From fdcd37a909f058d9658565074bad3cb0aa4bb6f2 Mon Sep 17 00:00:00 2001 From: Valentin Laurin Date: Tue, 16 Jun 2026 11:07:29 +0100 Subject: [PATCH 1/5] Bump actions/setup-node from 4 to 6 --- .github/workflows/ci.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ca4dc6f..eb630fd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,7 +23,7 @@ jobs: uses: actions/checkout@v6.0.3 - name: Setup NodeJS ${{ matrix.node }} - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node }} cache: 'npm' @@ -42,7 +42,7 @@ jobs: uses: actions/checkout@v6.0.3 - name: Setup NodeJS 20 - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm' @@ -79,7 +79,7 @@ jobs: uses: actions/checkout@v6.0.3 - name: Setup NodeJS 20 - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm' From 9d1196ba79322f4d43ceabd7669a5916e2ada0ab Mon Sep 17 00:00:00 2001 From: Valentin Laurin Date: Tue, 16 Jun 2026 11:08:32 +0100 Subject: [PATCH 2/5] Update actions/checkout version constraint Fix major version only to reduce dependabot noise --- .github/workflows/ci.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index eb630fd..734f320 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: node: [16, 18, 20] steps: - name: Checkout - uses: actions/checkout@v6.0.3 + uses: actions/checkout@v6 - name: Setup NodeJS ${{ matrix.node }} uses: actions/setup-node@v6 @@ -39,7 +39,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@v6.0.3 + uses: actions/checkout@v6 - name: Setup NodeJS 20 uses: actions/setup-node@v6 @@ -57,7 +57,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout - uses: actions/checkout@v6.0.3 + uses: actions/checkout@v6 - name: Lint Code Base uses: github/super-linter/slim@v5 @@ -76,7 +76,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@v6.0.3 + uses: actions/checkout@v6 - name: Setup NodeJS 20 uses: actions/setup-node@v6 From 16d57d7742f85a334a7e184ceacebfebd2399ac9 Mon Sep 17 00:00:00 2001 From: Valentin Laurin Date: Tue, 16 Jun 2026 11:10:57 +0100 Subject: [PATCH 3/5] Remove `end` job from CI Reduce notifications noise in favour of centralised dashboard. --- .github/workflows/ci.yml | 58 ---------------------------------------- 1 file changed, 58 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 734f320..da8e769 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -96,61 +96,3 @@ jobs: run: npm publish env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - - end: - name: End - needs: [quality_checks, security_checks, lint, publish] - if: always() - runs-on: ubuntu-latest - timeout-minutes: 5 - env: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }} - steps: - - name: Build summary - id: summary - env: - QUALITY: ${{ needs.quality_checks.result }} - SECURITY: ${{ needs.security_checks.result }} - LINT: ${{ needs.lint.result }} - PUBLISH: ${{ needs.publish.result }} - run: | - echo "success=$(if [[ "$QUALITY$SECURITY$LINT$PUBLISH" =~ ^(success|skipped)+$ ]]; then echo "true"; else echo "false"; fi)" >> $GITHUB_OUTPUT - - name: Notify slack fail - if: steps.summary.outputs.success != 'true' && env.SLACK_BOT_TOKEN != 0 - uses: slackapi/slack-github-action@v1.25.0 - with: - channel-id: dev - payload: | - { - "text": "${{github.repository}}: CI failed", - "blocks": [ - { - "type": "header", - "text": { - "type": "plain_text", - "emoji": true, - "text": ":x: ${{github.repository}}: CI failed" - } - }, - { - "type": "context", - "elements": [ - { - "type": "mrkdwn", - "text": "Repository: <${{github.server_url}}/${{github.repository}}|${{github.repository}}>" - }, - { - "type": "mrkdwn", - "text": "Triggered by: *${{github.triggering_actor}}*" - } - ] - }, - { - "type": "section", - "text": { - "type": "mrkdwn", - "text": "See failed run: <${{github.server_url}}/${{github.repository}}/actions/runs/${{github.run_id}}|${{github.run_id}}>" - } - } - ] - } From 03226d0666b428c4f9a3625ac7947a42a694ccab Mon Sep 17 00:00:00 2001 From: Valentin Laurin Date: Tue, 16 Jun 2026 11:17:07 +0100 Subject: [PATCH 4/5] Dedup NodeJS version in CI workflow --- .github/workflows/ci.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index da8e769..8cfff88 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -10,6 +10,9 @@ on: - cron: '0 0 * * *' permissions: contents: read +env: + NODE_VERSION: 20 + jobs: quality_checks: name: Quality checks @@ -41,10 +44,10 @@ jobs: - name: Checkout uses: actions/checkout@v6 - - name: Setup NodeJS 20 + - name: Setup NodeJS uses: actions/setup-node@v6 with: - node-version: '20' + node-version: ${{ env.NODE_VERSION }} cache: 'npm' - name: Audit dependencies @@ -78,10 +81,10 @@ jobs: - name: Checkout uses: actions/checkout@v6 - - name: Setup NodeJS 20 + - name: Setup NodeJS uses: actions/setup-node@v6 with: - node-version: '20' + node-version: ${{ env.NODE_VERSION }} cache: 'npm' registry-url: https://registry.npmjs.org scope: '@quickcase' From 2b6fa4f7377457d16379004f429f7f741cae3316 Mon Sep 17 00:00:00 2001 From: Valentin Laurin Date: Tue, 16 Jun 2026 11:19:16 +0100 Subject: [PATCH 5/5] Add CODEOWNERS --- .github/CODEOWNERS | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..a3d136f --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,2 @@ +* @quickcase/dev +/.github/ @quickcase/ops