chore(deps): bump the npm-minor-and-patch group across 1 directory with 2 updates #9818
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Run tests for js packages | |
| name: tests | |
| on: | |
| pull_request: | |
| branches: [main, dev, staging, release/*] | |
| # Ignore-based, never inclusion-based: an allowlist silently stops testing | |
| # any newly added directory, whereas anything unrecognised here still runs | |
| # CI. Only paths that cannot possibly affect this workflow belong below. | |
| # | |
| # Safe against the "required check never reports" trap: the one required | |
| # context on main is `check`, and changesets.yml publishes a job named | |
| # `check` with no path filter at all, so a PR touching only ignored paths | |
| # still gets a `check` and does not sit pending forever. | |
| paths-ignore: | |
| - '.changeset/**' # release metadata; nothing here reads it | |
| - '.github/ISSUE_TEMPLATE/**' | |
| - '.github/PULL_REQUEST_TEMPLATE*' | |
| - 'docs/**' | |
| - '**.md' | |
| types: | |
| - opened # when a PR is opened | |
| - synchronize # when a PR is pushed to | |
| - reopened # when a PR is reopened | |
| - ready_for_review # when a PR is marked as ready for review (e.g. taken off draft mode) | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| pull-requests: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.PROSOPONATOR_PAT }} | |
| GH_TOKEN: ${{ secrets.PROSOPONATOR_PAT }} | |
| CARGO_TERM_COLOR: always | |
| CARGO_INCREMENTAL: "0" | |
| CARGO_PROFILE_DEV_DEBUG: line-tables-only | |
| NODE_OPTIONS: "--max-old-space-size=4096" | |
| NODE_TLS_REJECT_UNAUTHORIZED: "0" | |
| NODE_ENV: "test" | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| check: | |
| # Hosted, deliberately, and not routed through `vars.GH_RUNNER` like the | |
| # other repos: this repository is public, so a fork PR would run on the | |
| # self-hosted fleet -- executing arbitrary contributor code on hardware we | |
| # own, where it can also persist and poison later trusted jobs. Nothing is | |
| # given up by staying hosted: standard GitHub-hosted runners are free and | |
| # unlimited on public repos, macOS and Windows included. Only *larger* | |
| # runners are billed, so do not "upgrade" a job to one. | |
| # https://docs.github.com/en/billing/reference/actions-runner-pricing | |
| runs-on: ubuntu-latest | |
| if: github.event.pull_request.draft == false | |
| steps: | |
| - name: Print contexts | |
| uses: prosopo/github_actions/.github/actions/print_contexts@a8f2d18145fedb774d5aacbde7b617c6c8852475 # main | |
| with: | |
| INPUTS_CONTEXT: ${{ toJson(inputs) }} | |
| NEEDS_CONTEXT: ${{ toJson(needs) }} | |
| VARS_CONTEXT: ${{ toJson(vars) }} | |
| SECRETS_CONTEXT: ${{ toJson(secrets) }} | |
| - uses: actions/checkout@v7 | |
| with: | |
| token: ${{ secrets.PROSOPONATOR_PAT }} | |
| submodules: "recursive" | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: '24' | |
| cache: 'npm' | |
| - uses: prosopo/github_actions/.github/actions/npm@a8f2d18145fedb774d5aacbde7b617c6c8852475 # main | |
| with: | |
| npm_ci_args: '--include=dev --no-audit --no-fund --prefer-offline' | |
| - name: env | |
| run: | | |
| # Copy the rococo env file to production env file | |
| echo "Copying the rococo env to production env file in procaptcha-bundle" | |
| cp ./dev/scripts/env.production ./packages/procaptcha-bundle/.env.production | |
| # build all packages in workspace | |
| - run: npx turbo run build | |
| - run: npx turbo run build:cjs | |
| # bundle procaptcha-bundle using webpack | |
| - name: Webpack Bundle procaptcha-bundle | |
| run: | | |
| NODE_ENV="development" npx turbo run @prosopo/procaptcha-bundle#bundle:webpack | |
| - name: Start the docker images | |
| run: | | |
| docker compose --file ./docker/docker-compose.test.yml up -d --remove-orphans --force-recreate --always-recreate-deps | |
| docker container ls | |
| sleep 10s | |
| # setup certs | |
| - name: Setup certs | |
| run: | | |
| ./setup_certs.sh | |
| ./install_cert.sh | |
| echo "NODE_EXTRA_CA_CERTS=$(pwd)/certs/server.crt" >> $GITHUB_ENV | |
| - name: Setup env | |
| run: | | |
| set -euxo pipefail # stop on errors, print commands, fail on pipe fails | |
| cp demos/client-example-server/env.development demos/client-example-server/.env.test | |
| cp demos/client-bundle-example/env.development demos/client-bundle-example/.env.test | |
| cp dev/scripts/env.test .env.test | |
| cp dev/scripts/env.test dev/scripts/.env.test | |
| cp dev/scripts/env.test packages/cli/.env.test | |
| cp dev/scripts/env.test packages/procaptcha-bundle/.env.test | |
| # Update URLs to use HTTPS since certificates are present | |
| sed -i 's|http://localhost|https://localhost|g' demos/client-bundle-example/.env.test | |
| sed -i 's|http://localhost|https://localhost|g' .env.test | |
| sed -i 's|http://localhost|https://localhost|g' dev/scripts/.env.test | |
| sed -i 's|http://localhost|https://localhost|g' packages/cli/.env.test | |
| sed -i 's|http://localhost|https://localhost|g' packages/procaptcha-bundle/.env.test | |
| NODE_ENV="test" npm run setup | |
| echo NODE_ENV: "$NODE_ENV" | |
| - name: Start services and run tests | |
| env: | |
| SKIP_REDIS: "true" | |
| # Committed test detector-pool fixture (throwaway keys). A non-empty | |
| # pool makes the provider run scored detection instead of the | |
| # empty-pool PoW fallback, so frictionless integration tests exercise | |
| # the real decrypt path. | |
| PROSOPO_DETECTOR_POOL_DIR: ${{ github.workspace }}/packages/provider/fixtures/detector-pool | |
| run: | | |
| npx concurrently \ | |
| "NODE_ENV=test npm run start:provider" \ | |
| "sleep 10s && NODE_TLS_REJECT_UNAUTHORIZED=0 NODE_ENV=test npm run test:all" \ | |
| --success "first" --kill-others | |
| - run: docker compose --file ./docker/docker-compose.test.yml down |