[Snyk] Security upgrade @pulumi/pulumi from 3.30.0 to 3.108.1 #628
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| jobs: | |
| optimize-images: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: calibreapp/image-actions@main | |
| with: | |
| githubToken: ${{ secrets.GITHUB_TOKEN }} | |
| pulumi-dev: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: '14.18.3' | |
| cache: 'npm' | |
| - run: npm ci | |
| working-directory: pulumi | |
| - uses: pulumi/actions@v3 | |
| with: | |
| command: preview | |
| stack-name: dev | |
| comment-on-pr: true | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| work-dir: pulumi | |
| env: | |
| PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }} | |
| pulumi-prd: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: '14.18.3' | |
| cache: 'npm' | |
| - run: npm ci | |
| working-directory: pulumi | |
| - uses: pulumi/actions@v3 | |
| with: | |
| command: preview | |
| stack-name: prod | |
| comment-on-pr: true | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| work-dir: pulumi | |
| env: | |
| PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }} | |
| validate: | |
| runs-on: ubuntu-20.04 | |
| env: | |
| CLERK_API_KEY: ${{ secrets.CLERK_API_KEY }} | |
| DSN: ${{ secrets.DSN }} | |
| JWT_SECRET: ${{ secrets.JWT_SECRET }} | |
| NEXT_PUBLIC_CLERK_FRONTEND_API: ${{ secrets.NEXT_PUBLIC_CLERK_FRONTEND_API }} | |
| NEXT_PUBLIC_DATADOG_CLIENT_TOKEN: ${{ secrets.NEXT_PUBLIC_DATADOG_CLIENT_TOKEN }} | |
| NEXT_PUBLIC_FATHOM_SITE_ID: ${{ secrets.NEXT_PUBLIC_FATHOM_SITE_ID }} | |
| NEXT_PUBLIC_RECAPTCHA_SITE_KEY: ${{ secrets.NEXT_PUBLIC_RECAPTCHA_SITE_KEY }} | |
| RECAPTCHA_SECRET_KEY: ${{ secrets.RECAPTCHA_SECRET_KEY }} | |
| DOMAIN: http://localhost:3000 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: '14.18.3' | |
| cache: 'npm' | |
| - run: npm ci | |
| - run: npm run validate | |
| acceptance: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-node@v3 | |
| with: | |
| node-version: '14.18.3' | |
| cache: 'npm' | |
| - run: npm i -g npm@8 | |
| - run: npm run docker:infra && sleep 5 | |
| - uses: cypress-io/github-action@v2 | |
| with: | |
| browser: chrome | |
| install-command: npm ci | |
| build: npm run build | |
| start: npm run start | |
| spec: cypress/integration/* | |
| config: baseUrl=http://localhost:3000,port=4000 | |
| wait-on: 'http://localhost:3000' | |
| env: | |
| CLERK_API_KEY: ${{ secrets.CLERK_API_KEY }} | |
| DSN: postgresql://lukeandjadi_com@localhost:26666/defaultdb?sslmode=disable | |
| JWT_SECRET: ${{ secrets.JWT_SECRET }} | |
| NEXT_PUBLIC_CLERK_FRONTEND_API: ${{ secrets.NEXT_PUBLIC_CLERK_FRONTEND_API }} | |
| NEXT_PUBLIC_DATADOG_CLIENT_TOKEN: ${{ secrets.NEXT_PUBLIC_DATADOG_CLIENT_TOKEN }} | |
| NEXT_PUBLIC_FATHOM_SITE_ID: ${{ secrets.NEXT_PUBLIC_FATHOM_SITE_ID }} | |
| NEXT_PUBLIC_RECAPTCHA_SITE_KEY: ${{ secrets.NEXT_PUBLIC_RECAPTCHA_SITE_KEY }} | |
| RECAPTCHA_SECRET_KEY: ${{ secrets.RECAPTCHA_SECRET_KEY }} | |
| DOMAIN: http://localhost:3000 | |
| - uses: actions/upload-artifact@v3 | |
| if: failure() | |
| with: | |
| name: cypress-screenshots | |
| path: cypress/screenshots | |
| - uses: actions/upload-artifact@v3 | |
| if: always() | |
| with: | |
| name: cypress-videos | |
| path: cypress/videos |