mirror of
https://github.com/abhigyanpatwari/GitNexus.git
synced 2026-08-28 05:25:25 +00:00
c129e71ee7
- Add workflow_call trigger to ci.yml so publish can reuse it as a gate - Replace minimal publish.yml with hardened pipeline: - Full CI must pass before publish (typecheck + tests + cross-platform) - Verify git tag matches package.json version - Explicit build step + dry-run before real publish - npm provenance attestation enabled - Auto-create GitHub Release with generated notes Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
69 lines
1.7 KiB
YAML
69 lines
1.7 KiB
YAML
name: CI
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
workflow_call:
|
|
|
|
jobs:
|
|
typecheck:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
cache-dependency-path: gitnexus/package-lock.json
|
|
- run: npm ci
|
|
working-directory: gitnexus
|
|
- run: npx tsc --noEmit
|
|
working-directory: gitnexus
|
|
|
|
unit-tests:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
cache-dependency-path: gitnexus/package-lock.json
|
|
- run: npm ci
|
|
working-directory: gitnexus
|
|
- run: npx vitest run test/unit --coverage --coverage.thresholdAutoUpdate=false
|
|
working-directory: gitnexus
|
|
|
|
integration-tests:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 10
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
cache-dependency-path: gitnexus/package-lock.json
|
|
- run: npm ci
|
|
working-directory: gitnexus
|
|
- run: npx vitest run test/integration
|
|
working-directory: gitnexus
|
|
|
|
cross-platform:
|
|
strategy:
|
|
matrix:
|
|
os: [ubuntu-latest, windows-latest]
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
cache-dependency-path: gitnexus/package-lock.json
|
|
- run: npm ci
|
|
working-directory: gitnexus
|
|
- run: npx vitest run test/unit
|
|
working-directory: gitnexus
|