Moving from npm tokens to trusted publishers (OIDC) #13
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| jobs: | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Use Node.js 22.x | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: 22.x | |
| cache: 'npm' | |
| - run: npm ci | |
| - run: npm run lint | |
| test: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| node-version: [20.x, 22.x, 24.x] | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Use Node.js ${{ matrix.node-version }} | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'npm' | |
| - run: npm ci | |
| - run: npm run dist | |
| - name: Show us the built files | |
| run: ls -al dist/*.*js lib/*.*js | |
| # node target | |
| - name: Unit tests for node build target (mocha cli) | |
| run: npm run prepare-test-node && npm run test-node | |
| # browser target unit tests | |
| - name: Disable AppArmor (for puppeteer) | |
| run: echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns | |
| - name: Unit tests for browser build target (mocha browser) | |
| run: npm run prepare-test-browser && npm run test-browser | |
| - name: Upload test result screenshot | |
| if: always() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: browser-tests-${{ matrix.node-version }} | |
| path: screenshot.png |