Commit graph

265 commits

Author SHA1 Message Date
renovate[bot]
74cdbadd96 chore(deps): update actions/download-artifact digest to e9ef242
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-14 21:18:09 +01:00
renovate[bot]
84ee805c56 chore(deps): update actions/checkout action to v3.3.0
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 14:18:41 +01:00
renovate[bot]
7428da7a6c chore(deps): update ossf/scorecard-action action to v2.1.2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 14:18:04 +01:00
Erik Michelson
8588cbbf21 misc(ci): pin dependencies of GitHub actions
This is recommended by the OpenSSF scorecard tool

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2023-01-09 12:47:00 +01:00
renovate[bot]
4d4c2e90df chore(deps): update github/codeql-action action to v2.1.37
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 09:27:42 +00:00
renovate[bot]
15b0f084a6 chore(deps): update actions/upload-artifact action to v3.1.2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 04:06:18 +00:00
Sheogorath
7bb6570c2b ci: Add OpenSSF scorecard setup
This patch enables a new github action that runs on each commit and
updates the HedgeDoc OpenSSF scorecard score, which is a combination of
various project best practices that are actively worked on. This should
help to stay on top of current best practices and provide transparency
for users of HedgeDoc.

References:
https://github.com/ossf/scorecard
https://securityscorecards.dev/

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2023-01-08 22:08:45 +01:00
renovate[bot]
b121360e10 chore(deps): update actions/cache action to v3.2.2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-12-28 18:37:49 +01:00
renovate[bot]
461a5217a8 chore(deps): update actions/cache action to v3.2.1
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-12-24 13:26:51 +01:00
Tilman Vatteroth
298b6bc205 fix(backend): migrate code to use the commons workspace
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-11 23:09:10 +01:00
Tilman Vatteroth
7320fe2ac1 feat(packages): add commons package
This is an import of 166ca8da12
with some changes to make it fit into the mono repo.
- TypedEventEmitter has been replaced with EventEmitter2 because EventEmitter2 is faster and TypedEventEmitter had some troubles with the new way of compiling.
- tsc-esm has been replaced with microbundle. The problems that lib0 doesn't export its types correctly has been solved using yarn patch.

Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-11 23:09:10 +01:00
Tilman Vatteroth
549cfefc3f fix(ci): modify backend docker workflow to work with forks
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-11 22:09:06 +01:00
Tilman Vatteroth
9f86617a52 fix(ci): Add job name to concurrency group
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-11 22:09:06 +01:00
Tilman Vatteroth
4012e8625c fix(ci): use custom setup node action in backend e2e tests
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-11 22:09:06 +01:00
David Mehren
6d0ab5261a
feat(ci): add concurrency config for more workflows
Signed-off-by: David Mehren <git@herrmehren.de>
2022-12-04 22:14:59 +01:00
Tilman Vatteroth
fea4656035 fix(ci): remove env var in workflow
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-04 21:13:10 +01:00
Tilman Vatteroth
534540855c feat(ci): deduplicate and fix node setup
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-04 20:59:46 +01:00
Tilman Vatteroth
2241a3faea feat(package): adjust packages to workspaces
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-04 20:59:46 +01:00
Tilman Vatteroth
5016eb38ca fix(ci): fix concurrency of ci runs if triggered by pull_request_target
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-12-01 23:52:26 +01:00
Tilman Vatteroth
be054a2bf4 fix(ci): fix conditions in frontend e2e workflow
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-29 19:18:12 +01:00
Tilman Vatteroth
eadf8a5fe1 fix(ci): fix conditions in netlify workflow
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-29 19:18:12 +01:00
Tilman Vatteroth
6e5363b971 fix(ci): always run full CI on push
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-21 18:23:44 +01:00
Tilman Vatteroth
794b0ffdcb fix(ci): Skip test jobs in docker backend workflow if no changes have been made
The CI runner can't pull an image that doesn't exist
because it hasn't been built if no changes have been made to the backend.

Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-21 14:01:09 +01:00
Tilman Vatteroth
058a4e3f6f fix(ci): Add checkout action to frontend docker workflow
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 23:02:13 +01:00
Tilman Vatteroth
b7297248eb fix(ci): Add event to concurrency groups
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 22:46:53 +01:00
Tilman Vatteroth
4c5e4bce4c fix(ci): add checkout action into check-changes job
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 22:46:53 +01:00
Tilman Vatteroth
31381b2cf0
fix(backend): Add directory filter to backend workflows
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 21:49:56 +01:00
Tilman Vatteroth
e72afeb427
fix(ci): merge codeql analysis workflows
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 21:49:56 +01:00
Tilman Vatteroth
9db45b74b8
fix(frontend): adjust workflows
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 21:49:55 +01:00
Tilman Vatteroth
31e4ab5e37
fix(frontend): move and rename workflows
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-11-20 21:29:17 +01:00
Tilman Vatteroth
bf30cbcf48 fix(repository): Move backend code into subdirectory
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
2022-10-30 22:46:42 +01:00
Philip Molares
9b2cc5ceba ci: add paths command to skip unnecessary GitHub actions
Signed-off-by: Philip Molares <philip.molares@udo.edu>
2022-10-03 17:16:21 +02:00
David Mehren
bfd5dee950 ci: drop Node.js 12
Signed-off-by: David Mehren <git@herrmehren.de>
2022-06-05 22:04:10 +02:00
Renovate Bot
d3fff07682 chore(deps): update docker/metadata-action action to v4
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-05-07 16:20:17 +02:00
Renovate Bot
3ff34b575a chore(deps): update docker/setup-buildx-action action to v2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-05-07 16:19:41 +02:00
Renovate Bot
94bca42a93 chore(deps): update docker/setup-qemu-action action to v2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-05-07 16:19:28 +02:00
Renovate Bot
be52e89ad0 chore(deps): update docker/build-push-action action to v3
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-05-07 11:11:34 +02:00
Renovate Bot
cc3564622d chore(deps): update docker/login-action action to v2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-05-07 11:11:23 +02:00
Renovate Bot
11abe73b31 chore(deps): update github/codeql-action action to v2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-05-01 19:05:14 +02:00
Philip Molares
44b6e7053d ci: replaced node 17 with node 18
node 17 is out of support since 01 Apr 2022, so it isn't really beneficial to keep this version in the ci loop. We replace it with the new LTS release 18

Signed-off-by: Philip Molares <philip.molares@udo.edu>
2022-05-01 18:47:26 +02:00
Renovate Bot
f1f1d8cc94 chore(deps): update codecov/codecov-action action to v3
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-04-10 10:06:01 +02:00
David Mehren
7d9f795592
ci: hard-code image name in docker cleanup workflow
The variable seems to be empty for some reason

Signed-off-by: David Mehren <git@herrmehren.de>
2022-04-03 18:06:07 +02:00
David Mehren
05b8987747 ci: add docker image cleanup workflow
This adds a daily CI workflow to delete old tags from the
'hedgedoc-ci' image.

Signed-off-by: David Mehren <git@herrmehren.de>
2022-03-21 14:57:27 +01:00
David Mehren
5078b863c6 ci: build and test docker image
This adds a new workflow performing these steps:
- A development docker image is built and pushed to GHCR as
  'hedgedoc-ci' labeled with the commit hash
- Tests are run with the image
- If the tests are successful, a production image is built and
  pushed to GHCR as 'hedgedoc' labeled with the branch, version tag
  if available and the commit hash

At a later time, the built dev image can also be used to run E2E tests
with the other supported databases. Currently, this is not yet possible,
as the database is always expected to run on localhost, not other hosts.

