[Snyk] Upgrade @aws-sdk/client-s3 from 3.726.1 to 3.735.0 #1225
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| pull_request: | |
| defaults: | |
| run: | |
| shell: bash | |
| env: | |
| TERM: xterm | |
| jobs: | |
| build-linux: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: ci/checkout-repo | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| - name: ci/setup-node | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version-file: "package.json" | |
| cache: "npm" | |
| cache-dependency-path: package-lock.json | |
| - name: ci/install-dependencies | |
| env: | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| run: | | |
| wget -qO - https://download.opensuse.org/repositories/Emulators:/Wine:/Debian/xUbuntu_22.04/Release.key | sudo apt-key add - | |
| wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.20.1/yq_linux_amd64 && chmod a+x /usr/local/bin/yq | |
| sudo apt-get update || true && sudo apt-get install -y ca-certificates libxtst-dev libpng++-dev gcc-aarch64-linux-gnu g++-aarch64-linux-gnu jq icnsutils graphicsmagick tzdata | |
| npm ci | |
| - name: ci/test | |
| uses: ./.github/actions/test | |
| - name: ci/build | |
| run: | | |
| mkdir -p ./build/linux | |
| npm run package:linux-tar | |
| bash -x ./scripts/patch_updater_yml.sh | |
| bash -x ./scripts/cp_artifacts.sh release ./build/linux | |
| - name: ci/upload-test-results | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | |
| with: | |
| name: linux-test-results | |
| path: test-results.xml | |
| retention-days: 5 | |
| - name: ci/upload-build | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | |
| with: | |
| name: build-linux | |
| path: ./build/linux | |
| retention-days: 10 ## No need to keep CI builds more than 10 days | |
| windows-install-deps: | |
| runs-on: windows-2022 | |
| steps: | |
| - name: ci/checkout-repo | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| - name: ci/setup-node | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version-file: "package.json" | |
| cache: "npm" | |
| cache-dependency-path: package-lock.json | |
| - name: ci/cache-node-modules | |
| id: cache-node-modules | |
| uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 | |
| with: | |
| path: node_modules | |
| key: ${{ runner.os }}-build-node-modules-${{ hashFiles('**/package-lock.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-build-node-modules | |
| ${{ runner.os }}-build- | |
| ${{ runner.os }}- | |
| - name: ci/install-dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| env: | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| run: | | |
| choco install yq --version 4.15.1 -y | |
| npm i -g node-gyp | |
| node-gyp install | |
| node-gyp install --devdir="C:\Users\runneradmin\.electron-gyp" --target=$(jq -r .devDependencies.electron package.json) --dist-url="https://electronjs.org/headers" | |
| npm ci --openssl_fips='' | |
| build-win-no-installer: | |
| runs-on: windows-2022 | |
| needs: | |
| - windows-install-deps | |
| steps: | |
| - name: ci/checkout-repo | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| - name: ci/setup-node | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version-file: "package.json" | |
| cache: "npm" | |
| cache-dependency-path: package-lock.json | |
| - name: ci/cache-node-modules | |
| id: cache-node-modules | |
| uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 | |
| with: | |
| path: node_modules | |
| key: ${{ runner.os }}-build-node-modules-${{ hashFiles('package-lock.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-build-node-modules | |
| ${{ runner.os }}-build- | |
| ${{ runner.os }}- | |
| - name: ci/install-node-gyp | |
| env: | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| run: | | |
| choco install yq --version 4.15.1 -y | |
| npm i -g node-gyp | |
| node-gyp install | |
| node-gyp install --devdir="C:\Users\runneradmin\.electron-gyp" --target=$(jq -r .devDependencies.electron package.json) --dist-url="https://electronjs.org/headers" | |
| node-gyp install --devdir="C:\Users\runneradmin\.electron-gyp" --target=$(jq -r .devDependencies.electron package.json) --dist-url="https://electronjs.org/headers" --arch arm64 | |
| - name: ci/install-dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| env: | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| run: | | |
| npm ci --openssl_fips='' | |
| - name: ci/test | |
| uses: ./.github/actions/test | |
| - name: ci/build | |
| run: | | |
| mkdir -p ./build/win | |
| npm run package:windows | |
| bash -x ./scripts/patch_updater_yml.sh | |
| bash -x ./scripts/cp_artifacts.sh release ./build/win | |
| - name: ci/upload-test-results | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | |
| with: | |
| name: windows-test-results | |
| path: test-results.xml | |
| retention-days: 5 | |
| - name: ci/upload-build | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | |
| with: | |
| name: build-windows | |
| path: ./build/win | |
| retention-days: 10 ## No need to keep CI builds more than 10 days | |
| build-mac-no-dmg: | |
| runs-on: macos-15 | |
| steps: | |
| - name: ci/checkout-repo | |
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | |
| - name: ci/setup-node | |
| uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 | |
| with: | |
| node-version-file: "package.json" | |
| cache: "npm" | |
| cache-dependency-path: package-lock.json | |
| - name: ci/install-dependencies | |
| env: | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| run: | | |
| brew install yq | |
| jq '.mac.target=["zip"]' electron-builder.json | jq '.mac.gatekeeperAssess=false' > /tmp/electron-builder.json && cp /tmp/electron-builder.json . | |
| sudo xcode-select -s /Applications/Xcode_16.2.app/Contents/Developer | |
| npm ci | |
| - name: ci/test | |
| uses: ./.github/actions/test | |
| - name: ci/build | |
| run: | | |
| mkdir -p ./build/macos | |
| npm run package:mac | |
| bash -x ./scripts/patch_updater_yml.sh | |
| bash -x ./scripts/cp_artifacts.sh release ./build/macos/ | |
| - name: ci/upload-test-results | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | |
| with: | |
| name: macos-test-results | |
| path: test-results.xml | |
| retention-days: 5 | |
| - name: ci/upload-build | |
| uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 | |
| with: | |
| name: build-macos | |
| path: ./build/macos/ | |
| retention-days: 10 ## No need to keep CI builds more than 10 days | |
| report-test-results: | |
| if: always() | |
| needs: | |
| - build-mac-no-dmg | |
| - build-win-no-installer | |
| - build-linux | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| checks: write | |
| pull-requests: write | |
| steps: | |
| - name: ci/download-macos-test-results | |
| uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 | |
| with: | |
| name: macos-test-results | |
| path: macos-test-results | |
| - name: ci/download-windows-test-results | |
| uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 | |
| with: | |
| name: windows-test-results | |
| path: windows-test-results | |
| - name: ci/download-linux-test-results | |
| uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 | |
| with: | |
| name: linux-test-results | |
| path: linux-test-results | |
| - name: ci/publish-results | |
| uses: EnricoMi/publish-unit-test-result-action@a3caf02865c0604ad3dc1ecfcc5cdec9c41b7936 # v2.3.0 | |
| with: | |
| comment_mode: failures | |
| compare_to_earlier_commit: false | |
| junit_files: "**/*.xml" |