inject-css/.github/workflows/ci.yml at main · addon-stack/inject-css · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
name: CI

on:
  push:
    branches:
      - develop
      - 'feature/**'
  pull_request:
    branches:
      - main
      - develop
      - 'feature/**'
  workflow_call:
    inputs:
      full:
        description: 'Run full OS x Node matrix'
        required: false
        type: boolean
        default: false

jobs:
  compute-matrix:
    name: Compute matrix
    runs-on: ubuntu-24.04
    outputs:
      matrix: ${{ steps.set.outputs.matrix }}
      name_suffix: ${{ steps.set.outputs.name_suffix }}
    steps:
      - id: set
        env:
          FULL_MATRIX: ${{ inputs.full || (github.event_name == 'pull_request' && github.base_ref == 'main') }}
        run: |
          if [[ "$FULL_MATRIX" == "true" ]]; then
            echo 'matrix={"os":["ubuntu-24.04","windows-latest"],"node":[18,20,22]}' >> "$GITHUB_OUTPUT"
            echo 'name_suffix=(full matrix)' >> "$GITHUB_OUTPUT"
          else
            echo 'matrix={"os":["ubuntu-24.04"],"node":[20]}' >> "$GITHUB_OUTPUT"
            echo 'name_suffix=' >> "$GITHUB_OUTPUT"
          fi

  build-and-test:
    name: Build, Lint, Test ${{ needs.compute-matrix.outputs.name_suffix }}
    needs: compute-matrix
    runs-on: ${{ matrix.os }}
    permissions:
      contents: read
    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.compute-matrix.outputs.matrix) }}
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Configure git EOL (Windows)
        if: runner.os == 'Windows'
        run: |
          git config core.autocrlf false
          git config core.eol lf

      - name: Use Node.js
        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: ${{ matrix.node }}
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Lint
        run: npm run lint

      - name: Typecheck
        run: npm run typecheck

      - name: Test
        run: npm run test:ci

      - name: Build
        run: npm run build

      - name: Upload coverage artifact
        if: always()
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: coverage-${{ matrix.os }}-node${{ matrix.node }}
          path: coverage

  release-tooling:
    name: Validate release tooling
    runs-on: ubuntu-24.04
    permissions:
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Use Node.js for release tooling
        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: '22.23.3'
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Test release tooling
        run: npm run test:tooling

  renovate-config:
    name: Validate Renovate configuration
    runs-on: ubuntu-24.04
    permissions:
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Use Node.js
        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24

      - name: Validate configuration
        run: npx --yes --package renovate@44.155.8 -- renovate-config-validator --strict renovate.json

  ci-success:
    name: CI passed
    if: ${{ always() }}
    needs: [compute-matrix, build-and-test, release-tooling, renovate-config]
    runs-on: ubuntu-24.04
    permissions: {}
    steps:
      - name: Require all checks to pass
        env:
          CHECKS_PASSED: ${{ !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled') && !contains(needs.*.result, 'skipped') }}
        run: test "$CHECKS_PASSED" = true