|
46573
|
26944
|
116
|
5
|
239547f23683d1c3e2f84c2924124f983680be4f
|
0
|
validate
|
1
|
name: Validate complete window backup helpers and name: Validate complete window backup helpers and sandbox prerequisites
"on":
push:
branches: [codex/runner-maintenance-diagnostic-20261101]
paths: [.gitea/workflows/gitea-final-window-preflight.yml]
workflow_dispatch:
jobs:
validate:
name: validate
runs-on: ubuntu-latest
if: github.repository == 'luoanwu/enterprise-platform'
steps:
- name: Validate fixed reviewed inputs in private resource limited units
run: |
set -eu
python3 <<'PY'
import os,re,subprocess,json
maintenanceLoaderSha=os.environ.get('GITHUB_SHA','')
if not re.fullmatch('[0-9a-f]{40}',maintenanceLoaderSha):raise RuntimeError('FIXED_SHA_REQUIRED')
command=['git','-c','safe.directory=/home/git/repositories/luoanwu/enterprise-platform.git','-c','core.hooksPath=/dev/null','-C','/home/git/repositories/luoanwu/enterprise-platform.git','show',maintenanceLoaderSha+':ops/gitea-r1/window-preflight.py']
result=subprocess.run(command,capture_output=True,timeout=30)
if result.returncode:raise RuntimeError('FIXED_SCRIPT_UNAVAILABLE')
try:exec(compile(result.stdout,'window-preflight.py','exec'))
except Exception as error:
message=str(error)
safe=message if isinstance(error,RuntimeError) and re.fullmatch(r'[A-Z_]+(?::[A-Za-z0-9_./,:]+)?',message) else type(error).__name__
print('GITEA_FINAL_WINDOW_PREFLIGHT_JSON '+json.dumps({'kind':'GiteaFinalWindowPreflight','ci':{'sourceSha':maintenanceLoaderSha,'runId':os.environ.get('GITHUB_RUN_ID')},'status':'FAILED_PREPARATION','error':safe,'releaseEligible':False,'liveServicesChanged':False,'liveDatabaseChanged':False}),flush=True)
raise SystemExit(1)
PY
shell: bash
timeout-minutes: "95"
permissions:
contents: read
...
|
validate
|
null
|
["ubuntu-latest"]
|
37850
|
1
|
1793590356
|
1793590398
|
1793589895
|
1793590399
|
|
0
|
|
0
|
Edit
Delete
|
|
46574
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Static checks (locked engineering dependency)
|
1
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
public-static:
name: Static checks (locked engineering dependency)
runs-on: ubuntu-latest
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
node-version: "22"
- name: Private registry auth (temporary userconfig)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Test image release credential preflight (synthetic credentials only)
run: node --test .github/scripts/test/*.test.mjs
- name: Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)
run: pnpm --dir contracts install --frozen-lockfile
- name: Install dictionary service dependencies (independent frozen lockfile)
run: pnpm --dir runtime/services/master-data-registry install --frozen-lockfile
- name: Governance checks (exact engineering package; public contracts dependencies)
run: |
pnpm check:module-imports
pnpm check:canonical-ids
pnpm check:code-sets
pnpm check:omni-platform
pnpm check:fact-pii
pnpm check:catalog
pnpm check:migration-decs
pnpm check:caddy
pnpm test
pnpm contracts:check:local
- name: Pack publishable packages (contracts + governance; no publish)
run: |
rm -rf dist-artifacts
pnpm --dir contracts build
pnpm --dir governance pack --pack-destination ../dist-artifacts
pnpm --dir contracts pack --pack-destination ../dist-artifacts
ls -la dist-artifacts
- if: always()
name: Upload package tarballs
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: error
name: platform-packages-${{ env.CANDIDATE_TAG }}
path: dist-artifacts/*.tgz
retention-days: "30"
- if: always()
name: Upload public static evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: warn
name: platform-public-static-${{ env.CANDIDATE_TAG }}
path: reports/*.latest.json
retention-days: "30"
timeout-minutes: "15"
permissions:
contents: read
...
|
public-static
|
null
|
["ubuntu-latest"]
|
37851
|
2
|
1793590399
|
1793590404
|
1793590249
|
1793590405
|
|
0
|
|
0
|
Edit
Delete
|
|
46575
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Static governance (repo root, private packages)
|
1
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
static:
name: Static governance (repo root, private packages)
runs-on: ubuntu-latest
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
cache: pnpm
cache-dependency-path: runtime/pnpm-lock.yaml
node-version: "22"
- name: Private registry auth (temporary userconfig)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Install runtime workspace (frozen lockfile)
run: pnpm --dir runtime install --frozen-lockfile
- name: Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)
run: pnpm --dir contracts install --frozen-lockfile
- name: Install dictionary service dependencies (independent frozen lockfile)
run: pnpm --dir runtime/services/master-data-registry install --frozen-lockfile
- name: Generate Prisma clients
run: pnpm --dir runtime prisma:generate
- name: Build runtime modules (fixture suites evaluate migrated rules from dist)
run: pnpm runtime:build:modules
- name: Repo-root governance gate
run: pnpm check
- name: Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)
run: |
git status --porcelain | grep -vE '\.latest\.json$' && { echo "::error::静态门禁修改了报告以外的跟踪文件"; exit 1; } || echo "clean apart from latest reports"
- if: always()
name: Upload static evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: warn
name: platform-static-${{ env.CANDIDATE_TAG }}
path: |
reports/*.latest.json
runtime/reports/*.latest.json
!runtime/reports/runtime-acceptance.latest.json
!runtime/reports/ui-acceptance.latest.json
retention-days: "30"
timeout-minutes: "30"
permissions:
contents: read
...
|
static
|
null
|
["ubuntu-latest"]
|
37852
|
2
|
1793590405
|
1793590407
|
1793590249
|
1793590407
|
|
0
|
|
0
|
Edit
Delete
|
|
46576
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Unit tests without DB (modules / packages / govern Unit tests without DB (modules / packages / governance)...
|
0
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
unit:
name: Unit tests without DB (modules / packages / governance)
runs-on: ubuntu-latest
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
steps:
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
cache: pnpm
cache-dependency-path: runtime/pnpm-lock.yaml
node-version: "22"
- name: Private registry auth (temporary userconfig)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Install runtime workspace (frozen lockfile)
run: pnpm --dir runtime install --frozen-lockfile
- name: Generate clients for authority module unit imports (no database)
run: pnpm --dir runtime prisma:generate
- name: Module / package unit tests
run: pnpm --dir runtime exec turbo run test --filter='./modules/*' --filter='./packages/*' --filter='./clients/*' --force
- name: Governance package tests
run: pnpm governance:test
timeout-minutes: "20"
permissions:
contents: read
...
|
unit
|
["static"]
|
["ubuntu-latest"]
|
0
|
5
|
0
|
0
|
1793590249
|
1793590408
|
|
1
|
|
0
|
Edit
Delete
|
|
46577
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Port conformance (kernel / modules / clients)
|
0
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
port-conformance:
name: Port conformance (kernel / modules / clients)
runs-on: ubuntu-latest
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
cache: pnpm
cache-dependency-path: runtime/pnpm-lock.yaml
node-version: "20"
- name: Private registry auth (temporary userconfig)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Install runtime workspace (frozen lockfile)
run: pnpm --dir runtime install --frozen-lockfile
- name: Run port conformance with complete suite coverage
run: pnpm check:port-conformance
- if: always()
name: Upload port conformance evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: error
name: platform-port-conformance-${{ env.CANDIDATE_TAG }}
path: reports/port-conformance.latest.json
retention-days: "30"
timeout-minutes: "20"
permissions:
contents: read
...
|
port-conformance
|
["static"]
|
["ubuntu-latest"]
|
0
|
5
|
0
|
0
|
1793590249
|
1793590408
|
|
1
|
|
0
|
Edit
Delete
|
|
46578
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Runtime and UI acceptance (real PostgreSQL + Redis Runtime and UI acceptance (real PostgreSQL + Redis)...
|
0
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
runtime:
name: Runtime and UI acceptance (real PostgreSQL + Redis)
runs-on: ubuntu-latest
env:
# 库名前缀由 runtime/package.json name 派生（G15 基座守卫：enterprise_platform*）
DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/enterprise_platform_ci?schema=public
REDIS_URL: redis://127.0.0.1:6379
KAFKA_BROKERS: 127.0.0.1:59092
MAINLINE_CHAOS_CONTAINER: enterprise-platform-ms23-ci-redpanda-1
# Compose parses all services even for --no-deps redpanda and down.
# These unused service values deliberately cannot start a runtime.
PLATFORM_DEPLOYMENT_ENV: test
PLATFORM_RUNTIME_IMAGE: enterprise-platform/runtime:ci-not-started
PLATFORM_RUNTIME_DATABASE_RUNTIME_URL: postgresql://unused@127.0.0.1:1/unused
PLATFORM_RUNTIME_DATABASE_SYSTEM_URL: postgresql://unused@127.0.0.1:1/unused
PLATFORM_RUNTIME_REDIS_URL: redis://127.0.0.1:1/15
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
cache: pnpm
cache-dependency-path: runtime/pnpm-lock.yaml
node-version: "22"
- name: Private registry auth (temporary userconfig)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Install runtime workspace (frozen lockfile)
run: pnpm --dir runtime install --frozen-lockfile
- name: Install Playwright browser
run: pnpm --dir runtime --filter web exec playwright install --with-deps chromium
- name: Workbench browser regressions (intercepted read APIs)
run: pnpm check:workbench-ui
- name: Generate Prisma clients
run: pnpm --dir runtime prisma:generate
- name: Build persistence modules and provision every module acceptance database
run: |
pnpm runtime:build:modules
node governance/prepare-module-databases.mjs
- name: Prepare mainline fixtures and verify identity ordinary-role databases
run: |
pnpm mainline:prepare
pnpm identity:prepare
- name: Policy activation concurrency and lease fencing (isolated PostgreSQL with RLS)
run: pnpm check:policy-governance
- name: Build isolated MinIO from pinned upstream source
run: docker build -t enterprise-platform/test-minio:a6c538c5 stack/test-minio
- name: Real file and notification execution slices (S3, ClamAV, durable receiver receipts)
run: pnpm check:execution-slices
env:
EXECUTION_CLAMAV_PORT: "3310"
- name: Registry admission and central audit recovery
run: pnpm check:registry-admission
- name: Start isolated Redpanda and provision registered topics
run: |
docker compose -p enterprise-platform-ms23-ci -f stack/compose.yaml -f stack/overlays/test.yaml up -d --wait --no-deps redpanda
bash stack/provision/redpanda-topics.sh --apply
- name: Real DB and Redis acceptance (deploy → RLS roles → differential → tests incl. 7 profile boots)
run: pnpm runtime:check:runtime
- name: Configuration snapshots, tenant isolation and remote SDK acceptance
run: pnpm acceptance:configuration
- name: Persistent mainline, audit tamper, revocation SLA and real broker failure
run: pnpm mainline:check
- name: Identity signing against isolated OpenBao Transit
run: pnpm identity:check:transit
- name: UI acceptance (NestJS / Fastify x WS / SSE)
run: pnpm runtime:check:ui
env:
UI_MATRIX: "1"
- name: Identity module browser acceptance (login / MFA / consent / sessions)
run: pnpm identity:check:module-ui
- name: MCP controlled writes (isolated IdP, Owner receipt, retry and revocation)
run: pnpm check:mcp-writes
- if: always()
name: Upload workbench browser diagnostics
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: warn
name: platform-workbench-browser-${{ env.CANDIDATE_TAG }}
path: /tmp/platform-workbench-ui-*/
retention-days: "7"
- if: always()
name: Upload runtime and UI evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: warn
name: platform-runtime-${{ env.CANDIDATE_TAG }}
path: |
runtime/reports/runtime-acceptance.latest.json
runtime/reports/ui-acceptance.latest.json
reports/workbench-ui.latest.json
reports/identity-ui.latest.json
reports/mcp-writes.latest.json
reports/mainline-acceptance.latest.json
reports/configuration-runtime.latest.json
reports/revocation-sla.latest.json
reports/policy-governance.latest.json
reports/execution-slices.latest.json
reports/registry-admission.latest.json
reports/identity-transit.latest.json
reports/scope-http.latest.json
reports/scope-fact-sla.latest.json
reports/machine-revocation-sla.latest.json
reports/credential-m1-sla.latest.json
retention-days: "30"
- if: always()
name: Stop isolated acceptance broker
run: docker compose -p enterprise-platform-ms23-ci -f stack/compose.yaml -f stack/overlays/test.yaml down
timeout-minutes: "50"
services:
clamav:
image: clamav/clamav-debian@sha256:be3cb41d9833ce9ffb98f3d3e1483c35c0d87060c2bda3624d75fd28bbf0b3bd
ports:
- 3310:3310
options: --health-cmd "clamdcheck.sh" --health-start-period 120s --health-interval 10s --health-timeout 5s --health-retries 24
postgres:
image: postgres:16
env:
POSTGRES_DB: enterprise_platform_ci
POSTGRES_PASSWORD: postgres
POSTGRES_USER: postgres
ports:
- 5432:5432
options: --health-cmd "pg_isready -U postgres -d enterprise_platform_ci" --health-interval 5s --health-timeout 5s --health-retries 20
redis:
image: redis:7
ports:
- 6379:6379
options: --health-cmd "redis-cli ping" --health-interval 5s --health-timeout 5s --health-retries 20
permissions:
contents: read
...
|
runtime
|
["static"]
|
["ubuntu-latest"]
|
0
|
5
|
0
|
0
|
1793590249
|
1793590408
|
|
1
|
|
0
|
Edit
Delete
|
|
46579
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
M1 identity transitional workspace (IdP static → E M1 identity transitional workspace (IdP static → E2 → governance)...
