Merge pull request #311 from maxulysse/improve_ci

Author: maxulysse

.github/workflows/build-cv.yml

@@ -1,26 +1,33 @@
 name: build-cv
 
 on:
+  # Allows you to run this workflow manually from the Actions tab on GitHub.
   workflow_dispatch:
+  # Trigger the workflow every time you push to the `main` branch
   push:
     branches:
       - main
     paths:
       - src/data/CV-MGarcia.tex
       - src/data/biblio.bib
 
+# Allow one concurrent build
+concurrency:
+  group: "cv"
+  cancel-in-progress: true
+
 jobs:
-  build-cv:
+  build:
     runs-on: ubuntu-latest
     permissions:
-      contents: write
+      contents: read
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
         with:
           distribution: temurin
           java-version: "17"
@@ -35,12 +42,23 @@ jobs:
       - name: Compile latest CV
         run: nextflow run maxulysse/compile-latex -r 3.0.1 -profile docker --outdir . --github_avatar 'https://avatars.githubusercontent.com/u/1019628?s=300&v=4' --input src/data/CV-MGarcia.tex --outname CV-MGarcia-latest.pdf --biblio src/data/biblio.bib
 
-      - name: Commit and push to cv branch
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Deploy to cv branch
         if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
         run: |
           git config --local user.email "action@github.com"
           git config --local user.name "GitHub Action"
           git checkout -B cv
           git add -f CV-MGarcia-latest.pdf
+          if git diff --staged --quiet; then
+            echo "No CV changes to commit"
+            exit 0
+          fi
           git commit -m "Update CV - $(date +%Y-%m-%d)"
           git push -f origin cv

.github/workflows/ci.yml

@@ -7,15 +7,22 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
           node-version: '24'
           cache: 'npm'
@@ -33,10 +40,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
         with:
           node-version: '24'
           cache: 'npm'

.github/workflows/deploy.yml

@@ -1,18 +1,22 @@
-name: Deploy to GitHub Pages
+name: Deploy
 
 on:
-  # Trigger the workflow every time you push to the `main` branch
-  # Using a different branch name? Replace `main` with your branch’s name
-  push:
-    branches: [main]
   # Allows you to run this workflow manually from the Actions tab on GitHub.
   workflow_dispatch:
-
-# Allow this job to clone the repo and create a page deployment
-permissions:
-  contents: read
-  pages: write
-  id-token: write
+  # Trigger the workflow every time you push to the `main` branch
+  push:
+    branches:
+      - main
+    paths:
+      - "src/**"
+      - "public/**"
+      - "astro.config.mjs"
+      - "package.json"
+      - "package-lock.json"
+      - "tsconfig.json"
+      - ".github/workflows/deploy.yml"
+      - "!src/data/CV-MGarcia.tex"
+      - "!src/data/biblio.bib"
 
 # Allow one concurrent deployment
 concurrency:
@@ -22,22 +26,30 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
     steps:
       - name: Checkout your repository using git
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
       - name: Install, build, and upload your site
-        uses: withastro/action@v6
+        uses: withastro/action@44706356b4eb735f8b9035699eb4796241a040c4 # v6
         with:
           node-version: 24
-          package-manager: npm@latest
+          package-manager: npm
 
   deploy:
     needs: build
     runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
+
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5

README.md

@@ -2,18 +2,21 @@
 
 [![License](https://img.shields.io/github/license/maxulysse/maxulysse.github.io.svg)](https://github.com/maxulysse/maxulysse.github.io/blob/main/LICENSE)
 [![CI](https://github.com/maxulysse/maxulysse.github.io/actions/workflows/ci.yml/badge.svg)](https://github.com/maxulysse/maxulysse.github.io/actions/workflows/ci.yml)
+[![build-cv](https://github.com/maxulysse/maxulysse.github.io/actions/workflows/build-cv.yml/badge.svg)](https://github.com/maxulysse/maxulysse.github.io/actions/workflows/build-cv.yml)
+[![Deploy to GitHub Pages](https://github.com/maxulysse/maxulysse.github.io/actions/workflows/deploy.yml/badge.svg)](https://github.com/maxulysse/maxulysse.github.io/actions/workflows/deploy.yml)
 
 Personal website built with [Astro](https://astro.build).
 
 ## Dependencies
 
-- [academicons](https://jpswalsh.github.io/academicons/) `1.9.6`
-- [Astro](https://astro.build/) `^5.2.0`
-- [@astrojs/rss](https://docs.astro.build/en/guides/rss/) `^4.0.1`
-- [Bootstrap](https://getbootstrap.com/) `5.3.8`
-- [Font Awesome](https://fontawesome.com/) `6.5.2`
-- [Prism](https://prismjs.com/) `1.29.0`
-- [Reveal.js](https://revealjs.com/) `5.2.1`
+- [Astro](https://astro.build/)
+- [@astrojs/rss](https://docs.astro.build/en/guides/rss/)
+- [Bootstrap](https://getbootstrap.com/)
+- [Font Awesome](https://fontawesome.com/)
+- [@orcid/bibtex-parse-js](https://github.com/ORCID/bibtexParseJs)
+- [Prism](https://prismjs.com/)
+- [Reveal.js](https://revealjs.com/)
+- [academicons](https://jpswalsh.github.io/academicons/)
 
 ## Inspirations
 
@@ -66,3 +69,12 @@ src/data/         Site data (authors, social links)
 ## Deployment
 
 Deployment is handled by GitHub Actions to GitHub Pages.
+
+## CV Automation
+
+The CV PDF is rebuilt automatically by the [build-cv workflow](.github/workflows/build-cv.yml).
+Generation is done via the [maxulysse/compile-latex](https://github.com/maxulysse/compile-latex) Nextflow lightweight pipeline.
+
+- Triggered on pushes to `main` when either `src/data/CV-MGarcia.tex` or `src/data/biblio.bib` changes
+- Can also be run on demand with `workflow_dispatch` from the GitHub Actions UI
+- Generates `CV-MGarcia-latest.pdf` and force-pushes it to the `cv` branch