Bump jwt from 2.10.2 to 2.10.3 (#13852) #45318

Workflow file for this run

	name: CI
	on:
	pull_request:
	merge_group:
	push:
	branches:
	- main
	# Default to least-privilege for the GITHUB_TOKEN. Individual jobs that
	# need to write back to the repo (e.g. posting PR review suggestions)
	# widen their own permissions block below.
	permissions:
	contents: read
	jobs:
	rubocop:
	name: Rubocop
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- name: Run Rubocop
	run: bundle exec rubocop
	suggest_lint_changes:
	name: 'Suggest lint changes'
	runs-on: ubuntu-latest
	if: ${{ github.event_name == 'pull_request' }}
	# parkerbxyz/suggest-changes posts review comments with suggested
	# edits, which requires write access to the PR.
	permissions:
	contents: read
	pull-requests: write
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- uses: ./.github/actions/setup-node
	- name: Run Lint
	run: bin/lint -c
	- name: Comment suggested changes
	uses: parkerbxyz/suggest-changes@v3.0.4
	erblint:
	name: 'ERB Lint'
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- name: Run erb_lint
	run: bin/erb_lint
	eslint:
	name: ESLint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-node
	- name: Run ESLint
	run: yarn lint
	prettier:
	name: Prettier
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-node
	- name: Run Prettier
	run: yarn format:check
	rspec:
	name: RSpec (shard ${{ matrix.shard }}/${{ strategy.job-total }})
	runs-on: ubuntu-latest
	strategy:
	# Don't cancel remaining shards when one fails — we want to see all
	# failures in a single run rather than a slow loop of retries.
	fail-fast: false
	matrix:
	# Bumping this number adds more parallel runners. Keep it in sync
	# with SHARD_TOTAL below.
	shard: [1, 2, 3, 4, 5, 6, 7, 8]
	services:
	postgres:
	image: postgres:15
	env:
	POSTGRES_USER: postgres
	POSTGRES_PASSWORD: postgres
	options: >-
	--health-cmd pg_isready
	--health-interval 10s
	--health-timeout 5s
	--health-retries 5
	ports:
	- 5432:5432
	# https://docs.github.com/en/actions/tutorials/use-containerized-services/create-redis-service-containers
	redis:
	image: redis:latest
	options: >-
	--health-cmd "redis-cli ping"
	--health-interval 10s
	--health-timeout 5s
	--health-retries 5
	ports:
	- 6379:6379
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- uses: ./.github/actions/setup-node
	- uses: ./.github/actions/setup-db
	- name: Build Assets
	run: yarn build && yarn build:css
	- name: Run RSpec
	env:
	${{ insert }}: ${{ secrets }}
	DATABASE_URL: postgres://postgres:postgres@localhost:5432/bank_test
	REDIS_URL: redis://localhost:6379
	RAILS_ENV: test
	CC_TEST_REPORTER_ID: '1' # Force SimpleCov to generate a JSON report
	SHARD_INDEX: ${{ matrix.shard }}
	SHARD_TOTAL: 8
	# Deterministic round-robin split of spec files across shards. We
	# sort the file list first so each runner computes the same ordering,
	# then `awk` keeps only the files whose 1-based index mod SHARD_TOTAL
	# maps to this shard. With 143 spec files over 8 shards, each shard
	# runs ~18 files. This is simple and doesn't require extra gems;
	# upgrade to a balancer (ci-queue, knapsack_pro) later if shards
	# drift apart in wall time.
	run: \|
	specs=$(find spec -name '*_spec.rb' \| sort \| awk -v i="$SHARD_INDEX" -v n="$SHARD_TOTAL" 'NR % n == (i - 1) % n { print }')
	echo "Running $(echo "$specs" \| wc -l) spec files on shard $SHARD_INDEX/$SHARD_TOTAL"
	seed=$RANDOM
	cmd="bundle exec rspec --seed $seed --tag '~skip' $(echo $specs \| tr '\n' ' ')"
	echo "To reproduce locally, run:"
	echo " RAILS_ENV=test bundle exec rails db:drop db:create db:schema:load && \\"
	echo " $cmd"
	eval "$cmd"
	- name: Upload coverage report
	uses: actions/upload-artifact@v7
	with:
	# Each shard generates its own coverage file; name them uniquely
	# so the upload action doesn't clash. Merging into a single report
	# can be done in a downstream job if needed.
	name: simplecov-report-shard-${{ matrix.shard }}
	path: coverage/coverage.json
	annotate:
	name: Annotate
	runs-on: ubuntu-latest
	services:
	postgres:
	image: postgres:15
	env:
	POSTGRES_USER: postgres
	POSTGRES_PASSWORD: postgres
	options: >-
	--health-cmd pg_isready
	--health-interval 10s
	--health-timeout 5s
	--health-retries 5
	ports:
	- 5432:5432
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- uses: ./.github/actions/setup-db
	- name: Run annotaterb
	env:
	DATABASE_URL: postgres://postgres:postgres@localhost:5432/bank_test
	RAILS_ENV: test
	run: bundle exec annotaterb models --frozen
	zeitwerk:
	name: Zeitwerk
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- uses: ./.github/actions/setup-node
	- name: Run zeitwerk:check
	env:
	RAILS_ENV: test
	run: bundle exec rails zeitwerk:check
	reversible_migrations:
	name: Reversible Migrations
	runs-on: ubuntu-latest
	if: github.event_name == 'pull_request'
	services:
	postgres:
	image: postgres:15
	env:
	POSTGRES_USER: postgres
	POSTGRES_PASSWORD: postgres
	options: >-
	--health-cmd pg_isready
	--health-interval 10s
	--health-timeout 5s
	--health-retries 5
	ports:
	- 5432:5432
	steps:
	- uses: actions/checkout@v7
	with:
	fetch-depth: 0
	- uses: ./.github/actions/setup-ruby
	- name: Install postgres client
	run: sudo apt-get install libpq-dev
	- name: Get new migration versions
	id: migrations
	run: \|
	# Get migration files added in this PR compared to main
	NEW_MIGRATIONS=$(git diff --name-only --diff-filter=A origin/main...HEAD -- db/migrate/*.rb \| sort)
	if [ -z "$NEW_MIGRATIONS" ]; then
	echo "No new migrations found"
	echo "versions=" >> $GITHUB_OUTPUT
	else
	echo "New migrations found:"
	echo "$NEW_MIGRATIONS"
	# Extract versions (timestamps) from filenames
	VERSIONS=$(echo "$NEW_MIGRATIONS" \| sed 's/.\/$[0-9]$_.*/\1/' \| tac \| tr '\n' ' ')
	echo "versions=$VERSIONS" >> $GITHUB_OUTPUT
	fi
	- name: Setup database
	if: steps.migrations.outputs.versions != ''
	env:
	DATABASE_URL: postgres://postgres:postgres@localhost:5432/bank_test
	RAILS_ENV: test
	run: bundle exec rails db:create db:schema:load
	- name: Test migration reversibility
	if: steps.migrations.outputs.versions != ''
	env:
	DATABASE_URL: postgres://postgres:postgres@localhost:5432/bank_test
	RAILS_ENV: test
	run: \|
	VERSIONS="${{ steps.migrations.outputs.versions }}"

