Fix allof in array item

.github/workflows/build-perf.yml

@@ -9,14 +9,18 @@ on:
 
 jobs:
   build-size:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Build Size Report
     timeout-minutes: 30
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
           cache: yarn
       - uses: preactjs/compressed-size-action@946a292cd35bd1088e0d7eb92b69d1a8d5b5d76a # v2
         with:
@@ -29,9 +33,12 @@ jobs:
           compression: none
 
   build-time:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Build Time Perf
     timeout-minutes: 30
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4

.github/workflows/canary-beta-release.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
           cache: yarn
       - name: Prepare git
         run: |

.github/workflows/canary-release.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Set up Node
         uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
           cache: yarn
       - name: Prepare git
         run: |

.github/workflows/deploy-live.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   build:
-    if: github.repository_owner	== 'PaloAltoNetworks'
+    if: github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs'
     name: Build
     runs-on: ubuntu-latest
 
@@ -35,9 +35,12 @@ jobs:
           path: build.zip
 
   deploy:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Deploy
     needs: build
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     steps:
       - name: Checkout repository
@@ -49,6 +52,16 @@ jobs:
           node-version: "20"
           cache: "yarn"
 
+      - name: Authenticate to Google Cloud
+        id: auth
+        uses: google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5
+        with:
+          workload_identity_provider: ${{ secrets.WIF_PROVIDER }}
+          service_account: ${{ secrets.WIF_SERVICE_ACCOUNT }}
+
+      - name: Export Google Cloud Credentials
+        run: echo "GCP_SA_KEY=$(cat ${{ steps.auth.outputs.credentials_file_path }})" >> $GITHUB_ENV
+
       - uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
         with:
           name: build
@@ -58,10 +71,10 @@ jobs:
 
       - name: Deploy to Firebase
         id: deploy_live
-        uses: FirebaseExtended/action-hosting-deploy@0cbcac4740c2bfb00d632f0b863b57713124eb5a # v0.9.0
+        uses: FirebaseExtended/action-hosting-deploy@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c # v0.10.0
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"
-          firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT_PANDEV }}"
+          firebaseServiceAccount: "${{ env.GCP_SA_KEY }}"
           projectId: pandev
           channelId: live
           target: docusaurus-openapi.tryingpan.dev

.github/workflows/deploy-preview.yml

@@ -2,26 +2,33 @@ name: "Deploy Preview"
 
 on:
   pull_request_target:
-    branches: [main, v3.0.0, v2.0.0]
+    branches: [main]
 
 jobs:
   precheck:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Precheck
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      security-events: write
     outputs:
       is-org-member-result: ${{ steps.is-org-member.outputs.is-org-member-result }}
     steps:
       - name: Check if actor is org member
         id: is-org-member
-        run: echo "is-org-member-result=$(gh api -X GET orgs/PaloAltoNetworks/memberships/${{ github.actor }} | jq -r .message)" >> "$GITHUB_OUTPUT"
-    env:
-      GH_TOKEN: ${{ secrets.PAT }}
+        run: |
+          status=$(curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer $GH_TOKEN" \
+            https://api.github.com/orgs/PaloAltoNetworks/members/${{ github.actor }})
+          if [ "$status" = "204" ]; then
+            echo "is-org-member-result=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "is-org-member-result=false" >> "$GITHUB_OUTPUT"
+          fi
+        env:
+          GH_TOKEN: ${{ secrets.PAT }}
 
   analyze:
-    if: github.repository_owner	== 'PaloAltoNetworks' && needs.precheck.outputs.is-org-member-result == 'null'
+    if: github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' && needs.precheck.outputs.is-org-member-result == 'true'
     name: Analyze
     needs: precheck
     runs-on: ubuntu-latest
@@ -49,7 +56,7 @@ jobs:
         uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3
 
   analyze_unsafe:
-    if: github.repository_owner	== 'PaloAltoNetworks' && needs.precheck.outputs.is-org-member-result != 'null'
+    if: github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' && needs.precheck.outputs.is-org-member-result == 'false'
     name: Analyze Unsafe
     needs: precheck
     runs-on: ubuntu-latest
@@ -81,7 +88,8 @@ jobs:
     name: Build
     needs: [analyze, analyze_unsafe]
     if: |
-      !failure() && !cancelled() && 
+      github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' &&
+      !failure() && !cancelled() &&
       (success('analyze') || success('analyze_unsafe'))
     runs-on: ubuntu-latest
     permissions:
@@ -116,8 +124,15 @@ jobs:
   deploy:
     name: Deploy
     needs: build
-    if: ${{ !failure() && !cancelled() }}
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' && !failure() && !cancelled() }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+      checks: write
+      id-token: write
+    outputs:
+      preview_url: ${{ steps.deploy_preview.outputs.details_url }}
 
     steps:
       - name: Checkout repository
@@ -129,6 +144,16 @@ jobs:
           node-version: "20"
           cache: "yarn"
 
