chore(deps): update adobe fixes (#1214) #30
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: [push] | |
| env: | |
| CI_BUILD_NUM: ${{ github.run_id }} | |
| CI_BRANCH: ${{ github.ref_name }} | |
| GOOGLE_CLIENT_EMAIL: ${{ secrets.GOOGLE_CLIENT_EMAIL }} | |
| GOOGLE_PRIVATE_KEY: ${{ secrets.GOOGLE_PRIVATE_KEY }} | |
| GOOGLE_PROJECT_ID: ${{ secrets.GOOGLE_PROJECT_ID }} | |
| UNIVERSAL_TOKEN: ${{ secrets.UNIVERSAL_TOKEN }} | |
| permissions: | |
| id-token: write | |
| contents: write # semantic-release-dry verifies the write permissions | |
| issues: read # needed by semantic-release | |
| pull-requests: write # needed by semantic-release | |
| jobs: | |
| test: | |
| name: Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js 20.x | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20.x' | |
| - name: setup .npmrc | |
| run: echo "//registry.npmjs.org/:_authToken=${{secrets.ADOBE_BOT_NPM_TOKEN}}" > .npmrc | |
| - run: npm install | |
| - run: npm test | |
| - uses: codecov/codecov-action@v4 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| test-deploy: | |
| name: Test Deploy | |
| runs-on: ubuntu-latest | |
| if: github.ref != 'refs/heads/main' | |
| needs: test | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js 20.x | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20.x' | |
| - name: setup .npmrc | |
| run: echo "//registry.npmjs.org/:_authToken=${{secrets.ADOBE_BOT_NPM_TOKEN}}" > .npmrc | |
| - run: npm install | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: us-east-1 | |
| role-to-assume: arn:aws:iam::118435662149:role/helix-gh-deploy-config-service | |
| - name: Fetch AWS Secrets | |
| uses: aws-actions/aws-secretsmanager-get-secrets@v2 | |
| with: | |
| parse-json-secrets: true | |
| secret-ids: | | |
| ,/helix/github-action-secrets | |
| - name: Branch Deployment | |
| run: npm run deploy-ci | |
| - name: Post-Deployment Integration Test | |
| run: npm run test-postdeploy | |
| release: | |
| name: Release | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/main' | |
| needs: test | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js 20.x | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20.x' | |
| - name: setup .npmrc | |
| run: echo "//registry.npmjs.org/:_authToken=${{secrets.ADOBE_BOT_NPM_TOKEN}}" > .npmrc | |
| - run: npm install | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: us-east-1 | |
| role-to-assume: arn:aws:iam::118435662149:role/helix-gh-deploy-config-service | |
| - name: Fetch AWS Secrets | |
| uses: aws-actions/aws-secretsmanager-get-secrets@v2 | |
| with: | |
| parse-json-secrets: true | |
| secret-ids: | | |
| ,/helix/github-action-secrets | |
| - name: Semantic Release | |
| run: npm run semantic-release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |