn-cache-folder-${{ hashFiles('**/yarn.lock', '.yarnrc.yml') }}
          restore-keys: |
            yarn-cache-folder-
      # We can skip the build for all dependencies, even for those whitelisted, because this process is used only to validate the yarn.lock file and populate the cache.
      - name: Install deps
        run: |
          yarn --immutable --mode=skip-build

  type-check:
    name: Type Checking
    needs: setup-and-cache
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: "Checkout branches for Nx"
        uses: ./.github/actions/nx-checkout
      - name: "Minimal yarn install"
        uses: ./.github/actions/minimal-yarn-install
      - name: Type Check
        run: yarn nx:type-check --output-style=stream

  lint:
    name: Linting and formatting
    needs: setup-and-cache
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: "Checkout branches for Nx"
        uses: ./.github/actions/nx-checkout
      - name: "Minimal yarn install"
        uses: ./.github/actions/minimal-yarn-install

      - name: ESlint Cache
        uses: actions/cache@v4
        with:
          path: |
            **/.eslintcache
            !**/node_modules
          key: ${{ runner.os }}-node-${{ hashFiles('**/.eslintrc.js') }}
      - name: Lint JS
        run: yarn lint:js --cache-strategy content
      - name: Lint Styles
        run: yarn nx:lint:styles --output-style=stream

  unit-tests:
    name: Unit Tests
    needs: setup-and-cache
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: "Checkout branches for Nx"
        uses: ./.github/actions/nx-checkout
      - name: "Minimal yarn install"
        uses: ./.github/actions/minimal-yarn-install
      - name: Unit Tests
        run: yarn nx:test-unit --output-style=stream

  build-libs-for-publishing:
    name: "Build libs for publishing"
    needs: setup-and-cache
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: true
      - name: "Checkout branches for Nx"
        uses: ./.github/actions/nx-checkout
      - name: "Minimal yarn install"
        uses: ./.github/actions/minimal-yarn-install
      - name: Build Libs
        run: yarn nx:build:libs --output-style=stream

  other-checks:
    name: Other Checks
    needs: setup-and-cache
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: "Checkout branches for Nx"
        uses: ./.github/actions/nx-checkout
      - name: "Minimal yarn install"
        uses: ./.github/actions/minimal-yarn-install
      - name: Check Files for Correct Formatting
        run: yarn nx format:check
      - name: Verify TS Project References
        run: yarn verify-project-references
      - name: Detect unused dependencies
        run: yarn depcheck
      - name: Yarn Dedupe check
        run: yarn dedupe --check
      - name: Check dependency domain lists
        run: ./scripts/ci/list-missing-dependencies.sh
      - name: Verify Workspace Resolutions
        run: yarn check-workspace-resolutions
      - name: Msg-system Config Validation
        run: yarn workspace @suite-common/message-system validate-config
      - name: Translation Duplicates
        run: yarn workspace @trezor/suite translations:list-duplicates

  releases-revision-checks:
    name: Releases revision Checks
    needs: setup-and-cache
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: "Checkout branches for Nx"
        uses: ./.github/actions/nx-checkout
      - name: "Minimal yarn install"
        uses: ./.github/actions/minimal-yarn-install

      - name: Check releases.json files changes
        uses: dorny/paths-filter@v3
        id: changes
        with:
          filters: |
            releases-json:
              - 'packages/connect-common/files/firmware/t1b1/releases.json'
              - 'packages/connect-common/files/firmware/t2t1/releases.json'
        if: steps.changes.outputs.releases-json == 'true'
      - name: Check releases.json revisions
        run: yarn workspace @trezor/connect-common validate-releases.json