ci.yml

name: ci

on:
  pull_request:
    branches:
      - main
  push:
    branches:
      - main
  merge_group:
    branches:
      - main

# cancel in-progress runs on new commits to same PR (gitub.event.number)
concurrency:
  group: ${{ github.workflow }}-${{ github.event.number || github.sha }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  build:
    name: 🏗️ Build project
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: 📦 Restore Nuxt build cache
        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
        with:
          path: |
            .nuxt
            node_modules/.cache
          key: nuxt-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('pnpm-lock.yaml') }}-${{ hashFiles('app/**', 'server/**', 'shared/**', 'nuxt.config.*') }}
          restore-keys: |
            nuxt-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('pnpm-lock.yaml') }}-
            nuxt-${{ runner.os }}-${{ runner.arch }}-

      - name: 🏗️ Build project
        run: pnpm build:test
        env:
          VALIDATE_HTML: true

      - name: ⬆︎ Upload build output
        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
        with:
          name: build-output
          path: .output/
          retention-days: 1

  lint:
    name: 🔠 Lint project
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies (root only, no scripts)
        run: pnpm install --filter . --ignore-scripts

      - name: 🔠 Lint project
        run: pnpm lint

  types:
    name: 💪 Type check
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: 💪 Type check
        run: pnpm test:types

  unit:
    name: 🧪 Unit tests
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: 🧪 Unit tests
        run: pnpm test:unit run --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml

      - name: ⬆︎ Upload test results to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3 # v1
        with:
          token: ${{ secrets.CODECOV_TOKEN }}

  test:
    name: 🧪 Component tests
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: 🌐 Install browser
        run: pnpm playwright install chromium-headless-shell

      - name: 🧪 Component tests
        run: pnpm test:nuxt run --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml

      - name: ⬆︎ Upload coverage reports to Codecov
        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
        with:
          report_type: test_results
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

      - name: ⬆︎ Upload coverage reports to Codecov
        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  browser:
    name: 🖥️ Browser tests
    needs: build
    runs-on: ubuntu-24.04-arm
    container:
      image: mcr.microsoft.com/playwright:v1.58.2-noble

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: ⬇︎ Download build output
        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
        with:
          name: build-output
          path: .output/

      - name: 🖥️ Test project (browser)
        run: pnpm test:browser:prebuilt

  a11y:
    name: ♿ Accessibility audit
    needs: build
    runs-on: ubuntu-latest # See https://github.com/GoogleChrome/lighthouse/discussions/16834
    strategy:
      matrix:
        mode: [dark, light]

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: ⬇︎ Download build output
        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
        with:
          name: build-output
          path: .output/

      - name: ♿ Accessibility audit (Lighthouse - ${{ matrix.mode }} mode)
        run: pnpm test:a11y:prebuilt
        env:
          LHCI_GITHUB_APP_TOKEN: ${{ secrets.LHCI_GITHUB_APP_TOKEN }}
          LIGHTHOUSE_COLOR_MODE: ${{ matrix.mode }}

  knip:
    name: 🧹 Unused code check
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies
        run: pnpm install

      - name: 🧹 Check for unused code
        run: pnpm knip

      - name: 🧹 Check for unused production code
        run: pnpm knip --production

  i18n:
    name: 🌐 i18n validation
    runs-on: ubuntu-24.04-arm

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # 4e1c8eafbd745f64b1ef30a7d7ed7965034c486c
        name: 🟧 Install pnpm
        with:
          cache: true

      - name: 📦 Install dependencies (root only, no scripts)
        run: pnpm install --filter . --ignore-scripts

      - name: 🌐 Check for missing or dynamic i18n keys
        run: pnpm i18n:report

      - name: 🌐 Check i18n schema is up to date
        run: |
          pnpm i18n:schema
          git diff --exit-code i18n/schema.json