+      - name: Authenticate to Google Cloud
+        id: auth
+        uses: google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5
+        with:
+          workload_identity_provider: ${{ secrets.WIF_PROVIDER }}
+          service_account: ${{ secrets.WIF_SERVICE_ACCOUNT }}
+
+      - name: Export Google Cloud Credentials
+        run: echo "GCP_SA_KEY=$(cat ${{ steps.auth.outputs.credentials_file_path }})" >> $GITHUB_ENV
+
       - uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
         with:
           name: build
@@ -138,12 +163,50 @@ jobs:
 
       - name: Deploy to Firebase
         id: deploy_preview
-        uses: FirebaseExtended/action-hosting-deploy@0cbcac4740c2bfb00d632f0b863b57713124eb5a # v0.9.0
+        uses: FirebaseExtended/action-hosting-deploy@e2eda2e106cfa35cdbcf4ac9ddaf6c4756df2c8c # v0.10.0
         with:
           repoToken: "${{ secrets.GITHUB_TOKEN }}"
-          firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT_PANDEV }}"
+          firebaseServiceAccount: "${{ env.GCP_SA_KEY }}"
           projectId: pandev
           expires: 30d
           channelId: "pr${{ github.event.number }}"
         env:
           FIREBASE_CLI_PREVIEWS: hostingchannels
+
+  visual_diff:
+    name: Visual Diff
+    needs: deploy
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' && !failure() && !cancelled() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Setup node
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
+        with:
+          node-version: "20"
+          cache: "yarn"
+
+      - name: Install dependencies
+        run: yarn --prefer-offline
+
+      - name: Install Playwright
+        run: npx playwright install --with-deps chromium
+
+      - name: Run visual diff
+        run: yarn ts-node scripts/sitemap-visual-diff.ts --preview-url ${{ needs.deploy.outputs.preview_url }} --summary-file visual_diffs/results.json --concurrency 4 --paths "/tests/"
+
+      - name: Generate report and summary
+        run: yarn ts-node scripts/generate-visual-diff-report.ts visual_diffs/results.json visual_diffs/index.html
+
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        if: always()
+        with:
+          name: visual_diffs
+          path: visual_diffs

.github/workflows/pr-title-check.yaml

@@ -14,6 +14,7 @@ on:
 
 jobs:
   check:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Check
     runs-on: ubuntu-latest
     steps:

.github/workflows/release-beta.yaml

@@ -22,7 +22,7 @@ jobs:
           git config user.email "github-actions[bot]@users.noreply.github.com"
       - uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2
         with:
-          node-version: "*"
+          node-version: "20"
           registry-url: "https://registry.npmjs.org"
       - name: Release Beta
         run: npx ts-node --transpile-only scripts/publish-beta.ts

.github/workflows/release.yaml

@@ -23,7 +23,7 @@ jobs:
           git config user.email "github-actions[bot]@users.noreply.github.com"
       - uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2
         with:
-          node-version: "*"
+          node-version: "20"
           registry-url: "https://registry.npmjs.org"
       - name: Release
         run: npx ts-node --transpile-only scripts/publish.ts

.github/workflows/validate.yaml

@@ -11,13 +11,16 @@ env:
 
 jobs:
   prepare-yarn-cache:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Prepare Cache
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
       - uses: actions/cache@2f8e54208210a422b2efd51efaa6bd6d7ca8920f # v3
         with:
           path: |
@@ -29,14 +32,17 @@ jobs:
         run: yarn install --frozen-lockfile
 
   lint:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Lint
     needs: prepare-yarn-cache
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
       - uses: actions/cache@2f8e54208210a422b2efd51efaa6bd6d7ca8920f # v3
         with:
           path: |
@@ -51,14 +57,17 @@ jobs:
         run: yarn lint --max-warnings 0
 
   test:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Test
     needs: prepare-yarn-cache
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
       - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
         with:
           path: |
@@ -71,14 +80,17 @@ jobs:
         run: yarn test
 
   cypress:
+    if: ${{ github.repository == 'PaloAltoNetworks/docusaurus-openapi-docs' }}
     name: Cypress
     needs: prepare-yarn-cache
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "18"
+          node-version: "20"
       - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
         with:
           path: |

.gitignore

@@ -143,3 +143,6 @@ demo/**/versions.json
 
 .idea
 .tool-versions
+
+# Playwright
+visual_diffs/