react-native-macos/.github/workflows/microsoft-pr.yml at ab261dbe3f27645f0a4a8cfee294d5c0e05ce3b7 · microsoft/react-native-macos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
name: PR

on:
  pull_request:
    types: [opened, synchronize, edited]
    branches: [ "main", "*-stable", "release/*" ]

concurrency:
  # Ensure single build of a pull request. `main` should not be affected.
  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  lint-title:
    name: "Lint PR title"
    permissions: {}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          filter: blob:none
          fetch-depth: 0
      - name: Setup toolchain
        uses: ./.github/actions/microsoft-setup-toolchain
        with:
          node-version: '22'
      # We lint the PR title instead of the commit message to avoid script injection attacks.
      # Using environment variables prevents potential security vulnerabilities as described in:
      # https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#example-of-a-script-injection-attack
      - name: Lint PR title
        env:
          PR_TITLE: ${{ github.event.pull_request.title }}
        run: |
          echo "$PR_TITLE" | npx @rnx-kit/commitlint-lite@2.0.0
  build-website:
    name: "Build the website"
    permissions: {}
    if: github.base_ref == 'main'
    uses: ./.github/workflows/microsoft-build-website.yml
  npm-publish-dry-run:
    name: "NPM Publish (Dry Run)"
    permissions: {}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          filter: blob:none
          fetch-depth: 0
      - name: Setup toolchain
        uses: ./.github/actions/microsoft-setup-toolchain
        with:
          node-version: '22'
      - name: Read publish tag from nx.json
        id: config
        run: |
          PUBLISH_TAG=$(jq -r '.release.version.generatorOptions.currentVersionResolverMetadata.tag' nx.json)
          echo "publishTag=${PUBLISH_TAG}" >> "$GITHUB_OUTPUT"
          echo "Using publish tag from nx.json: ${PUBLISH_TAG}"
      - name: Configure git
        run: |
          git config --global user.email "53619745+rnbot@users.noreply.github.com"
          git config --global user.name "React-Native Bot"
          git remote set-url origin https://rnbot:${{ secrets.GITHUB_TOKEN }}@github.com/microsoft/react-native-macos
      - name: Install dependencies
        run: yarn
      - name: Verify release config
        run: |
          node .ado/scripts/prepublish-check.mjs --verbose --skip-auth --tag ${{ steps.config.outputs.publishTag }}

      - name: Version and publish packages (dry run)
        run: |
          echo "Target branch: ${{ github.base_ref }}"
          yarn nx release --dry-run --verbose

  yarn-constraints:
    name: "Check Yarn Constraints"
    permissions: {}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          filter: blob:none
          fetch-depth: 0
      - name: Setup toolchain
        uses: ./.github/actions/microsoft-setup-toolchain
        with:
          node-version: '22'
      - name: Install dependencies
        run: yarn
      - name: Check constraints
        run: yarn constraints

  javascript-tests:
    name: "JavaScript Tests"
    permissions: {}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          filter: blob:none
          fetch-depth: 0

      - name: Setup toolchain
        uses: ./.github/actions/microsoft-setup-toolchain
        with:
          node-version: '22'

      - name: Install npm dependencies
        run: yarn install

      - name: Run Jest tests
        run: yarn test-ci

      - name: Run Flow type checker
        run: yarn flow-check

      - name: Run ESLint
        run: yarn lint

      - name: Run Prettier format check
        run: yarn format-check

  build-test-rntester:
    name: "Build RNTester"
    permissions: {}
    uses: ./.github/workflows/microsoft-build-rntester.yml

  test-react-native-macos-init:
    name: "Test react-native-macos init"
    permissions: {}
    # https://github.com/microsoft/react-native-macos/issues/2344
    # Run only for stable branches. Once nightlies are available, enable on main as well.
    if: ${{ endsWith(github.base_ref, '-stable') }}
    uses: ./.github/workflows/microsoft-test-react-native-macos-init.yml

  react-native-test-app-integration:
    name: "Test react-native-test-app integration"
    permissions: {}
    # https://github.com/microsoft/react-native-macos/issues/2344
    # Run only for stable branches. Once nightlies are available, enable on main as well.
    if: ${{ endsWith(github.base_ref, '-stable') }}
    uses: ./.github/workflows/microsoft-react-native-test-app-integration.yml