aicodingstack.io/.github/workflows/ci.yml at main · aicodingstack/aicodingstack.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v7

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Run Biome check
        run: pnpm biome:check

  type-check:
    name: Type Check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v7

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Run TypeScript type check
        run: pnpm type-check

  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Run tests
        run: pnpm test:ci

      - name: Check data health
        run: pnpm data-health:check

  spell-check:
    name: Spell Check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v7

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Run CSpell
        run: pnpm spell

  security:
    name: Dependency Audit
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v7

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Block high and critical advisories
        run: pnpm security:audit

  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v7

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Build Next.js application
        run: pnpm build
        env:
          BUILD_TIME: ${{ github.event.head_commit.timestamp }}

      - name: Verify generated source is current
        run: git diff --exit-code -- src/lib/generated

      - name: Upload build artifacts
        uses: actions/upload-artifact@v6
        with:
          name: build-output
          path: |
            .next
            .open-next
          retention-days: 7

  e2e:
    name: Browser Smoke
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Checkout code
        uses: actions/checkout@v7

      - name: Setup pnpm
        uses: ./.github/actions/setup-pnpm

      - name: Install Chromium
        run: pnpm exec playwright install --with-deps chromium

      - name: Run browser smoke tests
        run: pnpm test:e2e:ci

  ci-success:
    name: CI Success
    runs-on: ubuntu-latest
    needs: [lint, type-check, test, spell-check, security, build, e2e]
    if: always()
    steps:
      - name: Check all jobs
        run: |
          if [[ "${{ contains(needs.*.result, 'failure') }}" == "true" || "${{ contains(needs.*.result, 'cancelled') }}" == "true" || "${{ contains(needs.*.result, 'skipped') }}" == "true" ]]; then
            echo "One or more required CI jobs failed, were cancelled, or were skipped"
            exit 1
          fi
          echo "All CI jobs passed successfully"