112 lines
3.0 KiB
YAML
112 lines
3.0 KiB
YAML
name: Default (tags)
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- '*'
|
|
|
|
env:
|
|
IMAGE: code.foss.global/host.today/ht-docker-node:npmci
|
|
NPMCI_COMPUTED_REPOURL: https://${{gitea.repository_owner}}:${{secrets.GITEA_TOKEN}}@/${{gitea.repository}}.git
|
|
NPMCI_TOKEN_NPM: ${{secrets.NPMCI_TOKEN_NPM}}
|
|
NPMCI_TOKEN_NPM2: ${{secrets.NPMCI_TOKEN_NPM2}}
|
|
NPMCI_GIT_GITHUBTOKEN: ${{secrets.NPMCI_GIT_GITHUBTOKEN}}
|
|
NPMCI_URL_CLOUDLY: ${{secrets.NPMCI_URL_CLOUDLY}}
|
|
|
|
jobs:
|
|
security:
|
|
runs-on: ubuntu-latest
|
|
continue-on-error: true
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Audit production dependencies
|
|
run: |
|
|
npm config set registry https://registry.npmjs.org
|
|
pnpm audit --audit-level=high --prod
|
|
continue-on-error: true
|
|
|
|
- name: Audit development dependencies
|
|
run: |
|
|
npm config set registry https://registry.npmjs.org
|
|
pnpm audit --audit-level=high --dev
|
|
continue-on-error: true
|
|
|
|
test:
|
|
if: ${{ always() }}
|
|
needs: security
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Test stable
|
|
run: |
|
|
pnpm install
|
|
pnpm test
|
|
|
|
- name: Test build
|
|
run: |
|
|
pnpm install
|
|
pnpm build
|
|
|
|
release:
|
|
needs: test
|
|
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Release
|
|
run: |
|
|
pnpm install
|
|
# Extract server host from GITHUB_SERVER_URL (remove https://)
|
|
GITEA_HOST="${GITHUB_SERVER_URL#https://}"
|
|
GITEA_REGISTRY="$GITHUB_SERVER_URL/api/packages/$GITHUB_REPOSITORY_OWNER/npm/"
|
|
|
|
# Create .npmrc for Gitea authentication
|
|
echo "@${GITHUB_REPOSITORY_OWNER}:registry=${GITEA_REGISTRY}" > .npmrc
|
|
echo "//${GITEA_HOST}/api/packages/${GITHUB_REPOSITORY_OWNER}/npm/:_authToken=${GITEA_TOKEN}" >> .npmrc
|
|
|
|
# Publish to Gitea
|
|
pnpm publish --no-git-checks
|
|
|
|
# Conditionally publish to npmjs.org if token exists
|
|
if [ -n "$NPMCI_TOKEN_NPM" ]; then
|
|
# Update .npmrc for npmjs.org
|
|
echo "registry=https://registry.npmjs.org/" > .npmrc
|
|
echo "//registry.npmjs.org/:_authToken=${NPMCI_TOKEN_NPM}" >> .npmrc
|
|
pnpm publish --no-git-checks
|
|
fi
|
|
|
|
metadata:
|
|
needs: test
|
|
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
continue-on-error: true
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Code quality
|
|
run: |
|
|
npm install -g typescript
|
|
pnpm install
|
|
|
|
- name: Build docs and upload artifacts
|
|
run: |
|
|
pnpm install
|
|
pnpm install -g @git.zone/tsdoc
|
|
tsdoc
|
|
continue-on-error: true
|