Skip to content

Update dependency @biomejs/biome to v2.4.9 (#245) #646

Update dependency @biomejs/biome to v2.4.9 (#245)

Update dependency @biomejs/biome to v2.4.9 (#245) #646

Workflow file for this run

name: Node.js CI
on:
push:
branches: [ master ]
pull_request_target:
branches: [ master ]
jobs:
build:
strategy:
matrix:
os: [ubuntu-latest]
node-version: [20.x, 22.x, 24.x]
runs-on: ${{ matrix.os }}
permissions:
contents: read
steps:
- uses: actions/checkout@v6
with:
ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}
- name: Use Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v5.0.0
with:
node-version: ${{ matrix.node-version }}
- run: yarn install
- run: yarn check
- run: yarn format
- run: yarn test:ci
- uses: actions/upload-artifact@v6
if: matrix.node-version == '24.x'
with:
name: reports-${{ matrix.os }}-${{ matrix.node-version }}
retention-days: 1
path: |
**/coverage/lcov.info
**/coverage/sonar-report.xml
!node_modules/**
# ─── Job 2: uploads coverage using secrets, does NOT run PR code ─────────
static_analysis:
name: "🔬 Static Analysis"
needs: build
runs-on: ubuntu-latest
if: success()
permissions:
id-token: write
contents: read
steps:
# Commit is needed to check coverage files against content
- uses: actions/checkout@v6
with:
ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}
# Disabling shallow clone is needed by SonarQube
fetch-depth: 0
- uses: actions/download-artifact@v8
with:
pattern: reports-*
path: __reports
- run: find . -name "lcov.info"
- name: Collect Sonar report paths
id: sonar_reports
run: |
paths=$(find . -name "sonar-report.xml" | tr '\n' ',' | sed 's/,$//')
echo "paths=$paths" >> $GITHUB_OUTPUT
- name: SonarCloud Scan
uses: SonarSource/sonarqube-scan-action@v6
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
with:
args: >
-Dsonar.testExecutionReportPaths=${{ steps.sonar_reports.outputs.paths }}