|
0
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
identity:
name: M1 identity transitional workspace (IdP static → E2 → governance)
runs-on: ubuntu-latest
env:
# 库名前缀由 identity/package.json name 派生（enterprise_idp*）；Redis 必须 db 0（老框架 C22）
DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/enterprise_idp_ci?schema=public
REDIS_URL: redis://127.0.0.1:6379/0
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
cache: pnpm
cache-dependency-path: identity/pnpm-lock.yaml
node-version: "20"
- name: Private registry auth (temporary userconfig; shared runtime identity fixture dependencies)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Install identity workspace (frozen lockfile)
run: pnpm --dir identity install --frozen-lockfile
- name: Build shared identity fixture dependencies from this checkout
run: |
pnpm --dir runtime install --frozen-lockfile --filter @juhai/module-identity... --filter @juhai/client-identity --filter api-nestjs
pnpm --dir runtime --filter @juhai/module-identity prisma:generate
pnpm --dir runtime exec turbo run build --filter=@juhai/module-identity... --filter=@juhai/client-identity...
pnpm --dir identity --filter api-nestjs exec node -e "require('node:assert/strict').strictEqual(require('@juhai/module-kit'), require('../../../runtime/modules/kit'))"
- name: Provision ordinary owner for the isolated identity test database
run: |
psql "${DATABASE_URL%%\?*}" -v ON_ERROR_STOP=1 <<'SQL'
CREATE ROLE enterprise_idp_ci_rt LOGIN PASSWORD 'ci-test-only' NOSUPERUSER NOCREATEDB NOCREATEROLE NOBYPASSRLS;
ALTER DATABASE enterprise_idp_ci OWNER TO enterprise_idp_ci_rt;
ALTER SCHEMA public OWNER TO enterprise_idp_ci_rt;
SQL
echo 'DATABASE_URL=postgresql://enterprise_idp_ci_rt:ci-test-only@127.0.0.1:5432/enterprise_idp_ci?schema=public' >> "$GITHUB_ENV"
- name: Generate Prisma clients
run: pnpm --dir identity prisma:generate
- name: IdP static sub-checks (independent of runtime / UI reports)
run: pnpm identity:check:static
- name: IdP real DB acceptance (single NestJS host, serialized)
run: pnpm identity:check:runtime
- name: Install Playwright browser
run: pnpm --dir identity --filter web exec playwright install --with-deps chromium
- name: IdP UI acceptance (single NestJS host)
run: pnpm identity:check:ui
- name: IdP final governance aggregation (same checkout, fresh runtime / UI reports)
run: pnpm identity:check:governance
- if: always()
name: Upload identity evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: warn
name: platform-identity-${{ env.CANDIDATE_TAG }}
path: identity/reports/*.latest.json
retention-days: "30"
timeout-minutes: "50"
services:
postgres:
image: postgres:16
env:
POSTGRES_DB: enterprise_idp_ci
POSTGRES_PASSWORD: postgres
POSTGRES_USER: postgres
ports:
- 5432:5432
options: --health-cmd "pg_isready -U postgres -d enterprise_idp_ci" --health-interval 5s --health-timeout 5s --health-retries 20
redis:
image: redis:7
ports:
- 6379:6379
options: --health-cmd "redis-cli ping" --health-interval 5s --health-timeout 5s --health-retries 20
permissions:
contents: read
...
|
identity
|
["static"]
|
["ubuntu-latest"]
|
0
|
5
|
0
|
0
|
1793590249
|
1793590408
|
|
1
|
|
0
|
Edit
Delete
|
|
46580
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Runtime image build + SBOM (+ cosign when a key is Runtime image build + SBOM (+ cosign when a key is provided)...
|
0
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
image:
name: Runtime image build + SBOM (+ cosign when a key is provided)
runs-on: ubuntu-latest
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
node-version: "20"
- name: Private registry auth (temporary userconfig)
uses: ./.github/actions/private-npm
with:
token: ${{ secrets.PLATFORM_NPM_TOKEN }}
- name: Install locked governance tools
run: pnpm --dir governance install --frozen-lockfile --ignore-scripts
- name: Resolve npmrc for BuildKit secret (never printed)
run: |
cfg="${RUNNER_TEMP}/platform-npmrc-resolved"
umask 077
printf '@juhai:registry=https://gitea.g-hi.com/api/packages/luoanwu/npm/\n//gitea.g-hi.com/api/packages/luoanwu/npm/:_authToken=%s\n' "${GITEA_NPM_TOKEN}" > "${cfg}"
echo "PLATFORM_NPMRC=${cfg}" >> "${GITHUB_ENV}"
- name: Build runtime image from git archive HEAD:runtime (reports/image-digest.json)
run: node governance/build-image.mjs --context head --npmrc "${PLATFORM_NPMRC}"
- name: Install syft (pinned) and generate SPDX SBOM
run: |
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b "${RUNNER_TEMP}/bin" v1.20.0
PATH="${RUNNER_TEMP}/bin:${PATH}" node governance/sbom.mjs
- name: Install cosign (pinned)
uses: https://github.com/sigstore/cosign-installer@v3
with:
cosign-release: v2.4.1
- name: Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)
run: |
if [ -n "${COSIGN_PRIVATE_KEY}" ]; then
umask 077; printf '%s' "${COSIGN_PRIVATE_KEY}" > "${RUNNER_TEMP}/cosign.key"
COSIGN_KEY="${RUNNER_TEMP}/cosign.key" node governance/sign-image.mjs
else
node governance/sign-image.mjs
fi
env:
COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
- if: always()
name: Upload image evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: warn
name: platform-image-${{ env.CANDIDATE_TAG }}
path: |
reports/image-digest.json
reports/sbom.spdx.json
reports/sbom.latest.json
reports/signature.json
retention-days: "30"
timeout-minutes: "40"
permissions:
contents: read
...
