chore(deps): update dependency astro to v7 [security] #551
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json | |
| name: PR Checks | |
| on: | |
| push: | |
| branches: | |
| - "**" | |
| tags: | |
| - "!**" | |
| pull_request: | |
| branches: | |
| - main | |
| - minor | |
| - fix/** | |
| - feat/** | |
| - patch/** | |
| workflow_dispatch: | |
| concurrency: | |
| # see: https://stackoverflow.com/a/72408109/30654190 | |
| group: ${{ github.workflow }}-${{ github.event.issue.number || github.event.pull_request.number || github.ref || github.run_id }} | |
| cancel-in-progress: true | |
| jobs: | |
| pr-checks: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| steps: | |
| - name: ✈ Checkout default branch | |
| if: github.event_name != 'issue_comment' | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| - name: ✏ Validate commit messages | |
| if: > | |
| github.event.pull_request.user.login != 'github-actions[bot]' && | |
| github.event.pull_request.user.login != 'dependabot[bot]' && | |
| github.event.pull_request.user.login != 'renovate[bot]' | |
| run: | | |
| chmod +x .github/workflows/shell/check-commit-msg.sh | |
| .github/workflows/shell/check-commit-msg.sh | |
| # - name: 🔀 Merge target branch into PR branch | |
| # if: github.event_name == 'pull_request' || github.event_name == 'issue_comment' | |
| # run: | | |
| # git fetch origin ${{ github.base_ref }}:target-branch | |
| # git merge --no-ff target-branch | |
| - name: 📦 Setup Node | |
| uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 | |
| with: | |
| node-version: "24" | |
| - name: ☕ Setup Java | |
| uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 | |
| with: | |
| java-version: "25" | |
| distribution: "corretto" | |
| - name: 🐘 Setup Gradle | |
| uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0 | |
| with: | |
| gradle-version: wrapper | |
| cache-read-only: false | |
| - name: 🔧 Make Gradle wrapper executable | |
| run: chmod +x ./gradlew | |
| - name: 🔧 Show Gradle version | |
| run: ./gradlew --version | |
| # - name: 🦆 Run Actionlint | |
| # run: ./gradlew runActionlint | |
| # - name: 🔒 Check locks | |
| # if: > | |
| # github.event.pull_request.user.login != 'github-actions[bot]' && | |
| # github.event.pull_request.user.login != 'dependabot[bot]' && | |
| # github.event.pull_request.user.login != 'renovate[bot]' | |
| # run: ./gradlew checkLocks --no-parallel | |
| - name: 🏗 Run main checks | |
| run: ./gradlew check | |
| - name: 🛠 Generate CycloneDX BOM | |
| if: github.event_name != 'pull_request' | |
| run: ./gradlew cyclonedxBom --no-configuration-cache | |
| - name: 📈 Generate Code Coverage Report | |
| if: github.event_name != 'pull_request' | |
| run: ./gradlew testCodeCoverageReport | |
| - name: 📤 Upload coverage to Codecov | |
| if: github.event_name != 'pull_request' && github.actor != 'dependabot[bot]' | |
| uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2 | |
| with: | |
| fail_ci_if_error: true | |
| verbose: true | |
| files: ./gradle/aggregation/build/reports/coverage/coverage.xml | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} |