	# Ensure all migrations are applied first
	echo "========================================="
	echo "Applying all migrations to get to latest state..."
	bundle exec rails db:migrate

	# Get the oldest new migration version
	OLDEST_NEW=$(echo "$VERSIONS" \| awk '{print $NF}')

	# Get all migration versions from files, find the one right before OLDEST_NEW
	ALL_MIGRATIONS=$(ls db/migrate/.rb \| sed 's/.\/$[0-9]$_./\1/' \| sort)
	ROLLBACK_TO=$(echo "$ALL_MIGRATIONS" \| awk -v target="$OLDEST_NEW" '$1 < target {prev=$1} END {print prev}')

	echo "========================================="
	echo "Rolling back all new migrations..."
	if [ -z "$ROLLBACK_TO" ]; then
	echo "Rolling back to empty database (no migrations before the new ones)..."
	bundle exec rails db:migrate VERSION=0
	else
	echo "Rolling back to VERSION=$ROLLBACK_TO..."
	bundle exec rails db:migrate VERSION=$ROLLBACK_TO
	fi

	echo "========================================="
	echo "Re-applying all migrations..."
	bundle exec rails db:migrate

	echo "========================================="
	echo "✅ All migrations are reversible!"
	brakeman:
	name: Brakeman
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: ./.github/actions/setup-ruby
	- name: Run Brakeman
	run: bundle exec brakeman -q

Navigation Menu

Uh oh!

Bump jwt from 2.10.2 to 2.10.3 (#13852) #45318

Workflow file

Bump jwt from 2.10.2 to 2.10.3 (#13852) #45318

Uh oh!

Workflow file for this run