|
image
|
["static"]
|
["ubuntu-latest"]
|
0
|
5
|
0
|
0
|
1793590249
|
1793590408
|
|
1
|
|
0
|
Edit
Delete
|
|
46581
|
26945
|
116
|
5
|
6d0e77b58cb7d0a501d6076deac04bc392b6e003
|
0
|
Release candidate verification + manifest
|
0
|
name: Platform
"on":
pull_request:
name: Platform
"on":
pull_request:
push:
branches: [main]
workflow_dispatch:
env:
GITEA_ACTIONS: "true"
PNPM_VERSION: 9.15.9
jobs:
candidate:
name: Release candidate verification + manifest
runs-on: ubuntu-latest
if: always()
steps:
- name: Candidate tag (real run attempt, computed per job)
run: |
if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then
echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)"
exit 1
fi
echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV"
- uses: https://github.com/actions/checkout@v4
with:
fetch-depth: "0"
- name: Enable pnpm
run: |
corepack enable
corepack prepare pnpm@${PNPM_VERSION} --activate
- uses: https://github.com/actions/setup-node@v4
with:
node-version: "20"
- name: Download static evidence
uses: https://github.com/actions/download-artifact@v3
with:
name: platform-static-${{ env.CANDIDATE_TAG }}
path: candidate/static
continue-on-error: true
- name: Download runtime evidence
uses: https://github.com/actions/download-artifact@v3
with:
name: platform-runtime-${{ env.CANDIDATE_TAG }}
path: candidate/runtime/runtime/reports
continue-on-error: true
- name: Download identity evidence
uses: https://github.com/actions/download-artifact@v3
with:
name: platform-identity-${{ env.CANDIDATE_TAG }}
path: candidate/identity/identity/reports
continue-on-error: true
- name: Download port-conformance evidence
uses: https://github.com/actions/download-artifact@v3
with:
name: platform-port-conformance-${{ env.CANDIDATE_TAG }}
path: candidate/port-conformance/reports
continue-on-error: true
- id: verify
name: Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)
run: node governance/verify-candidate.mjs --candidate candidate --sha "${{ github.sha }}" --run-id "${{ github.run_id }}" --attempt "${GITHUB_RUN_ATTEMPT}" --out reports/release-candidate.latest.json
continue-on-error: true
- name: Download image and full SBOM evidence for the same candidate
uses: https://github.com/actions/download-artifact@v3
with:
name: platform-image-${{ env.CANDIDATE_TAG }}
path: reports
- name: Release Manifest (known facts, status partial until all deliverables exist)
run: node governance/release-manifest.mjs
- if: always()
name: Upload candidate evidence
uses: https://github.com/actions/upload-artifact@v3
with:
if-no-files-found: error
name: platform-candidate-${{ env.CANDIDATE_TAG }}
path: |
reports/release-candidate.latest.json
reports/release-manifest.latest.json
retention-days: "30"
- if: always()
name: Propagate upstream results and candidate eligibility
run: |
echo "public-static=${{ needs.public-static.result }} static=${{ needs.static.result }} runtime=${{ needs.runtime.result }} identity=${{ needs.identity.result }} verify=${{ steps.verify.outcome }}"
test "${{ needs.public-static.result }}" = "success"
test "${{ needs.static.result }}" = "success"
test "${{ needs.unit.result }}" = "success"
test "${{ needs.port-conformance.result }}" = "success"
test "${{ needs.runtime.result }}" = "success"
test "${{ needs.identity.result }}" = "success"
test "${{ needs.image.result }}" = "success"
test "${{ steps.verify.outcome }}" = "success"
timeout-minutes: "10"
permissions:
contents: read
...
|
candidate
|
["public-static","static","uni ["public-static","static","unit","port-conformance","runtime","identity","image"]...
|
["ubuntu-latest"]
|
0
|
7
|
0
|
0
|
1793590249
|
1793590249
|
|
0
|
|
0
|
Edit
Delete
|
|
46582
|
26946
|
160
|
5
|
fb46b5c025f45127dee4ccdc76a7f7cffb19e875
|
0
|
Frontend Type Check
|
1
|
name: CI
"on":
push:
branches: name: CI
"on":
push:
branches: [main]
pull_request:
branches: [main]
env:
NODE_OPTIONS: --max-old-space-size=8192
NODE_VERSION: "20"
jobs:
frontend-typecheck:
name: Frontend Type Check
runs-on: ubuntu-latest
steps:
- uses: https://gitea.com/actions/checkout@v4
- uses: https://gitea.com/pnpm/action-setup@v4
- uses: https://gitea.com/actions/setup-node@v4
with:
cache: pnpm
node-version: ${{ env.NODE_VERSION }}
- run: pnpm install --frozen-lockfile --ignore-scripts
- name: Build shared package
run: pnpm -C shared run build
- name: React 前端类型检查（tsc --noEmit）
run: pnpm --filter ./frontend-react run type-check
...
|
frontend-typecheck
|
null
|
["ubuntu-latest"]
|
37853
|
1
|
1793590408
|
1793590551
|
1793590315
|
1793590551
|
|
0
|
|
0
|
Edit
Delete
|
|
46583
|
26946
|
160
|
5
|
fb46b5c025f45127dee4ccdc76a7f7cffb19e875
|
0
|
Lint & Type Check
|
1
|
name: CI
"on":
push:
branches: name: CI
"on":
push:
branches: [main]
pull_request:
branches: [main]
env:
NODE_OPTIONS: --max-old-space-size=8192
NODE_VERSION: "20"
jobs:
lint-and-typecheck:
name: Lint & Type Check
runs-on: ubuntu-latest
steps:
- uses: https://gitea.com/actions/checkout@v4
- uses: https://gitea.com/pnpm/action-setup@v4
- uses: https://gitea.com/actions/setup-node@v4
with:
cache: pnpm
node-version: ${{ env.NODE_VERSION }}
- run: pnpm install --frozen-lockfile --ignore-scripts
- name: Generate Prisma Client
run: pnpm -C backend exec prisma generate
- name: Build shared package
run: pnpm -C shared run build
- name: Backend type check
run: pnpm -C backend run type-check
- name: Lint
run: pnpm -C backend run lint
...
|
lint-and-typecheck
|
null
|
["ubuntu-latest"]
|
37854
|
6
|
1793590551
|
0
|
1793590315
|
1793590551
|
|
0
|
|
0
|
Edit
Delete
|
|
46584
|
26946
|
160
|
5
|
fb46b5c025f45127dee4ccdc76a7f7cffb19e875
|
0
|
Unit Tests (HARD GATE)
|
0
|
name: CI
"on":
push:
branches: name: CI
"on":
push:
branches: [main]
pull_request:
branches: [main]
env:
NODE_OPTIONS: --max-old-space-size=8192
NODE_VERSION: "20"
jobs:
unit-tests:
name: Unit Tests (HARD GATE)
runs-on: ubuntu-latest
steps:
- uses: https://gitea.com/actions/checkout@v4
- uses: https://gitea.com/pnpm/action-setup@v4
- uses: https://gitea.com/actions/setup-node@v4
with:
cache: pnpm
node-version: ${{ env.NODE_VERSION }}
- run: pnpm install --frozen-lockfile --ignore-scripts
- name: Generate Prisma Client
run: pnpm -C backend exec prisma generate
- name: Build shared package
run: pnpm -C shared run build
- name: Run unit tests
run: pnpm -C backend run test:unit
...
|
unit-tests
|
["frontend-typecheck","lint-and-typech ["frontend-typecheck","lint-and-typecheck"]...
|
["ubuntu-latest"]
|
0
|
7
|
0
|
0
|
1793590315
|
1793590315
|
|
0
|
|
0
|
Edit
Delete
|
|
46585
|
26946
|
160
|
5
|
fb46b5c025f45127dee4ccdc76a7f7cffb19e875
|
0
|
State Machine Model-Based (HARD GATE)
|
0
|
name: CI
"on":
push:
branches: name: CI
"on":
push:
branches: [main]
pull_request:
branches: [main]
env:
NODE_OPTIONS: --max-old-space-size=8192
NODE_VERSION: "20"
jobs:
state-machine-model:
name: State Machine Model-Based (HARD GATE)
runs-on: ubuntu-latest
steps:
- uses: https://gitea.com/actions/checkout@v4
- uses: https://gitea.com/pnpm/action-setup@v4
- uses: https://gitea.com/actions/setup-node@v4
with:
cache: pnpm
node-version: ${{ env.NODE_VERSION }}
- run: pnpm install --frozen-lockfile --ignore-scripts
- name: Generate Prisma Client
run: pnpm -C backend exec prisma generate
- name: Build shared package
run: pnpm -C shared run build
- name: Run state machine model-based tests
run: pnpm -C backend run test:state-machines:model
...
