Bump lodash and picomatch to fix CVEs #3729
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Unit tests workflow | |
| on: | |
| pull_request: | |
| branches: | |
| - "*" | |
| push: | |
| branches: | |
| - "*" | |
| env: | |
| OPENSEARCH_DASHBOARDS_VERSION: '2.19' | |
| jobs: | |
| Get-CI-Image-Tag: | |
| uses: opensearch-project/opensearch-build/.github/workflows/get-ci-image-tag.yml@58f2e5108a5164e37af78f5d8de5d825825023a9 # main | |
| with: | |
| product: opensearch-dashboards | |
| tests-linux: | |
| needs: Get-CI-Image-Tag | |
| name: Run unit tests | |
| runs-on: ubuntu-latest | |
| container: | |
| # using the same image which is used by opensearch-build team to build the OpenSearch Distribution | |
| # this image tag is subject to change as more dependencies and updates will arrive over time | |
| image: ${{ needs.Get-CI-Image-Tag.outputs.ci-image-version-linux }} | |
| # need to switch to root so that github actions can install runner binary on container without permission issues. | |
| options: --user root | |
| steps: | |
| # Enable longer filenames for windows | |
| - name: Checkout OpenSearch-Dashboards | |
| uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 | |
| with: | |
| repository: opensearch-project/OpenSearch-Dashboards | |
| ref: ${{ env.OPENSEARCH_DASHBOARDS_VERSION }} | |
| path: OpenSearch-Dashboards | |
| - name: Checkout Index Management Dashboards plugin | |
| uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 | |
| with: | |
| path: OpenSearch-Dashboards/plugins/index-management-dashboards-plugin | |
| - name: Bootstrap / Run tests | |
| run: | | |
| chown -R 1000:1000 `pwd` | |
| cd ./OpenSearch-Dashboards/ | |
| su `id -un 1000` -c "source $NVM_DIR/nvm.sh && nvm use && node -v && yarn -v && | |
| cd ./plugins/index-management-dashboards-plugin && | |
| whoami && yarn osd bootstrap && yarn run test:jest --coverage" | |
| - name: Uploads coverage | |
| uses: codecov/codecov-action@29386c70ef20e286228c72b668a06fd0e8399192 # v1 | |
| tests-windows-macos: | |
| name: Run unit tests | |
| strategy: | |
| matrix: | |
| os: [macos-latest, windows-latest] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| # Enable longer filenames for windows | |
| - name: Enable longer filenames | |
| if: ${{ matrix.os == 'windows-latest' }} | |
| run: git config --system core.longpaths true | |
| - name: Checkout OpenSearch-Dashboards | |
| uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 | |
| with: | |
| repository: opensearch-project/OpenSearch-Dashboards | |
| ref: ${{ env.OPENSEARCH_DASHBOARDS_VERSION }} | |
| path: OpenSearch-Dashboards | |
| - name: Setup Node | |
| uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3 | |
| with: | |
| node-version-file: './OpenSearch-Dashboards/.nvmrc' | |
| registry-url: 'https://registry.npmjs.org' | |
| - name: Install Yarn | |
| # Need to use bash to avoid having a windows/linux specific step | |
| shell: bash | |
| run: | | |
| YARN_VERSION=$(node -p "require('./OpenSearch-Dashboards/package.json').engines.yarn") | |
| echo "Installing yarn@$YARN_VERSION" | |
| npm i -g yarn@$YARN_VERSION | |
| - run: node -v | |
| - run: yarn -v | |
| - name: Checkout Index Management Dashboards plugin | |
| uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 | |
| with: | |
| path: OpenSearch-Dashboards/plugins/index-management-dashboards-plugin | |
| - name: Bootstrap plugin/OpenSearch-Dashboards | |
| run: | | |
| cd OpenSearch-Dashboards/plugins/index-management-dashboards-plugin | |
| yarn osd bootstrap | |
| - name: Run tests | |
| run: | | |
| cd OpenSearch-Dashboards/plugins/index-management-dashboards-plugin | |
| yarn run test:jest --coverage |