Fix Dependabot security alerts #10472
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| check: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 | |
| - name: Setup Biome | |
| uses: biomejs/setup-biome@4c91541eaada48f67d7dbd7833600ce162b68f51 # v2.7.1 | |
| with: | |
| version: 2.0.6 | |
| - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 | |
| - run: pnpm install | |
| - name: Set node version to 24.x | |
| uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 | |
| with: | |
| node-version: 24.x | |
| cache: "pnpm" | |
| - name: Run Biome | |
| run: biome ci . | |
| - run: pnpm knip | |
| - name: Build SDK | |
| run: pnpm build-sdk | |
| - run: pnpm check-types | |
| - name: Install ripgrep (rg) | |
| run: sudo apt-get update && sudo apt-get install -y ripgrep | |
| - name: Report Colors (non-blocking) | |
| run: pnpm report:colors | |
| continue-on-error: true | |
| - name: Save Report Colors JSON | |
| if: always() | |
| run: pnpm report:colors:out || true | |
| - name: Upload Report Artifact | |
| if: always() | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| with: | |
| name: report-colors | |
| path: .reports/report-colors.json | |
| - name: Guard Colors (non-blocking warnings with baseline) | |
| run: pnpm guard:colors -- --baseline .reports/report-colors.json || true | |
| - name: Lint Colors in Code (non-blocking) | |
| run: pnpm lint:colors:code || true | |
| - name: Test | |
| run: pnpm test |