tripwire/.github/workflows/ci.yml at main · Boring-Software-Inc/tripwire · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
name: ci

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  typecheck:
    name: typecheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Typecheck
        run: pnpm typecheck

  format:
    name: format
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Format check
        run: pnpm format:check

  lint:
    name: lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Lint
        run: pnpm lint

  build:
    name: build
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build
        id: build
        continue-on-error: true
        run: pnpm build 2>&1 | tee build.log

      - name: Detect OOM
        id: oom
        if: steps.build.outcome == 'failure'
        run: |
          if grep -qE "JavaScript heap out of memory|Reached heap limit" build.log; then
            echo "oom=true" >> "$GITHUB_OUTPUT"
          else
            echo "oom=false" >> "$GITHUB_OUTPUT"
          fi

      - name: Comment OOM skip on PR
        if: github.event_name == 'pull_request' && steps.oom.outputs.oom == 'true'
        uses: marocchino/sticky-pull-request-comment@v2
        with:
          header: build-skipped
          message: |
            ### Build skipped — out of memory on CI runner

            The `@tripwire/web` build exceeded the ~7 GB memory ceiling on
            `ubuntu-latest` and crashed with `JavaScript heap out of memory`.
            Treating this as a skip, not a failure — build verification
            happens on the deploy platform.

            To make this actually run in CI later:
            - Use a runner with more RAM, or
            - Fix the root cause (likely server-only deps like `pg` leaking
              into the client bundle — see the `pg-pool` circular chunk warning)

      - name: Remove stale OOM comment
        if: github.event_name == 'pull_request' && steps.build.outcome == 'success'
        uses: marocchino/sticky-pull-request-comment@v2
        with:
          header: build-skipped
          delete: true

      - name: Fail if build failed for non-OOM reason
        if: steps.build.outcome == 'failure' && steps.oom.outputs.oom != 'true'
        run: |
          echo "Build failed for a reason other than OOM. Failing the check."
          exit 1