|
state-machine-model
|
["lint-and-typecheck"]
|
["ubuntu-latest"]
|
0
|
7
|
0
|
0
|
1793590315
|
1793590315
|
|
0
|
|
0
|
Edit
Delete
|
|
46586
|
26946
|
160
|
5
|
fb46b5c025f45127dee4ccdc76a7f7cffb19e875
|
0
|
Governance Audit (HARD GATE)
|
0
|
name: CI
"on":
push:
branches: name: CI
"on":
push:
branches: [main]
pull_request:
branches: [main]
env:
NODE_OPTIONS: --max-old-space-size=8192
NODE_VERSION: "20"
jobs:
governance-audit:
name: Governance Audit (HARD GATE)
runs-on: ubuntu-latest
steps:
- uses: https://gitea.com/actions/checkout@v4
- uses: https://gitea.com/pnpm/action-setup@v4
- uses: https://gitea.com/actions/setup-node@v4
with:
cache: pnpm
node-version: ${{ env.NODE_VERSION }}
- run: pnpm install --frozen-lockfile --ignore-scripts
- name: Generate Prisma Client
run: pnpm -C backend exec prisma generate
- name: Build shared package
run: pnpm -C shared run build
- name: Audit 多租户隔离（HARD GATE / 红线1，不豁免）
run: pnpm -C backend run audit:tenant
- name: Audit Prisma Schema 镜像一致性（HARD GATE）
run: pnpm run audit:prisma-schema-source
- name: Audit Prisma↔Zod 契约
run: pnpm -C backend exec tsx scripts/audit-prisma-zod-contract.ts
continue-on-error: true
- name: Audit FormRules↔Zod
run: pnpm run audit:formrules-zod
continue-on-error: true
- name: Audit Response Columns
run: pnpm run audit:response-columns
continue-on-error: true
- name: Audit Field Payload
run: pnpm run audit:field-payload
continue-on-error: true
- name: Audit Enum Consistency
run: pnpm run audit:enum-consistency
continue-on-error: true
- name: Audit useListPage ↔ Router
run: pnpm run audit:list-page-routes
continue-on-error: true
- name: Audit 前端权限键 ↔ 后端真源（HARD GATE / 防按钮 fail-closed 隐藏）
run: pnpm run audit:permission-keys
- name: Audit Page AI Assist Coverage
run: pnpm run audit:ai-assist-coverage
continue-on-error: true
- name: Audit Page AI Assist Skill Binding
run: pnpm run audit:ai-assist-skill-binding
continue-on-error: true
- name: Audit Page AI Assist Context Providers
run: pnpm run audit:context-provider-redact
continue-on-error: true
- name: Audit Coach Script Library
run: pnpm run audit:coach-script-library
continue-on-error: true
- name: Audit AI Decision Quality
run: pnpm run audit:ai-decision-quality
continue-on-error: true
- name: Audit Event Publishing
run: pnpm -C backend run audit:events
continue-on-error: true
- name: Audit State Machines
run: pnpm -C backend run audit:state-machines
continue-on-error: true
- name: Audit Money Decimal Purity (CFO-P0 防御)
run: node --import tsx scripts/audit-money-decimal-purity.ts
continue-on-error: true
- name: Audit Nested Transaction (CFO-P0-1 + RO-P0-3 防御)
run: node --import tsx scripts/audit-nested-transaction.ts
continue-on-error: true
- name: Audit Test Assertion Density (QA-P0 防御)
run: node --import tsx scripts/audit-test-assertion-density.ts
continue-on-error: true
- name: Audit API Test Coverage (probe-only / read-covered / action-covered / complete-crud)
run: pnpm -C backend run audit:api-test-coverage
continue-on-error: true
- name: Audit Consumer Test Authenticity (断言剧场防御 / 假绿防御)
run: node --import tsx scripts/audit-consumer-test-authenticity.ts
continue-on-error: true
- name: Audit Consumer Idempotency (去重路径假覆盖防御)
run: node --import tsx scripts/audit-consumer-idempotency.ts
continue-on-error: true
- name: Audit State Machine Unwired Guards (死守卫 / 假保护防御)
run: node --import tsx scripts/audit-state-machine-unwired-guards.ts
continue-on-error: true
- name: Audit Migration Topology (影子迁移防御)
run: node --import tsx scripts/audit-migration-topology.ts
continue-on-error: true
- name: Audit API Test Fixed IDs (并行化降债棘轮 / write-pk)
run: pnpm -C backend run audit:api-test-fixed-ids
continue-on-error: true
- name: 30d Evidence - Launch Smoke Scope
run: pnpm run audit:launch-smoke-scope
continue-on-error: true
- name: 30d Evidence - Rollout Scope Freeze
run: pnpm run audit:rollout-scope-freeze
continue-on-error: true
- name: 30d Evidence - Production Foundation
run: pnpm run audit:production-foundation-evidence
continue-on-error: true
- name: 30d Evidence - RLS Staging Canary Plan
run: pnpm run audit:rls-staging-canary
continue-on-error: true
- name: 30d Evidence - Customer Signoff Status
run: node --import tsx scripts/harness/customer-signoff-status.ts
continue-on-error: true
- name: 30d Evidence - Production Gate Projection
run: node --import tsx scripts/production-release-gate.ts --no-fail
continue-on-error: true
- name: 30d Evidence - Gate Integrity
run: pnpm run audit:production-release-gate-integrity
continue-on-error: true
- name: Harness Report 聚合
run: pnpm harness report --save
continue-on-error: true
- name: 30d Evidence - Harness Meta Tests
run: pnpm run harness:test
- name: 30d Evidence - War Plan Markdown
run: node --import tsx scripts/governance-30d-war-plan.ts
- if: always()
name: Upload audit reports
uses: https://gitea.com/actions/upload-artifact@v3
with:
name: governance-audit-reports
path: |
reports/prisma-zod-contract-audit.latest.json
reports/formrules-zod-audit.latest.json
reports/response-columns-audit.latest.json
reports/field-payload-audit.latest.json
reports/enum-consistency-audit.latest.json
reports/list-page-routes-audit.latest.json
reports/ai-assist-coverage.latest.json
reports/ai-assist-skill-binding.latest.json
reports/ai-assist-context-providers.latest.json
reports/coach-script-library.latest.json
reports/ai-decision-quality.latest.json
reports/event-publishing-audit.latest.json
reports/state-machine-integration-audit.latest.json
reports/harness-dashboard.latest.json
reports/module-grades.latest.json
reports/money-decimal-purity-audit.latest.json
reports/nested-transaction-audit.latest.json
reports/test-assertion-density-audit.latest.json
reports/api-test-coverage.latest.json
reports/api-test-fixed-ids-audit.latest.json
reports/consumer-test-authenticity-audit.latest.json
reports/consumer-idempotency-audit.latest.json
reports/state-machine-unwired-guards-audit.latest.json
reports/migration-topology-audit.latest.json
reports/customer-signoff-status.latest.json
reports/p0-customer-input-status.latest.json
reports/rollout-scope-freeze.latest.json
reports/rollout-scope-freeze.latest.md
reports/production-foundation-evidence.latest.json
reports/production-foundation-evidence.latest.md
reports/launch-smoke-scope.latest.json
reports/launch-smoke-scope.latest.md
reports/rls-staging-canary.latest.json
reports/rls-staging-canary.latest.md
reports/production-release-gate.latest.json
reports/production-release-gate.latest.md
reports/production-release-actions.latest.json
reports/production-release-actions.latest.md
reports/production-release-gate-integrity.latest.json
reports/production-release-gate-integrity.latest.md
reports/governance-30d-war-plan.latest.md
retention-days: "14"
- if: always()
name: 输出 governance summary
run: node --import tsx scripts/ci-governance-summary.ts --title "Governance Audit Summary" --include-rules
- name: 治理硬门禁 — 豁免感知 verdict（HARD）
run: node --import tsx scripts/harness/governance-gate.ts
- name: 文档对账 — CLAUDE.md GOVERNANCE-BASELINE ↔ reports 实测（HARD）
run: node --import tsx scripts/harness/baseline-reconcile.ts
- name: Harness Gate 综合 PR 验收（HARD）
run: pnpm harness gate
...
