ci.yml

name: CI

# **What it does**: Runs our tests.
# **Why we have it**: We want our tests to pass before merging code.

on:
    push:
        branches:
            - main
        paths-ignore:
            - "docs/**"
            - "*.md"
    pull_request:
        branches:
            - main
        paths-ignore:
            - "docs/**"
            - "*.md"
        types: [opened, ready_for_review, reopened, synchronize]

permissions:
    contents: read

# This allows a subsequently queued workflow run to interrupt previous runs
concurrency:
    group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
    cancel-in-progress: true

jobs:
    dependency-review:
        name: Dependency Review
        if: >
            github.event.pull_request.draft == false &&
            github.event_name == 'pull_request'
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Dependency review
              uses: actions/dependency-review-action@v3

    lint:
        name: Lint Code
        if: github.event.pull_request.draft == false
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Setup Node
              uses: actions/setup-node@v4
              with:
                  cache: npm
                  node-version: lts/*

            - name: Install
              run: npm ci --ignore-scripts

            - name: Audit NPM package signatures
              run: npm audit signatures

            - name: Run ESLint
              run: npm run lint

            - name: Run Prettier
              run: npm run lint:prettier

            - name: Run License Checker
              run: npm run lint:licenses

            - name: Run Lockfile Linter
              run: npm run lint:lockfile

    commit-lint:
        name: Lint Commit Messages
        if: >
            github.event.pull_request.draft == false &&
            github.actor != 'dependabot[bot]'
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  fetch-depth: 0
                  persist-credentials: false

            - name: Run Commitlint
              uses: wagoid/commitlint-github-action@v5
              with:
                  configFile: ./package.json

    db-migration-tests:
        name: DB Migration Tests
        if: github.event.pull_request.draft == false
        strategy:
            matrix:
                node-version: [18, 20]
                # Only Linux containers support services currently
                os: [ubuntu-latest]
        runs-on: ${{ matrix.os }}

        services:
            postgres:
                image: postgres:14-alpine
                env:
                    POSTGRES_DB: community_contacts_api
                    POSTGRES_USER: postgres
                    POSTGRES_PASSWORD: password
                ports:
                    - 5432:5432
            mssql:
                image: mcr.microsoft.com/mssql/server:2019-latest
                env:
                    ACCEPT_EULA: Y
                    SA_PASSWORD: Password!
                    MSSQL_PID: Express
                ports:
                    - 1433:1433

        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Setup Node ${{ matrix.node-version }} on ${{ matrix.os }}
              uses: actions/setup-node@v4
              with:
                  cache: npm
                  node-version: ${{ matrix.node-version }}

            - name: Install
              run: npm ci --ignore-scripts

            - name: Copy .env.template to .env
              run: cp .env.template .env

            - name: Run MSSQL migrations
              env:
                  DB_CLIENT: mssql
                  DB_CONNECTION_STRING: Server=localhost,1433;Database=master;User Id=sa;Password=Password!;Encrypt=true;TrustServerCertificate=true;
              run: npm run db:migrate

            - name: Run PostgreSQL migrations
              env:
                  DB_CLIENT: postgresql
                  DB_CONNECTION_STRING: postgresql://postgres:password@localhost:5432/community_contacts_api
              run: npm run db:migrate

    unit-tests:
        name: Unit Tests
        if: github.event.pull_request.draft == false
        strategy:
            matrix:
                node-version: [18, 20]
                os: [macos-latest, ubuntu-latest, windows-latest]
        runs-on: ${{ matrix.os }}
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Setup Node ${{ matrix.node-version }} on ${{ matrix.os }}
              uses: actions/setup-node@v4
              with:
                  cache: npm
                  node-version: ${{ matrix.node-version }}

            - name: Install
              run: npm ci --ignore-scripts

            - name: Install Playwright
              run: npx playwright install --with-deps firefox

            - name: Run tests
              run: |
                  cp .env.template .env
                  npm run jest:coverage -- --ci

            - name: Coveralls parallel
              if: github.repository == 'Fdawgs/yh-community-contacts-api'
              uses: coverallsapp/github-action@v2.2.3
              with:
                  github-token: ${{ secrets.GITHUB_TOKEN }}
                  parallel: true
                  flag-name: run-${{ matrix.node-version }}-${{ matrix.os }}

    build:
        name: Build
        if: github.event.pull_request.draft == false
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Setup Node
              uses: actions/setup-node@v4
              with:
                  cache: npm
                  node-version: lts/*

            - name: Install
              run: npm ci --ignore-scripts

            - name: Run esbuild
              run: npm run build

    lint-docker-file:
        name: Lint Dockerfile
        if: github.event.pull_request.draft == false
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Run Hadolint
              uses: hadolint/hadolint-action@v3.1.0
              with:
                  dockerfile: Dockerfile
                  ignore: DL3018

    docker-compose-tests:
        name: Docker Compose Build Tests
        needs: lint-docker-file
        if: github.event.pull_request.draft == false
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Build and start app
              run: |
                  cp .env.template .env
                  docker compose up -d

    coverage:
        name: Aggregate Coverage Calculations
        needs: unit-tests
        if: >
            github.event.pull_request.draft == false &&
            github.repository == 'Fdawgs/yh-community-contacts-api'
        runs-on: ubuntu-latest
        steps:
            - name: Coveralls finished
              uses: coverallsapp/github-action@v2.2.3
              with:
                  github-token: ${{ secrets.GITHUB_TOKEN }}
                  parallel-finished: true

    # This job is used to save the PR number in an artifact, for use in the automerge.yml workflow
    save-pr-number:
        name: Save Dependabot PR Number
        needs: [db-migration-tests, unit-tests]
        if: >
            github.event.pull_request.draft == false &&
            github.event_name == 'pull_request' &&
            github.event.pull_request.user.login == 'dependabot[bot]'
        runs-on: ubuntu-latest
        steps:
            - name: Check out repo
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Save PR number
              run: |
                  mkdir -p ./pr
                  echo ${{ github.event.number }} > ./pr/NR

            - name: Upload PR number in artifact
              uses: actions/upload-artifact@v4
              with:
                  name: pr
                  path: pr/