diff --git a/.github/workflows/deploy-release.yaml b/.github/workflows/deploy-release.yaml index dd3ceb2..3f20a6c 100644 --- a/.github/workflows/deploy-release.yaml +++ b/.github/workflows/deploy-release.yaml @@ -7,52 +7,14 @@ on: jobs: deploy-release: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: 22 - env: - NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }} - - - name: Cache dependencies - id: cache-dependencies - uses: actions/cache@v4 - with: - path: node_modules - key: node_modules-${{ hashFiles('**/package-lock.json') }} - - - name: Install dependencies - if: steps.cache-dependencies.outputs.cache-hit != 'true' - run: |- - npm ci - rm -rf ~/.npmrc - - - name: Build package - run: |- - npm run build - - - name: Prepare release - run: |- - cp package.json README.md build/ - cd build - sed -i -e "s~\"version\": \"0.0.0-dev\"~\"version\": \"${GITHUB_REF##*/}\"~" package.json - - - name: Publish pre-release to NPM - if: ${{ github.event.release.prerelease }} - run: |- - cd build - echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> ~/.npmrc - npm publish --access public --tag next - env: - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - - - name: Publish release to NPM - if: ${{ !github.event.release.prerelease }} - run: |- - cd build - echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> ~/.npmrc - npm publish --access public - env: - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + uses: ./.github/workflows/npm-publish.yml + with: + node-version: "22" + publish-access: "public" + prepare-script: >- + cp package.json README.md build/ && + cd build && + sed -i -e "s~\"version\": \"0.0.0-dev\"~\"version\": \"${GITHUB_REF##*/}\"~" package.json + secrets: + NPM_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }} + PUBLISH_TOKEN: ${{ secrets.NPM_TOKEN }} diff --git a/.github/workflows/validate-branch.yaml b/.github/workflows/validate-branch.yaml index 1c032bd..bb190cf 100644 --- a/.github/workflows/validate-branch.yaml +++ b/.github/workflows/validate-branch.yaml @@ -16,104 +16,9 @@ concurrency: cancel-in-progress: true jobs: - check-vulnerabilities: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: 22 - registry-url: 'https://npm.pkg.github.com' - env: - NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }} - - - name: Cache dependencies - id: cache-dependencies - uses: actions/cache@v4 - with: - path: node_modules - key: node_modules-${{ hashFiles('**/package-lock.json') }} - - - name: Install dependencies - if: steps.cache-dependencies.outputs.cache-hit != 'true' - run: npm ci - - - name: Check dependency vulnerabilities - run: |- - npm i -g npm-audit-resolver@3.0.0-7 - npx check-audit --omit dev - - validate-code: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: 22 - registry-url: 'https://npm.pkg.github.com' - env: - NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }} - - - name: Cache dependencies - id: cache-dependencies - uses: actions/cache@v4 - with: - path: node_modules - key: node_modules-${{ hashFiles('**/package-lock.json') }} - - - name: Install dependencies - if: steps.cache-dependencies.outputs.cache-hit != 'true' - run: npm ci - - - name: Check compilation errors - run: npm run validate - - check-code-style: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: 22 - registry-url: 'https://npm.pkg.github.com' - env: - NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }} - - - name: Cache dependencies - id: cache-dependencies - uses: actions/cache@v4 - with: - path: node_modules - key: node_modules-${{ hashFiles('**/package-lock.json') }} - - - name: Install dependencies - if: steps.cache-dependencies.outputs.cache-hit != 'true' - run: npm ci - - - name: Check coding standard violations - run: npm run lint - - run-tests: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 - with: - node-version: 22 - registry-url: 'https://npm.pkg.github.com' - env: - NODE_AUTH_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }} - - - name: Cache dependencies - id: cache-dependencies - uses: actions/cache@v4 - with: - path: node_modules - key: node_modules-${{ hashFiles('**/package-lock.json') }} - - - name: Install dependencies - if: steps.cache-dependencies.outputs.cache-hit != 'true' - run: npm ci - - - name: Run tests - run: npm run test + validations: + uses: croct-tech/renovate-public-presets/.github/workflows/javascript-validations.yml@unify-workflows + with: + run-security: true + secrets: + GH_PACKAGES_TOKEN: ${{ secrets.GH_PACKAGES_TOKEN }}