|
governance-audit
|
["lint-and-typecheck"]
|
["ubuntu-latest"]
|
0
|
7
|
0
|
0
|
1793590315
|
1793590315
|
|
0
|
|
0
|
Edit
Delete
|
|
46587
|
26946
|
160
|
5
|
fb46b5c025f45127dee4ccdc76a7f7cffb19e875
|
0
|
Gate Integrity (meta-gate · HARD)
|
0
|
name: CI
"on":
push:
branches: name: CI
"on":
push:
branches: [main]
pull_request:
branches: [main]
env:
NODE_OPTIONS: --max-old-space-size=8192
NODE_VERSION: "20"
jobs:
gate-integrity:
name: Gate Integrity (meta-gate · HARD)
runs-on: ubuntu-latest
steps:
- uses: https://gitea.com/actions/checkout@v4
- uses: https://gitea.com/pnpm/action-setup@v4
- uses: https://gitea.com/actions/setup-node@v4
with:
cache: pnpm
node-version: ${{ env.NODE_VERSION }}
- run: pnpm install --frozen-lockfile --ignore-scripts
- name: 校验治理硬门禁未被软化
run: node --import tsx scripts/harness/gate-integrity-check.ts
...
|
gate-integrity
|
null
|
["ubuntu-latest"]
|
0
|
5
|
0
|
0
|
1793590315
|
1793590315
|
|
0
|
|
0
|
Edit
Delete
|
|
39888
|
25661
|
136
|
5
|
f548e57e544e1ff5a4c46bf1e1b8685f8e4a348a
|
0
|
test (windows-latest)
|
0
|
name: Build and Test
"on":
pull_reques name: Build and Test
"on":
pull_request:
push:
branches:
- main
- releases/*
jobs:
test:
name: test (windows-latest)
runs-on: windows-latest
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Checkout basic
uses: ./
with:
path: basic
ref: test-data/v2/basic
- name: Verify basic
run: __test__/verify-basic.sh
shell: bash
- name: Modify work tree
run: __test__/modify-work-tree.sh
shell: bash
- name: Checkout clean
uses: ./
with:
path: basic
ref: test-data/v2/basic
- name: Verify clean
run: __test__/verify-clean.sh
shell: bash
- name: Checkout side by side 1
uses: ./
with:
path: side-by-side-1
ref: test-data/v2/side-by-side-1
- name: Checkout side by side 2
uses: ./
with:
path: side-by-side-2
ref: test-data/v2/side-by-side-2
- name: Verify side by side
run: __test__/verify-side-by-side.sh
shell: bash
- name: Fetch filter
uses: ./
with:
filter: blob:none
path: fetch-filter
- name: Verify fetch filter
run: __test__/verify-fetch-filter.sh
- name: Checkout with fetch-tags
uses: ./
with:
fetch-tags: "true"
path: fetch-tags-test
ref: test-data/v2/basic
- name: Verify fetch-tags
run: __test__/verify-fetch-tags.sh
shell: bash
- name: Sparse checkout
uses: ./
with:
path: sparse-checkout
sparse-checkout: |
__test__
.github
dist
- name: Verify sparse checkout
run: __test__/verify-sparse-checkout.sh
- name: Disabled sparse checkout
uses: ./
with:
path: sparse-checkout
- name: Verify disabled sparse checkout
run: set -x && ls -l sparse-checkout/src/git-command-manager.ts
shell: bash
- name: Sparse checkout (non-cone mode)
uses: ./
with:
path: sparse-checkout-non-cone-mode
sparse-checkout: |
/__test__/
/.github/
/dist/
sparse-checkout-cone-mode: "false"
- name: Verify sparse checkout (non-cone mode)
run: __test__/verify-sparse-checkout-non-cone-mode.sh
- name: Checkout LFS
uses: ./
with:
lfs: "true"
path: lfs
ref: test-data/v2/lfs
repository: actions/checkout
- name: Verify LFS
run: __test__/verify-lfs.sh
shell: bash
- name: Checkout submodules false
uses: ./
with:
path: submodules-false
ref: test-data/v2/submodule-ssh-url
- name: Verify submodules false
run: __test__/verify-submodules-false.sh
- name: Checkout submodules true
uses: ./
with:
path: submodules-true
ref: test-data/v2/submodule-ssh-url
submodules: "true"
- name: Verify submodules true
run: __test__/verify-submodules-true.sh
- name: Checkout submodules recursive
uses: ./
with:
path: submodules-recursive
ref: test-data/v2/submodule-ssh-url
submodules: recursive
- name: Verify submodules recursive
run: __test__/verify-submodules-recursive.sh
- name: Checkout for worktree test
uses: ./
with:
path: worktree-test
- name: Verify worktree credentials
run: __test__/verify-worktree.sh worktree-test worktree-branch
shell: bash
- if: runner.os == 'Linux'
name: Verify worktree credentials in container step
uses: docker://bitnami/git:latest
with:
args: bash __test__/verify-worktree.sh worktree-test container-worktree-branch
- if: runner.os != 'windows'
name: Remove basic
run: rm -rf basic
- if: runner.os == 'windows'
name: Remove basic (Windows)
run: rmdir /s /q basic
shell: cmd
- if: runner.os != 'windows'
name: Override git version
run: __test__/override-git-version.sh
- if: runner.os == 'windows'
name: Override git version (Windows)
run: __test__\\override-git-version.cmd
- name: Checkout basic using REST API
uses: ./
with:
path: basic
ref: test-data/v2/basic
- name: Verify basic
run: __test__/verify-basic.sh --archive
strategy:
matrix:
runs-on:
- windows-latest
...
