BAU: Bump @pact-foundation/pact-cli from 16.1.7 to 18.0.0 #1726

	---
	name: 'Build & Test'
	permissions:
	contents: read

	# Triggered when:
	# - a file, listed below, is pushed to any branch other than `main`, i.e. a feature branch.
	# - invoked by another workflow.
	on:
	push:
	paths:
	- src/**
	- package.json
	- yarn.lock
	- tsconfig.json
	- .node-version
	- .github/workflows/acceptance-checks.yaml
	branches:
	- main
	pull_request:
	paths:
	- src/**
	- package.json
	- yarn.lock
	- tsconfig.json
	- .node-version
	- .github/workflows/acceptance-checks.yaml
	branches:
	- main
	types:
	- opened
	- reopened
	- ready_for_review
	- synchronize
	workflow_call:
	inputs:
	gitRef:
	required: false
	type: string
	default: ${{ github.ref }}

	jobs:
	acceptance-checks:
	name: 'Build, Test, Lint & Scan'
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # pin@v6.0.2
	with:
	ref: ${{ inputs.gitRef \|\| github.ref }}

	- name: Setup NodeJS
	uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # pin@v6.3.0
	with:
	node-version-file: '.node-version'

	- name: Run yarn install
	run: yarn install --frozen-lockfile

	- name: Run yarn build
	run: yarn build

	- name: Run yarn lint
	run: yarn lint

	- name: Run unit tests with coverage report
	run: yarn test:unit

	- name: SonarCloud Scan
	uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 # pin@v7.0.0
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback