[Chore][DEVX-571]: Move CI from CircleCI to Github Actions

.github/actions/ci/action.yml

@@ -0,0 +1,26 @@
+name: CI
+
+description: Shared action to install dependencies
+
+runs:
+  using: composite
+
+  steps:
+    - name: Read .nvmrc
+      id: nvm
+      run: echo "NVMRC=$(cat .nvmrc)" >> $GITHUB_OUTPUT
+      shell: bash
+
+    - name: Setup Node.js
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020  # v4.4.0
+      with:
+        node-version-file: ".nvmrc"
+        cache: "yarn"
+
+    # Whenever on a changeset versioning PR
+    # Then installing can not fail with lockfile changes
+    # Because the package.json for integration test changes.
+
+    - name: Install
+      run: yarn install --immutable
+      shell: bash

.github/workflows/docs.yml

@@ -6,7 +6,10 @@ on:
       event:
         description: "TypeDoc deploy"
         required: true
-permissions: {}
+
+permissions:
+  pages: write      # to deploy to Pages
+  id-token: write
 
 jobs:
   # Build job
@@ -29,11 +32,7 @@ jobs:
   # Deploy job
   deploy:
     runs-on: ubuntu-latest
-    needs: build
-
-    permissions:
-      pages: write      # to deploy to Pages
-      id-token: write   # to verify the deployment originates from an appropriate source
+    needs: build   # to verify the deployment originates from an appropriate source
 
     # Deploy to the github-pages environment
     environment:

.github/workflows/qa.yml

@@ -0,0 +1,131 @@
+name: Qa
+
+permissions:
+  contents: read
+  pull-requests: write
+
+on:
+  push:
+    branches:
+      - 'master'
+      - '!changeset-release/**'
+
+  pull_request:
+
+jobs:
+  immutable-install:
+    if: ${{ !startsWith(github.ref, 'refs/heads/changeset-release/') }}
+    name: Immutable Install
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/ci
+
+      # The shared install action does not respect the
+      # `--immutable` flag, so we need to run it here.
+      - name: Install with lockfile
+        run: yarn install --immutable
+
+  linting:
+    if: ${{ !startsWith(github.ref, 'refs/heads/changeset-release/') }}
+    name: Linting
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/ci
+
+      - name: Lint
+        run: yarn format
+
+  type-checking:
+    if: ${{ !startsWith(github.ref, 'refs/heads/changeset-release/') }}
+    name: Type checking
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/ci
+
+      - name: TypeScript
+        run:  yarn typecheck
+
+  testing:
+    if: ${{ !startsWith(github.ref, 'refs/heads/changeset-release/') }}
+    name: Testing
+    needs: [immutable-install, linting, type-checking]
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/ci
+
+      - name: Build
+        run: yarn build
+
+      - uses: oNaiPs/secrets-to-env-action@ec46a22bfc9b37e014b627b3208b07eb8909ea0f # v1.5
+        with:
+          secrets: ${{ toJSON(secrets) }}
+
+      - name: Test (Examples)
+        run: |
+          cd examples
+          yarn install --immutable
+          yarn test
+
+      - name: Test (Unit)
+        run: yarn test:unit
+
+      - name: Test (Integration)
+        run: yarn test --coverage
+
+      - name: Upload Coverage Report
+        uses: codecov/codecov-action@v5 #2db07e317924c76f654a414629d71c65876882e2 v5.4.3
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          flags: test-coverage
+
+  regression-testing:
+    if: ${{ !startsWith(github.ref, 'refs/heads/changeset-release/') }}
+    name: Regression Testing
+    needs: [testing]
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        version: [18, 20]
+      fail-fast: true
+      max-parallel: 1
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Setup
+        uses: ./.github/actions/ci
+
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: ${{ matrix.version }}
+
+      - name: Build
+        run: yarn build
+
+      - uses: oNaiPs/secrets-to-env-action@ec46a22bfc9b37e014b627b3208b07eb8909ea0f # v1.5
+        with:
+          secrets: ${{ toJSON(secrets) }}
+
+      - name: Integration tests
+        run: yarn test

.github/workflows/release.yml

@@ -38,28 +38,8 @@ jobs:
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - name: Read .nvmrc
-        run: echo "NVMRC=$(cat .nvmrc)" >> $GITHUB_OUTPUT
-        id: nvm
-
-      - name: Setup Node (uses version in .nvmrc)
-        uses: actions/setup-node@v4
-        with:
-          node-version: '${{ steps.nvm.outputs.NVMRC }}'
-
-      - name: Get yarn cache
-        id: yarn-cache
-        run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
-
-      - uses: actions/cache@v4
-        with:
-          path: ${{ steps.yarn-cache.outputs.dir }}
-          key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-yarn-
-
-      - name: Install dependencies
-        run: yarn install --frozen-lockfile
+      - name: Setup
+        uses: ./.github/actions/ci
 
       - name: Creating .npmrc
         run: |