|
test
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844698
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39899
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test npm (Node 22, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-depencies-caching:
name: Test npm (Node 22, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node
uses: ./
with:
cache: npm
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
node-npm-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39903
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test npm (Node 24, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-depencies-caching:
name: Test npm (Node 24, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node
uses: ./
with:
cache: npm
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
node-npm-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39907
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test npm (Node 26, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-depencies-caching:
name: Test npm (Node 26, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node
uses: ./
with:
cache: npm
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
node-npm-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39911
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test pnpm (Node 22, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-pnpm-depencies-caching:
name: Test pnpm (Node 22, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Install pnpm
uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413
with:
version: "10"
- name: Generate pnpm file
run: pnpm install
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: rm -rf ~/.pnpm-store
shell: bash
- name: Setup Node
uses: ./
with:
cache: pnpm
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: pnpm install
- name: Verify node and pnpm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
node-pnpm-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39915
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test pnpm (Node 24, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-pnpm-depencies-caching:
name: Test pnpm (Node 24, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Install pnpm
uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413
with:
version: "10"
- name: Generate pnpm file
run: pnpm install
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: rm -rf ~/.pnpm-store
shell: bash
- name: Setup Node
uses: ./
with:
cache: pnpm
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: pnpm install
- name: Verify node and pnpm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
node-pnpm-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39919
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test pnpm (Node 26, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-pnpm-depencies-caching:
name: Test pnpm (Node 26, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Install pnpm
uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413
with:
version: "10"
- name: Generate pnpm file
run: pnpm install
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: rm -rf ~/.pnpm-store
shell: bash
- name: Setup Node
uses: ./
with:
cache: pnpm
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: pnpm install
- name: Verify node and pnpm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
node-pnpm-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39923
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test yarn 1 (Node 22, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-yarn1-depencies-caching:
name: Test yarn 1 (Node 22, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Yarn version
run: yarn --version
- name: Generate yarn file
run: yarn install --ignore-engines
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: yarn cache clean
- name: Setup Node
uses: ./
with:
cache: yarn
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: yarn install --ignore-engines
- name: Verify node and yarn
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
node-yarn1-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950475
|
|
0
|
|
0
|
Edit
Delete
|
|
39927
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test yarn 1 (Node 24, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-yarn1-depencies-caching:
name: Test yarn 1 (Node 24, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Yarn version
run: yarn --version
- name: Generate yarn file
run: yarn install --ignore-engines
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: yarn cache clean
- name: Setup Node
uses: ./
with:
cache: yarn
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: yarn install --ignore-engines
- name: Verify node and yarn
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
node-yarn1-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39931
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test yarn 1 (Node 26, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-yarn1-depencies-caching:
name: Test yarn 1 (Node 26, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Yarn version
run: yarn --version
- name: Generate yarn file
run: yarn install --ignore-engines
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: yarn cache clean
- name: Setup Node
uses: ./
with:
cache: yarn
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: yarn install --ignore-engines
- name: Verify node and yarn
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
node-yarn1-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39935
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test yarn 3 (Node 22, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-yarn3-depencies-caching:
name: Test yarn 3 (Node 22, windows-latest)
runs-on: windows-latest
env:
YARN_ENABLE_IMMUTABLE_INSTALLS: false
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Update yarn
run: yarn set version 3.6.4
- name: Yarn version
run: yarn --version
- name: Generate simple .yarnrc.yml
run: |
echo "nodeLinker: node-modules" >> .yarnrc.yml
- name: Generate yarn file
run: yarn install
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: yarn cache clean --all
- name: Setup Node
uses: ./
with:
cache: yarn
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: yarn install
- name: Verify node and yarn
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
node-yarn3-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39939
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test yarn 3 (Node 24, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-yarn3-depencies-caching:
name: Test yarn 3 (Node 24, windows-latest)
runs-on: windows-latest
env:
YARN_ENABLE_IMMUTABLE_INSTALLS: false
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Update yarn
run: yarn set version 3.6.4
- name: Yarn version
run: yarn --version
- name: Generate simple .yarnrc.yml
run: |
echo "nodeLinker: node-modules" >> .yarnrc.yml
- name: Generate yarn file
run: yarn install
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: yarn cache clean --all
- name: Setup Node
uses: ./
with:
cache: yarn
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: yarn install
- name: Verify node and yarn
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
node-yarn3-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39943
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test yarn 3 (Node 26, windows-latest)
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-yarn3-depencies-caching:
name: Test yarn 3 (Node 26, windows-latest)
runs-on: windows-latest
env:
YARN_ENABLE_IMMUTABLE_INSTALLS: false
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Update yarn
run: yarn set version 3.6.4
- name: Yarn version
run: yarn --version
- name: Generate simple .yarnrc.yml
run: |
echo "nodeLinker: node-modules" >> .yarnrc.yml
- name: Generate yarn file
run: yarn install
- name: Remove dependencies
run: Remove-Item node_modules -Force -Recurse
shell: pwsh
- name: Clean global cache
run: yarn cache clean --all
- name: Setup Node
uses: ./
with:
cache: yarn
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: yarn install
- name: Verify node and yarn
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
node-yarn3-depencies-caching
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39959
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test auto cache with top-level packageManager (22, Test auto cache with top-level packageManager (22, windows-latest)...
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-packageManager-auto-cache:
name: Test auto cache with top-level packageManager (22, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Create package.json with packageManager field
run: |
echo '{ "name": "test-project", "version": "1.0.0", "packageManager": "npm@8.0.0" }' > package.json
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node with caching enabled
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
node-npm-packageManager-auto-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39963
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test auto cache with top-level packageManager (24, Test auto cache with top-level packageManager (24, windows-latest)...
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-packageManager-auto-cache:
name: Test auto cache with top-level packageManager (24, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Create package.json with packageManager field
run: |
echo '{ "name": "test-project", "version": "1.0.0", "packageManager": "npm@8.0.0" }' > package.json
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node with caching enabled
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
node-npm-packageManager-auto-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39967
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test auto cache with top-level packageManager (26, Test auto cache with top-level packageManager (26, windows-latest)...
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-packageManager-auto-cache:
name: Test auto cache with top-level packageManager (26, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Create package.json with packageManager field
run: |
echo '{ "name": "test-project", "version": "1.0.0", "packageManager": "npm@8.0.0" }' > package.json
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node with caching enabled
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
node-npm-packageManager-auto-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39971
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test auto cache with devEngines.packageManager (22 Test auto cache with devEngines.packageManager (22, windows-latest)...
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-devEngines-auto-cache:
name: Test auto cache with devEngines.packageManager (22, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Create package.json with devEngines field
run: |
echo '{
"name": "test-project",
"version": "1.0.0",
"devEngines": {
"packageManager": {
"name": "npm",
"onFail": "error"
}
}
}' > package.json
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node with caching enabled
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
node-npm-devEngines-auto-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950476
|
|
0
|
|
0
|
Edit
Delete
|
|
39975
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test auto cache with devEngines.packageManager (24 Test auto cache with devEngines.packageManager (24, windows-latest)...
