Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,18 @@ updates:
groups:
npm:
patterns: ["*"]
commit-message:
prefix: "chore"
prefix-development: "chore"
include: "scope"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
groups:
github-actions:
patterns: ["*"]
commit-message:
prefix: "chore"
prefix-development: "chore"
include: "scope"
3 changes: 2 additions & 1 deletion .github/workflows/automatic-api-update.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -40,8 +40,9 @@ jobs:
with:
delete-branch: "true"
title: "Update API to ${{ github.event.client_payload.BUFTAG }}"
commit-message: "chore: update api version"
# https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
draft: "always-true"
branch: "api-change/${{ github.event.client_payload.BUFTAG }}"
base: "main"
token: ${{ secrets.GITHUB_TOKEN }}
token: "${{ secrets.GITHUB_TOKEN }}"
32 changes: 32 additions & 0 deletions .github/workflows/lint.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
---
name: "Lint"
permissions:
contents: "read"
on:
push:
branches:
- "main"
pull_request:
branches:
- "*"
jobs:
lint:
name: "Lint"
runs-on: "depot-ubuntu-24.04-small"
steps:
- uses: "actions/checkout@v5"
- uses: "bahmutov/npm-install@v1"
with:
useLockFile: false
- name: "Run prettier"
run: "CI=true yarn run prettier src -c"
- name: "Run lint"
run: "CI=true yarn lint"

conventional-commits:
name: "Lint Commit Messages"
runs-on: "depot-ubuntu-24.04-small"
if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')"
steps:
- uses: "actions/checkout@v5"
- uses: "webiny/action-conventional-commits@v1.3.0"
Comment on lines +27 to +32

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI about 1 month ago

Copilot could not generate an autofix suggestion

Copilot could not generate an autofix suggestion for this alert. Try pushing a new commit or if the problem persists contact support.

7 changes: 4 additions & 3 deletions .github/workflows/manual-api-update.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -40,9 +40,10 @@ jobs:
if: steps.buf-update.outputs.updated == 'true'
with:
delete-branch: "true"
title: Update API to ${{ inputs.buftag }}
title: "Update API to ${{ inputs.buftag }}"
commit-message: "chore: update api version"
# https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs
draft: "always-true"
branch: api-change/${{ inputs.buftag }}
branch: "api-change/${{ inputs.buftag }}"
base: "main"
token: ${{ secrets.GITHUB_TOKEN }}
token: "${{ secrets.GITHUB_TOKEN }}"
16 changes: 6 additions & 10 deletions .github/workflows/test.yaml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
name: "Lint and Test"
name: "Test"
on:
push:
branches:
Expand All @@ -25,68 +25,64 @@
- js-dist/package.json
- buf.gen.yaml
test:
name: Lint and Test
name: "Test"
runs-on: "depot-ubuntu-24.04-small"
strategy:
matrix:
node-version: [18, 20, 22]
needs: "paths-filter"
if: |
needs.paths-filter.outputs.codechange == 'true'
steps:
- uses: actions/checkout@v5
- uses: "actions/checkout@v5"
- uses: "authzed/action-spicedb@v1"
with:
version: "latest"
- uses: actions/setup-node@v6
- uses: "actions/setup-node@v6"
with:
node-version: ${{ matrix.node-version }}
cache-dependency-path: ./package.json
cache: "yarn"
- uses: bahmutov/npm-install@v1
- uses: "bahmutov/npm-install@v1"
with:
useLockFile: false
- name: Run lint
run: "CI=true yarn lint"
- name: Run prettier
run: "CI=true yarn run prettier src -c"
- name: Run Yarn tests
run: "CI=true yarn only-run-tests"
build-js-client:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium test

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
name: Build and Test JS client
name: "Build and Test JS client"
runs-on: "depot-ubuntu-24.04-small"
strategy:
matrix:
node-version: [18, 20, 22]
needs: "paths-filter"
if: |
needs.paths-filter.outputs.codechange == 'true'
steps:
- uses: actions/checkout@v5
- uses: "authzed/action-spicedb@v1"
with:
version: "latest"
- uses: actions/setup-node@v6
with:
node-version: ${{ matrix.node-version }}
cache-dependency-path: ./package.json
cache: "yarn"
- uses: bahmutov/npm-install@v1
with:
useLockFile: false
- name: Run build
run: yarn build-js-client
working-directory: ./
- uses: bahmutov/npm-install@v1
with:
useLockFile: false
working-directory: ./js-dist
- name: Run tests
run: CI=true yarn only-run-tests
working-directory: ./js-dist
- uses: actions/upload-artifact@v5
with:
name: js-client-${{ matrix.node-version }}
path: |
js-dist/**
!js-dist/node_modules/**

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium test

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Loading