perf: download bundletool on demand instead of vendoring it #36
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 'Tests' | |
| on: | |
| pull_request: | |
| push: | |
| branches: [ 'main' ] | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| test: | |
| name: Test (${{ matrix.os }}, Node ${{ matrix.node-version }}) | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ ubuntu-latest ] | |
| node-version: [ '20.x', '22.x', '24.x' ] | |
| include: | |
| # A darwin leg is what covers the iOS-specific suites - they are gated | |
| # on the platform and never execute anywhere else. One version is | |
| # enough for that; 24 is the active LTS. | |
| - os: macos-latest | |
| node-version: '24.x' | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| # only supported on the Ubuntu runners | |
| if: runner.os == 'Linux' | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| # nothing here needs git auth after checkout, and npm test runs | |
| # repository code | |
| persist-credentials: false | |
| - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'npm' | |
| - name: Install | |
| run: npm ci --ignore-scripts | |
| - name: Test | |
| run: npm test | |
| doctor: | |
| name: Doctor (Node ${{ matrix.node-version }}) | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # No darwin leg: unlike the CLI suites, these stub the platform through | |
| # a fake HostInfo rather than probing it, so a second OS runs identical | |
| # assertions. | |
| node-version: [ '20.x', '22.x', '24.x' ] | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'npm' | |
| cache-dependency-path: packages/doctor/package-lock.json | |
| - name: Install | |
| working-directory: packages/doctor | |
| run: npm ci | |
| - name: Test | |
| working-directory: packages/doctor | |
| run: npm test |