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-devEngines-auto-cache:
name: Test auto cache with devEngines.packageManager (24, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Create package.json with devEngines field
run: |
echo '{
"name": "test-project",
"version": "1.0.0",
"devEngines": {
"packageManager": {
"name": "npm",
"onFail": "error"
}
}
}' > package.json
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node with caching enabled
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
node-npm-devEngines-auto-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
39979
|
25665
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
Test auto cache with devEngines.packageManager (26 Test auto cache with devEngines.packageManager (26, windows-latest)...
|
0
|
name: e2e-cache
"on":
pull_request:
name: e2e-cache
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
node-npm-devEngines-auto-cache:
name: Test auto cache with devEngines.packageManager (26, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Create package.json with devEngines field
run: |
echo '{
"name": "test-project",
"version": "1.0.0",
"devEngines": {
"packageManager": {
"name": "npm",
"onFail": "error"
}
}
}' > package.json
- name: Clean global cache
run: npm cache clean --force
- name: Setup Node with caching enabled
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Install dependencies
run: npm install
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
node-npm-devEngines-auto-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844715
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
39986
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
local-cache (22, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
local-cache:
name: local-cache (22, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22
os:
- windows-latest
...
|
local-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
39990
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
local-cache (24, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
local-cache:
name: local-cache (24, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24
os:
- windows-latest
...
|
local-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
39994
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
local-cache (26, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
local-cache:
name: local-cache (26, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26
os:
- windows-latest
...
|
local-cache
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
39997
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
lts-syntax (lts/*, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
lts-syntax:
name: lts-syntax (lts/*, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
check-latest: "true"
node-version: ${{ matrix.node-version }}
- if: runner.os != 'Windows' && runner.os != 'macOS'
name: Verify node and npm
run: |
. "$NVM_DIR/nvm.sh"
[[ $(nvm version-remote "${{ matrix.node-version }}") =~ ^v([^.]+) ]]
__tests__/verify-node.sh "${BASH_REMATCH[1]}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- lts/*
os:
- windows-latest
...
|
lts-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
40000
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
lts-syntax (lts/-1, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
lts-syntax:
name: lts-syntax (lts/-1, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
check-latest: "true"
node-version: ${{ matrix.node-version }}
- if: runner.os != 'Windows' && runner.os != 'macOS'
name: Verify node and npm
run: |
. "$NVM_DIR/nvm.sh"
[[ $(nvm version-remote "${{ matrix.node-version }}") =~ ^v([^.]+) ]]
__tests__/verify-node.sh "${BASH_REMATCH[1]}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- lts/-1
os:
- windows-latest
...
|
lts-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
40004
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
v8-canary-syntax (26-v8-canary, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
v8-canary-syntax:
name: v8-canary-syntax (26-v8-canary, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
canaryVersion="${{ matrix.node-version }}"
majorVersion=$(echo $canaryVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26-v8-canary
os:
- windows-latest
...
|
v8-canary-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
40008
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
v8-canary-syntax (26.0.0-v8-canary, windows-latest v8-canary-syntax (26.0.0-v8-canary, windows-latest)...
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
v8-canary-syntax:
name: v8-canary-syntax (26.0.0-v8-canary, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
canaryVersion="${{ matrix.node-version }}"
majorVersion=$(echo $canaryVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26.0.0-v8-canary
os:
- windows-latest
...
|
v8-canary-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950477
|
|
0
|
|
0
|
Edit
Delete
|
|
40012
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
v8-canary-syntax (26.0.0-v8-canary20251016054584e5 v8-canary-syntax (26.0.0-v8-canary20251016054584e5cf, windows-latest)...
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
v8-canary-syntax:
name: v8-canary-syntax (26.0.0-v8-canary20251016054584e5cf, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
canaryVersion="${{ matrix.node-version }}"
majorVersion=$(echo $canaryVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26.0.0-v8-canary20251016054584e5cf
os:
- windows-latest
...
|
v8-canary-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40016
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
nightly-syntax (24.0.0-nightly, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
nightly-syntax:
name: nightly-syntax (24.0.0-nightly, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
nightlyVersion="${{ matrix.node-version }}"
majorVersion=$(echo $nightlyVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24.0.0-nightly
os:
- windows-latest
...
|
nightly-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40020
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
nightly-syntax (25-nightly, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
nightly-syntax:
name: nightly-syntax (25-nightly, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
nightlyVersion="${{ matrix.node-version }}"
majorVersion=$(echo $nightlyVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 25-nightly
os:
- windows-latest
...
|
nightly-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40024
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
nightly-syntax (26-nightly, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
nightly-syntax:
name: nightly-syntax (26-nightly, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
nightlyVersion="${{ matrix.node-version }}"
majorVersion=$(echo $nightlyVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26-nightly
os:
- windows-latest
...
|
nightly-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40028
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
rc-syntax (22.14.0-rc.1, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
rc-syntax:
name: rc-syntax (22.14.0-rc.1, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
rcVersion="${{ matrix.node-version }}"
majorVersion=$(echo $rcVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22.14.0-rc.1
os:
- windows-latest
...
|
rc-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40032
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
rc-syntax (24.0.0-rc.4, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
rc-syntax:
name: rc-syntax (24.0.0-rc.4, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
rcVersion="${{ matrix.node-version }}"
majorVersion=$(echo $rcVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24.0.0-rc.4
os:
- windows-latest
...
|
rc-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40036
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
rc-syntax (26.0.0-rc.1, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
rc-syntax:
name: rc-syntax (26.0.0-rc.1, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: |
rcVersion="${{ matrix.node-version }}"
majorVersion=$(echo $rcVersion | cut -d- -f1)
__tests__/verify-node.sh "$majorVersion"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 26.0.0-rc.1
os:
- windows-latest
...
|
rc-syntax
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40040
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
manifest (22.0.0, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
manifest:
name: manifest (22.0.0, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 22.0.0
os:
- windows-latest
...
|
manifest
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|
|
40044
|
25668
|
137
|
5
|
949feb2413d6458794dcd2491c4babbbce0c15c1
|
0
|
manifest (24.9.0, windows-latest)
|
0
|
name: versions
"on":
pull_request:
name: versions
"on":
pull_request:
paths-ignore:
- '**.md'
push:
branches:
- main
- releases/*
paths-ignore:
- '**.md'
jobs:
manifest:
name: manifest (24.9.0, windows-latest)
runs-on: windows-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Setup Node
uses: ./
with:
node-version: ${{ matrix.node-version }}
- name: Verify node and npm
run: __tests__/verify-node.sh "${{ matrix.node-version }}"
shell: bash
strategy:
fail-fast: "false"
matrix:
node-version:
- 24.9.0
os:
- windows-latest
...
|
manifest
|
null
|
["windows-latest"]
|
0
|
3
|
0
|
1791950475
|
1791844717
|
1791950478
|
|
0
|
|
0
|
Edit
Delete
|