fix: satisfy react purity lint in DraftPendingRefresh #41
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - "codex/**" | |
| pull_request: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ci-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| CI: "true" | |
| CRON_SECRET: ci-cron-secret-at-least-32-characters | |
| GUEST_JWT_SECRET: ci-guest-secret-at-least-32-characters | |
| NEXT_PUBLIC_SUPABASE_URL: http://127.0.0.1:54321 | |
| NEXT_PUBLIC_SUPABASE_ANON_KEY: ci-anon-key | |
| SUPABASE_SERVICE_ROLE_KEY: ci-service-role-key | |
| jobs: | |
| verify: | |
| name: Static checks, tests, and build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 | |
| - name: Set up pnpm | |
| uses: pnpm/action-setup@b0f76dfb45f55f8421693e4803ac7bb65143bd34 # v6 | |
| - name: Set up Node.js | |
| uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: 22 | |
| cache: pnpm | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Lint | |
| run: pnpm lint | |
| - name: Typecheck | |
| run: pnpm typecheck | |
| - name: Unit and golden-agent tests | |
| run: pnpm test:unit | |
| - name: API and migration contracts | |
| run: pnpm test:contract | |
| - name: No-auto-send guard | |
| run: pnpm verify:no-auto-send | |
| - name: Production build | |
| run: pnpm build | |
| secrets: | |
| name: Current-tree secret scan | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 | |
| with: | |
| fetch-depth: 1 | |
| - name: Scan with Gitleaks 8.30.1 | |
| uses: docker://ghcr.io/gitleaks/gitleaks:v8.30.1 | |
| with: | |
| args: dir . --redact --no-banner | |
| browser-smoke: | |
| name: Desktop and mobile browser smoke | |
| needs: verify | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 | |
| - name: Set up pnpm | |
| uses: pnpm/action-setup@b0f76dfb45f55f8421693e4803ac7bb65143bd34 # v6 | |
| - name: Set up Node.js | |
| uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: 22 | |
| cache: pnpm | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Install Chromium | |
| run: pnpm exec playwright install --with-deps chromium | |
| - name: Run smoke journeys | |
| run: pnpm test:e2e:smoke |