chore(deps): bump next from 16.2.3 to 16.2.11 in /Dashboard/Dashboard1 #377
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main, main-debugging, main-debugging-issues] | |
| pull_request: | |
| branches: [main] | |
| workflow_dispatch: | |
| jobs: | |
| lint-and-typecheck: | |
| name: Lint & Type Check | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: Dashboard/Dashboard1 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: '24' | |
| cache: 'npm' | |
| cache-dependency-path: Dashboard/Dashboard1/package-lock.json | |
| - run: npm ci | |
| - run: npx tsc --noEmit | |
| - run: npx eslint . --max-warnings 0 || true | |
| docker-build: | |
| name: Docker Compose Build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Create .env from example | |
| run: cp .env.example .env | |
| - name: Setup Dummy Secrets | |
| run: | | |
| mkdir -p data/secrets | |
| for secret in mysql_root_password mysql_password nextcloud_admin_password collabora_password matrix_registration_secret matrix_macaroon_secret_key matrix_form_secret webui_secret_key vpn_admin_password; do | |
| echo "ci_test_secret" > data/secrets/$secret | |
| done | |
| echo "Secrets created:" | |
| ls -la data/secrets/ | |
| - name: Validate docker-compose.yml | |
| run: docker compose config --quiet | |
| - name: Build all services | |
| run: docker compose build dashboard | |
| security-check: | |
| name: Security Scan | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: Dashboard/Dashboard1 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: '24' | |
| cache: 'npm' | |
| cache-dependency-path: Dashboard/Dashboard1/package-lock.json | |
| - run: npm ci | |
| - name: Check for vulnerabilities | |
| run: npm audit --audit-level=critical || true | |
| - name: Check for hardcoded secrets | |
| run: | | |
| ! grep -rn "password=" docker-compose.yml | grep -v '${' | grep -v '#' || echo "WARNING: Possible hardcoded secrets found" | |
| ! grep -rn "MYSQL_ROOT_PASSWORD=\|MYSQL_PASSWORD=\|NEXTCLOUD_ADMIN_PASSWORD=" docker-compose.yml | grep -v '${' || echo "WARNING: Hardcoded DB passwords found" | |
| # Trigger CI re-run |