blob: f6db4661147aa9e0f102e6a77144d74825b3b001 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
name: CI
on:
push:
branches: [main]
pull_request:
permissions:
contents: read
concurrency:
group: website-${{ github.ref }}
cancel-in-progress: true
jobs:
frontend:
runs-on: windows-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 24
cache: npm
cache-dependency-path: frontend/package-lock.json
- run: npm ci
working-directory: frontend
- run: npm audit --audit-level=moderate
working-directory: frontend
- run: npm run check
working-directory: frontend
- run: npm run test:coverage
working-directory: frontend
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: website-frontend-coverage
path: frontend/coverage/lcov.info
if-no-files-found: error
retention-days: 1
- run: npm run format:check
working-directory: frontend
- run: npm run build
working-directory: frontend
backend:
runs-on: macos-latest
timeout-minutes: 25
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: temurin
java-version: "25"
- uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
with:
gradle-version: "9.6.0"
cache-provider: basic
# dokkaGenerate is the documentation gate: an undocumented public
# declaration or a broken reference fails the build.
- run: gradle test jacocoTestReport bootJar dokkaGenerate --no-daemon
working-directory: backend
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: website-backend-coverage
path: backend/build/reports/jacoco/test/jacocoTestReport.xml
if-no-files-found: error
retention-days: 1
frontend-coverage:
# Fork PRs cannot receive the OIDC token required for Codecov uploads.
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
needs: frontend
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
contents: read
id-token: write
steps:
# Keep OIDC-capable jobs isolated from package install/build scripts.
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: website-frontend-coverage
path: coverage/frontend
- uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
with:
use_oidc: true
files: coverage/frontend/lcov.info
flags: website-frontend
fail_ci_if_error: true
backend-coverage:
# Fork PRs cannot receive the OIDC token required for Codecov uploads.
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
needs: backend
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
contents: read
id-token: write
steps:
# Keep OIDC-capable jobs isolated from Gradle build scripts.
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: website-backend-coverage
path: coverage/backend
- uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
with:
use_oidc: true
files: coverage/backend/jacocoTestReport.xml
flags: website-backend
fail_ci_if_error: true
dependency-review:
if: github.event_name == 'pull_request'
runs-on: windows-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
|