ci.yml

name: ci

on:
  pull_request:
    branches:
      - main
      - release
  push:
    branches:
      - main
  merge_group:
    branches:
      - main

# cancel in-progress runs on new commits to same PR (github.event.number)
concurrency:
  group: ${{ github.workflow }}-${{ github.event.number || github.sha }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  lint:
    name: 🔠 Lint project
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          run-install: false

      - name: 📦 Install dependencies (root only, no scripts)
        run: vp install --filter . --ignore-scripts

      - name: 🔠 Lint project
        run: vp run lint

  types:
    name: 💪 Type check
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          cache: true

      - name: 💪 Type check
        run: vp run test:types

  unit:
    name: 🧪 Unit tests
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          cache: true

      - name: 🧪 Unit tests
        run: vp test --project unit --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml

      - name: ⬆︎ Upload test results to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          disable_search: true
          files: test-report.junit.xml
          flags: unit
          report_type: test_results
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

      - name: ⬆︎ Upload coverage reports to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          disable_search: true
          files: coverage/clover.xml
          flags: unit
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  test:
    name: 🧪 Component tests
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          cache: true

      - name: 🌐 Install browser
        run: vp exec playwright install chromium-headless-shell

      - name: 🧪 Component tests
        run: vp test --project nuxt --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml

      - name: ⬆︎ Upload test results to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          disable_search: true
          files: test-report.junit.xml
          flags: component
          report_type: test_results
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

      - name: ⬆︎ Upload coverage reports to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          disable_search: true
          files: coverage/clover.xml
          flags: component
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  browser:
    name: 🖥️ Browser tests
    runs-on: ubuntu-24.04-arm
    container:
      image: mcr.microsoft.com/playwright:v1.58.2-noble@sha256:6446946a1d9fd62d9ae501312a2d76a43ee688542b21622056a372959b65d63d

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: 👑 Fix Git ownership
        run: git config --global --add safe.directory /__w/npmx.dev/npmx.dev

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          cache: true

      - name: 🏗️ Build project
        run: vp run build:test
        env:
          VALIDATE_HTML: true

      - name: 🖥️ Test project (browser)
        run: vp run test:browser:prebuilt

      - name: ⬆︎ Upload test results to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
        with:
          disable_search: true
          files: test-report.junit.xml
          flags: browser
          report_type: test_results
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
      # TODO(serhalp): Upload browser *coverage* report once we've instrumented the prebuilt bundle

  a11y:
    name: ♿ Accessibility audit
    runs-on: ubuntu-latest # See https://github.com/GoogleChrome/lighthouse/discussions/16834
    strategy:
      matrix:
        mode: [dark, light]

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          cache: true

      - name: 🏗️ Build project
        run: vp run build:test

      - name: ♿ Accessibility audit (Lighthouse - ${{ matrix.mode }} mode)
        run: vp run test:a11y:prebuilt
        env:
          LHCI_GITHUB_APP_TOKEN: ${{ secrets.LHCI_GITHUB_APP_TOKEN }}
          LIGHTHOUSE_COLOR_MODE: ${{ matrix.mode }}

  knip:
    name: 🧹 Unused code check
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          cache: true

      - name: 🧹 Check for unused code
        run: vp run knip

  i18n:
    name: 🌐 i18n validation
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: voidzero-dev/setup-vp@ca1c46663915d6c1042ae23bd39ab85718bfb0fa # v1.10.0
        with:
          node-version: lts/*
          run-install: false

      - name: 📦 Install dependencies (root only, no scripts)
        run: vp install --filter . --ignore-scripts

      - name: 🌐 Check for missing or dynamic i18n keys
        run: vp run i18n:report

      - name: 🌐 Check i18n schema is up to date
        run: |
          vp run i18n:schema
          git diff --exit-code i18n/schema.json