Signed-off-by: David Mehren <git@herrmehren.de>
2022-03-21 14:57:27 +01:00
David Mehren
268b39154d ci: move node version into a variable
Signed-off-by: David Mehren <git@herrmehren.de>
2022-03-06 22:24:21 +01:00
David Mehren
d73c9b8e86 ci: add config for e2e tests with multiple DBs
Signed-off-by: David Mehren <git@herrmehren.de>
2022-03-06 22:24:21 +01:00
Renovate Bot
8aee78c78e chore(deps): update actions/checkout action to v3
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-03-05 10:40:33 +01:00
Renovate Bot
b0b590757e chore(deps): update actions/setup-node action to v3
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2022-02-26 13:43:50 +01:00
David Mehren
7e6156b956
ci: setup njsscan
See: https://github.com/ajinabraham/njsscan-action

Signed-off-by: David Mehren <git@herrmehren.de>
2021-11-11 20:14:41 +01:00
David Mehren
be3a4e2c88
CI: Test and build with Node 17
Signed-off-by: David Mehren <git@herrmehren.de>
2021-11-11 19:39:22 +01:00
David Mehren
692300cdc9
CI: Use immutable flag and built-in caching
Signed-off-by: David Mehren <git@herrmehren.de>
2021-09-05 18:14:18 +02:00
David Mehren
9df5530472
CI: Stop running tests with Node.js 15
Node 15 is EOL since 01 Jun 2021.

See https://endoflife.date/nodejs

Signed-off-by: David Mehren <git@herrmehren.de>
2021-08-01 17:58:14 +02:00
Renovate Bot
6d450e4fe4
chore(deps): update codecov/codecov-action action to v2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-07-19 18:06:14 +00:00
David Mehren
61321fd992
CI: Run tests with Node.js 16
Signed-off-by: David Mehren <git@herrmehren.de>
2021-04-22 19:08:43 +02:00
Philip Molares
20f527eb80
GithubWorkflow: Removed build on Node 10
This is not helpful anymore, because node 10 is nearly at the end of its LTS and because ts-loader 9 has node 12 as it minimum supported version and this is a key part of this application.

Signed-off-by: Philip Molares <philip.molares@udo.edu>
2021-04-20 11:29:20 +02:00
Philip Molares
c4875ff8ca
Package.json: Switch yarn format and format:check
Make `yarn format` check the files and `yarn format:fix` do the actually
fixing

fixes #920

Signed-off-by: Philip Molares <philip.molares@udo.edu>
2021-02-16 10:28:55 +01:00
David Mehren
89df171751
Add missing license header in CodeQL workflow
Signed-off-by: David Mehren <git@herrmehren.de>
2021-01-10 20:20:30 +01:00
David Mehren
efb48b9812
Enable GitHub CodeQL analysis
Signed-off-by: David Mehren <git@herrmehren.de>
2021-01-10 20:17:21 +01:00
Renovate Bot
bd34b9a6ec
Update actions/setup-node action to v2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2021-01-06 22:40:22 +00:00
Tilman Vatteroth
7aeaf488c4
Change year in copyright to 2021
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
2021-01-06 21:36:07 +01:00
David Mehren
98951d26c5
Set fetch-depth to 0 for coverage jobs
This allows codecov to fetch the commit SHA

Signed-off-by: David Mehren <git@herrmehren.de>
2021-01-06 13:17:30 +01:00
David Mehren
8aca83e656
Add coverage analysis to CI workflow
Signed-off-by: David Mehren <git@herrmehren.de>
2021-01-06 12:38:33 +01:00
David Mehren
7960776bd1
Add CI workflow
Signed-off-by: David Mehren <git@herrmehren.de>
2021-01-05 23:02:12 +01:00
Philip Molares
f57e4efcf0
used correct branch for reuse workflow
Signed-off-by: Philip Molares <philip.molares@udo.edu>
2021-01-05 23:35:46 +01:00
Philip Molares
03a81fb6c0
added reuse workflow
Signed-off-by: Philip Molares <philip.molares@udo.edu>
2021-01-05 22:13:01 +01:00