Cloud/.github/workflows/ci.yml at main · Obiente/Cloud · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
name: CI

on:
  push:
    branches:
      - main
  pull_request:

permissions:
  actions: read
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  main:
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@v7
        with:
          filter: tree:0
          fetch-depth: 0

      - uses: pnpm/action-setup@v6
        name: Install pnpm
        with:
          run_install: false

      - uses: actions/setup-go@v7
        with:
          go-version: '1.27.3'
          cache-dependency-path: 'apps/**/go.sum'

      - uses: actions/setup-node@v7
        with:
          node-version: 22
          cache: "pnpm"

      - run: pnpm install --frozen-lockfile --prefer-offline

      - name: Derive Nx comparison SHAs
        uses: nrwl/nx-set-shas@v5

      - name: Run affected checks
        run: pnpm exec nx affected -t lint test test:ssr build typecheck

      - run: pnpm exec nx fix-ci
        if: always()

  dashboard-regressions:
    runs-on: ubuntu-24.04
    timeout-minutes: 20
    env:
      NX_NO_CLOUD: 'true'
      PLAYWRIGHT_USE_BUILD: 'true'
      NUXT_HYDRATION_DIAGNOSTICS: 'true'
    steps:
      - uses: actions/checkout@v7
      - uses: pnpm/action-setup@v6
      - uses: actions/setup-node@v7
        with:
          node-version: 22
          cache: pnpm
      - run: pnpm install --frozen-lockfile
      - run: pnpm exec playwright install --with-deps chromium
      - run: pnpm exec nx run-many --targets=nuxt:build --projects=@obiente/dashboard
      - name: Dashboard recovery and admin regressions
        run: pnpm exec nx run-many --targets=e2e --projects=@obiente/dashboard -- --workers=1
        env:
          PLAYWRIGHT_GREP: 'audit-remediation|admin-interactions|hydration-recovery|popup-hydration|managed-backups|page-smoke.*admin'
      - name: Session renewal with authentication enabled
        run: pnpm exec nx run-many --targets=e2e --projects=@obiente/dashboard -- --workers=1
        env:
          PLAYWRIGHT_AUTH_TESTS: 'true'
          PLAYWRIGHT_GREP: 'auth-session'