chore: pin coder dependency to an immutable commit SHA #3262
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| lint: | |
| name: Lint | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm, Node.js, and dependencies | |
| uses: ./.github/actions/setup | |
| - run: pnpm typecheck | |
| - run: pnpm format:check | |
| - run: pnpm lint | |
| - run: pnpm build | |
| test-unit: | |
| name: Unit Test (${{ matrix.name }}, Electron ${{ matrix.electron-version }}) | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # Minimum supported version: VS Code 1.105 (Sept 2025) -> Electron 37 -> Node 22 | |
| # See https://github.com/ewanharris/vscode-versions for version mapping. | |
| # Newer Electron is pinned (not "latest"): 42.3.1+ breaks the oxc transform on macOS arm64. | |
| include: | |
| - { os: ubuntu-24.04, name: Linux, electron-version: "37" } | |
| - { os: ubuntu-24.04, name: Linux, electron-version: "42.3.0" } | |
| - { | |
| os: windows-2025-vs2026, | |
| name: Windows, | |
| electron-version: "42.3.0", | |
| } | |
| - { os: macos-15, name: macOS, electron-version: "42.3.0" } | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm, Node.js, and dependencies | |
| uses: ./.github/actions/setup | |
| - name: Run tests with Electron ${{ matrix.electron-version }} | |
| run: ./scripts/test-electron.sh ${{ matrix.electron-version }} | |
| shell: bash | |
| env: | |
| CI: true | |
| test-integration: | |
| name: Integration Test (${{ matrix.name }}, VS Code ${{ matrix.vscode-version }}) | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - { os: ubuntu-24.04, name: Linux, vscode-version: "1.105.0" } | |
| - { os: ubuntu-24.04, name: Linux, vscode-version: "stable" } | |
| - { os: windows-2025-vs2026, name: Windows, vscode-version: "stable" } | |
| - { os: macos-15, name: macOS, vscode-version: "stable" } | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm, Node.js, and dependencies | |
| uses: ./.github/actions/setup | |
| - run: pnpm build | |
| - name: Run integration tests on VS Code ${{ matrix.vscode-version }} | |
| # xvfb only exists on Linux; on Windows/macOS the runner has a real display. | |
| run: ${{ runner.os == 'Linux' && 'xvfb-run -a' || '' }} pnpm test:integration --label "VS Code ${{ matrix.vscode-version }}" | |
| shell: bash | |
| pixel: | |
| name: Pixel | |
| runs-on: ubuntu-24.04 | |
| # Forks and Dependabot can't read the PIXEL_KEY secret. | |
| if: github.repository_owner == 'coder' && github.actor != 'dependabot[bot]' | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm, Node.js, and dependencies | |
| uses: ./.github/actions/setup | |
| - name: Install Chromium | |
| run: pnpm exec playwright-core install --with-deps chromium | |
| # Builds the Storybook (buildCommand in pixel.jsonc) and snapshots it. | |
| - name: Snapshot | |
| run: pnpm exec pixel-storybook | |
| env: | |
| PIXEL_KEY: ${{ secrets.PIXEL_KEY }} | |
| # Auto-approve on mainline to avoid blocking CI after squash merges. | |
| PIXEL_AUTO_REVIEW: ${{ github.ref == 'refs/heads/main' }} | |
| package: | |
| name: Package | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm, Node.js, and dependencies | |
| uses: ./.github/actions/setup | |
| - name: Get version from package.json | |
| id: version | |
| run: | | |
| VERSION=$(node -e "console.log(require('./package.json').version)") | |
| echo "version=$VERSION" >> $GITHUB_OUTPUT | |
| echo "Version: $VERSION" | |
| - name: Setup package path | |
| id: setup | |
| run: | | |
| EXTENSION_NAME=$(node -e "console.log(require('./package.json').name)") | |
| # Add commit SHA for CI builds | |
| SHORT_SHA=$(git rev-parse --short HEAD) | |
| PACKAGE_NAME="${EXTENSION_NAME}-${{ steps.version.outputs.version }}-${SHORT_SHA}.vsix" | |
| echo "packageName=$PACKAGE_NAME" >> $GITHUB_OUTPUT | |
| - name: Build extension | |
| run: pnpm build:production | |
| - name: Package extension | |
| run: pnpm vsce package --no-dependencies --out "${{ steps.setup.outputs.packageName }}" | |
| - name: Upload artifact (PR) | |
| if: github.event_name == 'pull_request' | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| path: ${{ steps.setup.outputs.packageName }} | |
| if-no-files-found: error | |
| retention-days: 7 | |
| archive: false | |
| - name: Upload artifact (main) | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/main' | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| path: ${{ steps.setup.outputs.packageName }} | |
| if-no-files-found: error | |
| archive: false |