Skip to content
CI

Bump pagy from 43.5.0 to 43.5.1 (#176) #438

Sign in to view logs

Bump pagy from 43.5.0 to 43.5.1 (#176)

Bump pagy from 43.5.0 to 43.5.1 (#176) #438

Workflow file for this run

.github/workflows/ci.yml at 9b9faa2
name: CI
on:
pull_request:
push:
branches: [ main ]
jobs:
build:
name: Build
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v4
- name: Create bundle config for GitHub Packages auth
run: |
mkdir -p /tmp/secrets
echo '---' > /tmp/secrets/bundle_config
echo "BUNDLE_RUBYGEMS__PKG__GITHUB__COM: \"${{ github.repository_owner }}:${{ secrets.GITHUB_TOKEN }}\"" >> /tmp/secrets/bundle_config
- name: Build dev image
uses: docker/build-push-action@v7
with:
context: .
target: dev
push: false
secret-files: |
bundle_config=/tmp/secrets/bundle_config
cache-from: type=gha,scope=build-dev
cache-to: type=gha,scope=build-dev,mode=max
scan-ruby:
name: Scan Ruby
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: .ruby-version
bundler-cache: true
env:
BUNDLE_RUBYGEMS__PKG__GITHUB__COM: "${{ github.repository_owner }}:${{ secrets.GITHUB_TOKEN }}"
- name: Scan for common Rails security vulnerabilities using static analysis
run: bin/brakeman --no-pager
scan-js:
name: Scan JavaScript
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: .ruby-version
bundler-cache: true
env:
BUNDLE_RUBYGEMS__PKG__GITHUB__COM: "${{ github.repository_owner }}:${{ secrets.GITHUB_TOKEN }}"
- name: Scan for security vulnerabilities in JavaScript dependencies
run: bin/importmap audit
lint:
name: Lint
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: .ruby-version
bundler-cache: true
env:
BUNDLE_RUBYGEMS__PKG__GITHUB__COM: "${{ github.repository_owner }}:${{ secrets.GITHUB_TOKEN }}"
- name: Lint code for consistent style
run: bin/standardrb --format github
zeitwerk:
name: Zeitwerk
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: .ruby-version
bundler-cache: true
env:
BUNDLE_RUBYGEMS__PKG__GITHUB__COM: "${{ github.repository_owner }}:${{ secrets.GITHUB_TOKEN }}"
- name: Check Zeitwerk eager loading
run: bin/rails zeitwerk:check
test:
name: Test
runs-on: ubuntu-latest
env:
# to add other change the following env var to:
# PLAYWRIGHT_BROWSERS: chromium firefox webkit
PLAYWRIGHT_BROWSERS: chromium
services:
postgres:
image: postgres:18
ports:
- 5432:5432
env:
POSTGRES_DB: lizard_test
POSTGRES_USER: postgres
POSTGRES_PASSWORD: postgres
options: >-
--health-cmd pg_isready
--health-interval 10s
--health-timeout 5s
--health-retries 5
# redis:
# image: redis
# ports:
# - 6379:6379
# options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Node.js
uses: actions/setup-node@v6
with:
node-version-file: .node-version
cache: 'npm'
- name: Install npm dependencies
run: npm ci
- name: Get installed Playwright version
id: playwright-version
run: |
echo "version=$(npx playwright --version | cut -d' ' -f2)" >> $GITHUB_OUTPUT
echo "browsers_key=$(echo '${{ env.PLAYWRIGHT_BROWSERS }}' | tr ' ' '-')" >> $GITHUB_OUTPUT
- name: Install build packages
run: sudo apt-get update && sudo apt-get install --no-install-recommends --yes build-essential libyaml-dev pkg-config
- name: Install Playwright system dependencies
run: |
PLAYWRIGHT_INSTALL_CMD=$(npx playwright install --dry-run --with-deps ${{ env.PLAYWRIGHT_BROWSERS }} | head -1 | sed 's/^sudo -- sh -c "//' | sed 's/"$//')
sudo sh -c "$PLAYWRIGHT_INSTALL_CMD"
- name: Set up Ruby
uses: ruby/setup-ruby@v1
with:
ruby-version: .ruby-version
bundler-cache: true
env:
BUNDLE_RUBYGEMS__PKG__GITHUB__COM: "${{ github.repository_owner }}:${{ secrets.GITHUB_TOKEN }}"
- name: Cache Playwright browsers
uses: actions/cache@v5
id: playwright-cache
with:
path: ~/.cache/ms-playwright
key: playwright-${{ runner.os }}-${{ steps.playwright-version.outputs.version }}-${{ steps.playwright-version.outputs.browsers_key }}
- name: Install Playwright browsers
if: steps.playwright-cache.outputs.cache-hit != 'true'
run: npx playwright install ${{ env.PLAYWRIGHT_BROWSERS }}
- name: Run tests
env:
RAILS_ENV: test
DATABASE_USER: postgres
DATABASE_PASSWORD: postgres
# REDIS_URL: redis://localhost:6379/0
LIZARD_REPORT: "true"
LIZARD_API_KEY: ${{ secrets.LIZARD_API_KEY }}
LIZARD_URL: ${{ secrets.LIZARD_URL }}
run: bin/rails spec
- name: Run system tests
env:
RAILS_ENV: test
DATABASE_USER: postgres
DATABASE_PASSWORD: postgres
run: bin/rails spec:system
- name: Keep screenshots and videos from failed system tests
uses: actions/upload-artifact@v7
if: failure()
with:
name: test-artifacts
path: |
${{ github.workspace }}/tmp/capybara/screenshots
${{ github.workspace }}/tmp/capybara/videos
if-no-files-found: ignore
merge_ready:
name: Merge Ready
if: always()
needs: [test, build, lint, zeitwerk, scan-ruby, scan-js]
runs-on: ubuntu-slim
steps:
- if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}
run: exit 1