chore(deps): bump library/node (#3549) #9745
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright The OpenTelemetry Authors | |
| # SPDX-License-Identifier: Apache-2.0 | |
| name: Checks | |
| on: | |
| merge_group: | |
| types: [checks_requested] | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: false | |
| jobs: | |
| build_images: | |
| name: Build images | |
| permissions: # required by the reusable workflow | |
| contents: read # required by the component-build-images reusable workflow | |
| packages: write # required to push built images to GHCR | |
| uses: ./.github/workflows/component-build-images.yml | |
| with: | |
| push: ${{ github.event_name == 'push' }} | |
| force_build: ${{ github.event_name == 'push' }} | |
| # Use a non-release tag for PR builds; tags are not pushed when push=false. | |
| version: ${{ github.event_name == 'push' && 'main' || 'dev' }} | |
| secrets: | |
| DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }} | |
| DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }} | |
| markdownlint: | |
| name: Markdown lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Run markdownlint | |
| run: make markdownlint | |
| yamllint: | |
| name: YAML lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Set up Python | |
| uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 | |
| with: | |
| python-version: '3.x' | |
| - name: Install yamllint | |
| run: make install-yamllint | |
| - name: Run yamllint | |
| run: yamllint . -f github --strict | |
| misspell: | |
| name: Misspell | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Run misspell | |
| run: make misspell | |
| checklinks: | |
| name: lychee | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Restore lychee cache | |
| uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 | |
| id: cache-restore | |
| with: | |
| path: .lycheecache | |
| key: ${{ runner.os }}-lychee-${{ hashFiles('.lychee.toml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-lychee- | |
| - name: Run lychee | |
| uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0 | |
| with: | |
| args: --config .lychee.toml --cache --max-cache-age 3d --cache-exclude-status 300..=599 . | |
| fail: true | |
| - name: Save lychee cache | |
| if: always() | |
| uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 | |
| with: | |
| path: .lycheecache | |
| key: ${{ steps.cache-restore.outputs.cache-primary-key }} | |
| sanity: | |
| name: Sanity check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Run sanitycheck.py | |
| run: python3 ./internal/tools/sanitycheck.py | |
| checklicense: | |
| name: Check license | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Run checklicense | |
| run: make checklicense | |
| weaver-check: | |
| name: Weaver check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Run Weaver registry check | |
| env: | |
| GITHUB_WORKSPACE_PATH: ${{ github.workspace }} | |
| run: | | |
| docker run --rm \ | |
| --mount "type=bind,source=${GITHUB_WORKSPACE_PATH}/telemetry-schema,target=/home/weaver/source,readonly" \ | |
| otel/weaver:v0.22.1 \ | |
| registry check -r source | |
| check-react-native-changes: | |
| name: Check React Native changes | |
| runs-on: ubuntu-latest | |
| outputs: | |
| should_build: ${{ steps.filter.outputs.react_native }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Check React Native paths | |
| uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1 | |
| id: filter | |
| with: | |
| filters: | | |
| react_native: | |
| - 'src/react-native-app/**' | |
| - '.github/workflows/**' | |
| react-native-android: | |
| needs: check-react-native-changes | |
| if: needs.check-react-native-changes.outputs.should_build == 'true' | |
| uses: ./.github/workflows/react-native-build.yml | |
| zizmor: | |
| name: zizmor scan | |
| permissions: | |
| actions: read # required to scan GitHub Actions workflows | |
| contents: read # required to checkout the repository | |
| security-events: write # required to upload zizmor SARIF to code scanning | |
| uses: ./.github/workflows/zizmor.yml | |
| codeql-analysis: | |
| name: CodeQL analysis | |
| permissions: | |
| actions: read # required to scan GitHub Actions workflows | |
| contents: read # required to checkout the repository | |
| security-events: write # required to upload CodeQL SARIF to code scanning | |
| uses: ./.github/workflows/codeql-analysis.yml | |
| build-test: | |
| name: build-test | |
| needs: [ | |
| build_images, | |
| markdownlint, | |
| yamllint, | |
| misspell, | |
| checklinks, | |
| sanity, | |
| checklicense, | |
| weaver-check, | |
| react-native-android, | |
| codeql-analysis, | |
| zizmor | |
| ] | |
| if: always() && !cancelled() | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Report CI status | |
| shell: bash | |
| env: | |
| CI_SUCCESS: ${{ !contains(needs.*.result, 'failure') }} | |
| run: | | |
| if [ "${CI_SUCCESS}" == "true" ] | |
| then | |
| echo 'Build complete ✓' | |
| else | |
| echo 'Build failed ✗' | |
| exit 1 | |
| fi |