Fix Puppeteer related tests on Ubuntu

In Ubuntu 24.04 development builds of Chrome need to be run
with a specific App Armor profile set.

See https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md

Author: NickColley

.github/workflows/tests.yml

@@ -176,6 +176,7 @@ jobs:
             cache: |
               .cache/jest
               .cache/puppeteer
+            puppeteer: true
             projects:
               - JavaScript component tests
 
@@ -190,6 +191,7 @@ jobs:
             cache: |
               .cache/jest
               .cache/puppeteer
+            puppeteer: true
             projects:
               - Accessibility tests
 
@@ -213,10 +215,17 @@ jobs:
           path: ${{ matrix.task.cache }}
 
       - name: Run test task
-
-        # Use 2x CPU cores for hosted GitHub runners
-        # https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners/about-github-hosted-runners#supported-runners-and-hardware-resources
-        run: npx jest --color ${{ format('--coverage={0} --maxWorkers=2 --selectProjects "{1}"', matrix.task.coverage || false, join(matrix.task.projects, '", "')) }}
+        run: |
+          # Use 2x CPU cores for hosted GitHub runners (--maxWorkers)
+          # https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners/about-github-hosted-runners#supported-runners-and-hardware-resources
+
+          # Puppeteer uses Chrome to execute tests.
+          # Ubuntu requires a profile for developer builds of Chrome to run without errors.
+          # (https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md)
+          ${{ (
+            matrix.task.puppeteer == true &&
+            matrix.runner.name == 'Ubuntu'
+          ) && 'aa-exec --profile=chrome' || '' }} npx jest --color ${{ format('--coverage={0} --maxWorkers=2 --selectProjects "{1}"', matrix.task.coverage || false, join(matrix.task.projects, '", "')) }}
 
       - name: Save test coverage
         uses: actions/upload-artifact@v7.0.1