ci: update GitHub Actions workflows for icp-cli

Update all CI workflows to use icp-cli instead of dfx, add
ICP_CLI_GITHUB_TOKEN for rate limiting, and add Node.js 22 setup.

- Replace dfx commands with icp equivalents in all example workflows
- Add ICP_CLI_GITHUB_TOKEN env var to icp steps
- Add actions/setup-node for Node.js 22
- Simplify provision scripts (remove dfx installation)
- Add .icp to .gitignore

Author: andreacerulli

.github/workflows/backend-motoko.yml

@@ -30,6 +30,8 @@ jobs:
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
       - name: Run MOPS Test Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd backend/mo/ic_vetkeys
@@ -51,6 +53,8 @@ jobs:
       - name: Provision Darwin
         run: bash .github/workflows/provision-darwin.sh
       - name: Run MOPS Test Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd backend/mo/ic_vetkeys

.github/workflows/examples-basic-bls-signing.yml

@@ -15,24 +15,29 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-env:
-  DFX_VERSION: 0.29.1
 jobs:
   examples-basic-bls-signing-rust-darwin:
     runs-on: macos-15
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic BLS Signing Rust Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_bls_signing/rust
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-bls-signing-rust-linux:
@@ -41,14 +46,21 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic BLS Signing Rust Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_bls_signing/rust
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-bls-signing-motoko-darwin:
@@ -57,15 +69,22 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic BLS Signing Motoko Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_bls_signing/motoko
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-bls-signing-motoko-linux:
@@ -74,13 +93,20 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic BLS Signing Motoko Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_bls_signing/motoko
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint

.github/workflows/examples-basic-ibe.yml

@@ -14,24 +14,29 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-env:
-  DFX_VERSION: 0.29.1
 jobs:
   examples-basic-ibe-rust-darwin:
     runs-on: macos-15
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic IBE Rust Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_ibe/rust
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-ibe-rust-linux:
@@ -40,14 +45,21 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic IBE Rust Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_ibe/rust
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-ibe-motoko-darwin:
@@ -56,15 +68,22 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic IBE Motoko Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_ibe/motoko
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-ibe-motoko-linux:
@@ -73,13 +92,20 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic IBE Motoko Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_ibe/motoko
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
-          npm run lint 
+          npm run lint

.github/workflows/examples-basic-timelock-ibe.yml

@@ -22,15 +22,22 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic Timelock IBE Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_timelock_ibe
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
           npm run lint
   examples-basic-timelock-ibe-rust-linux:
@@ -39,13 +46,20 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Basic Timelock IBE Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cargo install candid-extractor
           pushd examples/basic_timelock_ibe
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
           cd frontend
-          npm run lint 
+          npm run lint

.github/workflows/examples-encrypted-chat.yml

@@ -20,6 +20,9 @@ jobs:
     runs-on: macos-15
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
@@ -32,6 +35,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
       - name: Backend Tests Encrypted Chat Rust Linux

.github/workflows/examples-encrypted-notes-dapp.yml

@@ -14,60 +14,86 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-env:
-  DFX_VERSION: 0.29.1
 jobs:
   examples-encrypted-notes-dapp-rust-darwin:
     runs-on: macos-15
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Encrypted Notes Dapp VetKD Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd examples/encrypted_notes_dapp_vetkd/rust
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
   examples-encrypted-notes-dapp-rust-linux:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Encrypted Notes Dapp VetKD Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd examples/encrypted_notes_dapp_vetkd/rust
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
   examples-encrypted-notes-dapp-motoko-darwin:
     runs-on: macos-15
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Encrypted Notes Dapp VetKD Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd examples/encrypted_notes_dapp_vetkd/motoko
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy
   examples-encrypted-notes-dapp-motoko-linux:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
+      - name: Install workspace dependencies
+        run: npm install
       - name: Deploy Encrypted Notes Dapp VetKD Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd examples/encrypted_notes_dapp_vetkd/motoko
-          dfx start --background && dfx deploy
+          icp network start -d && icp deploy