fix(deps): update dependency express to v5.2.0 [security] #895
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: [push] | |
| env: | |
| CI_BUILD_NUM: ${{ github.run_id }} | |
| CI_BRANCH: ${{ github.ref_name }} | |
| permissions: | |
| contents: write # semantic-release-dry verifies the write permissions | |
| issues: read # needed by semantic-release | |
| pull-requests: write # needed by semantic-release | |
| id-token: write # needed for npm trusted publishers with OIDC | |
| jobs: | |
| test: | |
| name: Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Use Node.js 24.x | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: '24.x' | |
| - run: npm ci | |
| # Sub-project setup and testing (conditional) | |
| - name: Install browser injectable dependencies | |
| if: hashFiles('packages/browser-injectables/**') != '' | |
| run: cd packages/browser-injectables && npm ci | |
| - name: Install Playwright dependencies for browser injectables | |
| if: hashFiles('packages/browser-injectables/**') != '' | |
| run: cd packages/browser-injectables && npx playwright install-deps | |
| - run: git config --global user.email "test@project-helix.io" && git config --global user.name "Test Build" | |
| - run: git config --global protocol.file.allow always | |
| - run: npm run lint | |
| - run: npm test | |
| env: | |
| CIRCLE_REPOSITORY_URL: dummy-url | |
| # Browser injectable tests (conditional) | |
| - name: Test browser injectables | |
| if: hashFiles('packages/browser-injectables/**') != '' | |
| run: cd packages/browser-injectables && npm test | |
| - uses: codecov/codecov-action@v5 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| files: ./coverage/lcov.info,./packages/browser-injectables/coverage/lcov.info | |
| flags: unittests,browsertests | |
| - name: Semantic Release (Dry Run) | |
| if: github.actor != 'dependabot[bot]' | |
| run: npm run semantic-release-dry | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| DISCORD_WEBHOOK: ${{ secrets.HELIX_RELEASE_DISCORD_WEBHOOK }} | |
| test_win: | |
| name: Test (Windows) | |
| runs-on: windows-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - run: git config --global core.autocrlf false | |
| - uses: actions/checkout@v5 | |
| - name: Use Node.js 24.x | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: '24.x' | |
| - run: npm ci | |
| - run: git config --global user.email "test@project-helix.io" && git config --global user.name "Test Build" | |
| - run: git config --global protocol.file.allow always | |
| - name: Run Windows Tests | |
| run: npm run test-ci-win | |
| timeout-minutes: 8 | |
| env: | |
| CIRCLE_REPOSITORY_URL: dummy-url | |
| release: | |
| name: Release | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/main' | |
| needs: [test, test_win] | |
| steps: | |
| - uses: actions/checkout@v5 | |
| with: | |
| persist-credentials: false | |
| - name: Use Node.js 24.11 (LTS) | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: '24.11.1' | |
| - run: npm ci | |
| - name: Check npm version | |
| run: npm --version | |
| - run: npm run semantic-release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.ADOBE_BOT_GITHUB_TOKEN }} | |
| NPM_TOKEN: ${{ secrets.ADOBE_BOT_NPM_TOKEN }} | |
| DISCORD_WEBHOOK: ${{ secrets.HELIX_RELEASE_DISCORD_WEBHOOK }} |