Skip to content

chore: further ci hardening #670

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
43081j merged 6 commits into from
May 23, 2026
+24 −1
Merged

chore: further ci hardening #670

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
0a7a897
chore: don't save git credentials when they're unused
ghostdevv May 22, 2026
f162606
chore: add concurrency limits to save on CI time
ghostdevv May 22, 2026
4c97bdd
chore: only run validate on changes to manifests to save time
ghostdevv May 22, 2026
8d906f0
chore: disable cache on publish workflow to help mitigate cache poisi…
ghostdevv May 22, 2026
dc67ecb
fix: validate-pr pnpm caching
ghostdevv May 22, 2026
bca5dfe
chore: set explicit permissions
ghostdevv May 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions .github/workflows/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,12 @@ on:
branches: [main]
pull_request:

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

permissions: {}

jobs:
test:
runs-on: ubuntu-latest
Expand All @@ -15,6 +21,9 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Setup pnpm
uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
- name: Use Node v${{ matrix.node-version }}
Expand Down
6 changes: 5 additions & 1 deletion .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ on:
jobs:
build:
runs-on: ubuntu-latest
permissions: {}
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
Expand All @@ -15,6 +16,8 @@ jobs:
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
with:
node-version: 22.x
package-manager-cache: false
cache: ''
- run: pnpm install --frozen-lockfile
- run: pnpm build
- run: pnpm lint
Expand All @@ -33,7 +36,8 @@ jobs:
with:
node-version: 22.x
registry-url: 'https://registry.npmjs.org'
cache: 'pnpm'
package-manager-cache: false
cache: ''
- run: npm install -g npm@~11.10.0 # Work-around for https://github.com/npm/cli/issues/9151#issuecomment-4131466208
- run: npm install -g npm@latest
- run: pnpm install --frozen-lockfile
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/validate-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,14 @@ name: Validate PR

on:
pull_request:
paths:
- manifests/**

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

permissions: {}

jobs:
validate:
Expand All @@ -12,12 +20,14 @@ jobs:
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 0
persist-credentials: false
- name: Setup pnpm
uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
- name: Use Node.js
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
with:
node-version: 22.x
cache: pnpm
- name: Install Dependencies
run: pnpm install --frozen-lockfile
- name: Validate PR
Expand Down