CI: optimize workflow for security updates (#31468)

Co-authored-by: Alex Lavrov <[email protected]>

Author: anna-shakhova

.github/workflows/devextreme_npm_tests.yml

@@ -8,14 +8,28 @@ on:
   pull_request:
   push:
     branches: [23_2]
+  workflow_dispatch:
 
 env:
   NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_TOKEN }}
   NX_SKIP_NX_CACHE: ${{ (github.event_name != 'pull_request' || contains( github.event.pull_request.labels.*.name, 'skip-cache')) && 'true' || 'false' }}
+  RUN_TESTS: ${{ (github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'force all tests')) && 'true' || 'false' }}
 
 jobs:
+  check-should-run:
+    name: Check if tests should run
+    runs-on: devextreme-shr2
+    outputs:
+      should-run: ${{ steps.check.outputs.should-run }}
+    steps:
+      - name: Check RUN_TESTS flag
+        id: check
+        run: echo "should-run=${{ env.RUN_TESTS }}" >> $GITHUB_OUTPUT
+
   build:
     runs-on: devextreme-shr2
+    needs: check-should-run
+    if: needs.check-should-run.outputs.should-run == 'true'
 
     steps:
     - name: Get sources
@@ -63,7 +77,8 @@ jobs:
 
   test_bundlers:
     name: Bundlers tests
-    needs: build
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     runs-on: devextreme-shr2
     timeout-minutes: 60
 
@@ -119,7 +134,8 @@ jobs:
       run: npm run build:vite
 
   test_demos:
-    needs: build
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     strategy:
       fail-fast: false
       matrix:

.github/workflows/qunit_tests-additional-renovation.yml

@@ -8,11 +8,27 @@ on:
   pull_request:
   push:
     branches: [23_2]
+  workflow_dispatch:
+
+env:
+  RUN_TESTS: ${{ (github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'force all tests')) && 'true' || 'false' }}
 
 jobs:
+  check-should-run:
+    name: Check if tests should run
+    runs-on: devextreme-shr2
+    outputs:
+      should-run: ${{ steps.check.outputs.should-run }}
+    steps:
+      - name: Check RUN_TESTS flag
+        id: check
+        run: echo "should-run=${{ env.RUN_TESTS }}" >> $GITHUB_OUTPUT
+
   build:
     runs-on: devextreme-shr2
     name: Build
+    needs: check-should-run
+    if: needs.check-should-run.outputs.should-run == 'true'
     timeout-minutes: 15
 
     steps:
@@ -57,7 +73,8 @@ jobs:
           retention-days: 1
 
   qunit-tests-timezones:
-    needs: build
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     runs-on: devextreme-shr2
     name: ${{ matrix.constel }}-${{ matrix.timezone }}
     timeout-minutes: 15
@@ -112,7 +129,8 @@ jobs:
           useCsp: 'false'
 
   qunit-tests-mobile-and-shadow-dom:
-    needs: build
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     runs-on: devextreme-shr2
     name: ${{ matrix.constel }}-${{ matrix.kind }}
     timeout-minutes: 15
@@ -178,7 +196,8 @@ jobs:
           useCsp: 'true'
 
   qunit-tests-firefox:
-    needs: build
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     runs-on: devextreme-shr2
     name: ${{ matrix.constel }}-firefox
     timeout-minutes: 15
@@ -216,7 +235,8 @@ jobs:
           useCsp: 'true'
 
   qunit-tests-no-csp:
-    needs: build
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     runs-on: devextreme-shr2
     name: ${{ matrix.constel }}-no-csp
     timeout-minutes: 15

.github/workflows/testcafe_tests.yml

@@ -12,10 +12,23 @@ on:
 env:
   NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_TOKEN }}
   NX_SKIP_NX_CACHE: ${{ (github.event_name != 'pull_request' || contains( github.event.pull_request.labels.*.name, 'skip-cache')) && 'true' || 'false' }}
+  RUN_TESTS: ${{ (github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'force all tests')) && 'true' || 'false' }}
 
 jobs:
+  check-should-run:
+    name: Check if tests should run
+    runs-on: devextreme-shr2
+    outputs:
+      should-run: ${{ steps.check.outputs.should-run }}
+    steps:
+      - name: Check RUN_TESTS flag
+        id: check
+        run: echo "should-run=${{ env.RUN_TESTS }}" >> $GITHUB_OUTPUT
+
   build:
     name: build
+    needs: check-should-run
+    if: needs.check-should-run.outputs.should-run == 'true'
     strategy:
       fail-fast: false
 
@@ -58,7 +71,8 @@ jobs:
 
   testcafe:
     name: ${{ matrix.ARGS.name }}
-    needs: [build]
+    needs: [check-should-run, build]
+    if: needs.check-should-run.outputs.should-run == 'true'
     strategy:
       fail-fast: false
       matrix:

.github/workflows/ts_declarations.yml

@@ -50,7 +50,7 @@ jobs:
         fi
 
   validate-declarations:
-    runs-on: devextreme-shr2
+    runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
     - name: Get sources
@@ -61,6 +61,11 @@ jobs:
       with:
         node-version: '20'
 
+    - name: Set up .NET
+      uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: 6.0.x
+
     - name: Restore npm cache
       uses: actions/cache@v4
       with:

.github/workflows/wrapper_tests.yml

@@ -11,7 +11,7 @@ env:
 
 jobs:
   test:
-    runs-on: devextreme-shr2
+    runs-on: ubuntu-22.04
     timeout-minutes: 30
 
     steps:
@@ -23,6 +23,11 @@ jobs:
         with:
           node-version: '20'
 
+      - name: Set up .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: 6.0.x
+
       - name: Get npm cache directory
         id: npm-cache-dir
         shell: bash

packages/devextreme/testing/runner/runner.csproj

@@ -1,12 +1,12 @@
-<Project Sdk="Microsoft.NET.Sdk.Web" ToolsVersion="15.0">
+<Project Sdk="Microsoft.NET.Sdk.Web">
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="6.0.25" />
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version="6.0.25" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="8.0.19" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version="8.0.19" />
   </ItemGroup>
 
   <PropertyGroup>
-    <TargetFramework>net6</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
     <PreserveCompilationContext>true</PreserveCompilationContext>
     <StartupObject>Runner.Program</StartupObject>
     <OutputType>Exe</OutputType>