Build

ci(workflows): pin GitHub Actions dependencies to commit SHAs #164

	name: Build

	on:
	push:
	branches: ["main"]
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

	- name: Setup Node
	uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
	with:
	node-version: "24"
	cache: "npm"
	cache-dependency-path: \|
	package-lock.json
	app/package-lock.json

	- name: Install frontend dependencies
	working-directory: ./app
	run: npm ci

	- name: Build frontend
	working-directory: ./app
	run: npm run build

	- name: Lint frontend
	working-directory: ./app
	run: npm run lint

	- name: Setup Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
	with:
	python-version: "3.12"

	- name: Install uv
	uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
	with:
	version: "latest"

	- name: Install backend dependencies
	run: uv sync --all-extras

	docker-build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

	- name: Build Docker image
	uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
	with:
	context: .
	file: ./Dockerfile
	push: false

Provide feedback