CI/CD improvements

MrRefactoring · MrRefactoring · commit a4327e25b328 · 2025-04-27T20:13:11.000+03:00
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -5,43 +5,54 @@ on:
   repository_dispatch:
     types: [ pr-approved ]
 
+env:
+  PNPM_VERSION: '10'
+
 jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 22.x]
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: ${{ env.PNPM_VERSION }}
       - name: Installing dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: Building sources
-        run: npm run build
+        run: pnpm run build
 
   lint:
     name: Lint Code
     needs: build
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 22.x]
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: ${{ env.PNPM_VERSION }}
       - name: Installing dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: Linting
-        run: npm run lint
+        run: pnpm run lint
         env:
           CI: true
 
@@ -51,18 +62,22 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 22.x]
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: ${{ env.PNPM_VERSION }}
       - name: Installing dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: Running unit tests
-        run: npm run test:unit
+        run: pnpm run test:unit
 
   test_integration:
     name: Integration Tests
@@ -73,21 +88,25 @@ jobs:
     strategy:
       max-parallel: 1
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [20.x, 22.x]
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
+      - name: Install pnpm
+        uses: pnpm/action-setup@v2
+        with:
+          version: ${{ env.PNPM_VERSION }}
       - name: Installing dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: Creating `.env` file
         run: |
           touch .env
           echo HOST=${{ secrets.HOST }} >> .env
           echo EMAIL=${{ secrets.EMAIL }} >> .env
           echo API_TOKEN=${{ secrets.API_TOKEN }} >> .env
       - name: Running integration tests
-        run: npm run test:integration
+        run: pnpm run test:integration
diff --git a/.github/workflows/publish-dev.yml b/.github/workflows/publish-dev.yml
@@ -3,27 +3,22 @@ name: Publish to NPM Dev Channel
 on:
   workflow_dispatch
 
+permissions:
+  contents: read
+
+
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Check branch
-        run: |
-          if [ "$GITHUB_REF" != "refs/heads/develop" ]; then
-            echo "This workflow can only be run on the 'develop' branch."
-            exit 1
-          fi
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           registry-url: https://registry.npmjs.org/
 
       - name: Install dependencies
@@ -45,16 +40,6 @@ jobs:
       - name: Update package-lock.json
         run: npm install
 
-      - name: Commit version update
-        run: |
-          git config --global user.name "GitHub Actions"
-          git config --global user.email "actions@github.com"
-          git add package.json package-lock.json
-          git commit -m "Update version to $NEW_VERSION [skip ci]"
-          git push origin develop
-        env:
-          GITHUB_TOKEN: ${{ secrets.PAT }}
-
       - name: Publish to NPM Dev Channel
         run: npm publish --tag dev
         env:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -7,6 +7,9 @@ on:
 env:
   NODE_VERSION: '18'
 
+permissions:
+  contents: read
+
 jobs:
   build-and-test:
     name: Build and Test
@@ -21,23 +24,24 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
+          package-manager: 'pnpm'
 
       - name: Install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
 
       - name: Run build
-        run: npm run build
+        run: pnpm run build
 
       - name: Run lint
-        run: npm run lint
+        run: pnpm run lint
         env:
           CI: true
 
       - name: Run unit tests
-        run: npm run test:unit
+        run: pnpm run test:unit
 
       - name: Run integration tests
-        run: npm run test:integration
+        run: pnpm run test:integration
         env:
           HOST: ${{ secrets.HOST }}
           EMAIL: ${{ secrets.EMAIL }}
@@ -47,6 +51,8 @@ jobs:
     name: Publish Package
     needs: build-and-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -58,11 +64,11 @@ jobs:
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: 'https://registry.npmjs.org'
+          package-manager: 'pnpm'
 
       - name: Get and validate version
         id: version
         run: |
-          # Get version from tag if exists
           if [[ $GITHUB_REF == refs/tags/v* ]]; then
             TAG_VERSION=${GITHUB_REF#refs/tags/v}
             echo "Using version from tag: $TAG_VERSION"
@@ -71,10 +77,10 @@ jobs:
             if [ "$TAG_VERSION" != "$CURRENT_VERSION" ]; then
               echo "Updating package version to match tag..."
               npm version $TAG_VERSION --no-git-tag-version
-              npm install
+              pnpm install
               git config user.name "GitHub Actions"
               git config user.email "actions@github.com"
-              git add package.json package-lock.json
+              git add package.json pnpm-lock.yaml
               git commit -m "Update version to $TAG_VERSION [skip ci]"
               git push
             fi
@@ -89,13 +95,13 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.PAT }}
 
       - name: Install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
 
       - name: Build package
-        run: npm run build
+        run: pnpm run build
 
       - name: Publish to NPM
-        run: npm publish
+        run: pnpm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
@@ -113,12 +119,13 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
+          package-manager: 'pnpm'
 
       - name: Install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
 
       - name: Generate documentation
-        run: npm run doc
+        run: pnpm run doc
 
       - name: Deploy to docs branch
         uses: JamesIves/github-pages-deploy-action@v4
