Files
aurum/.github/workflows/ci.yml
dependabot[bot] c8bab36f09 build(deps): bump the actions group with 3 updates
Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

Updates `actions/setup-python` from 5 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v7)

Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-08 22:16:22 +00:00

72 lines
2.2 KiB
YAML

name: CI
# Runs on every pull request and on pushes to main, so a broken PR shows a
# red check before it's mergeable (enable "Require status checks to pass"
# in branch protection for main to actually block the merge button on it).
on:
pull_request:
push:
branches: [main]
jobs:
backend-tests:
runs-on: ubuntu-latest
services:
# A real Postgres, not sqlite — tests/conftest.py creates/migrates/
# drops a dedicated aurum_test database against it, same as the local
# `docker compose exec backend pytest` workflow in tests/README.md.
postgres:
image: postgres:16-alpine
env:
POSTGRES_USER: aurum
POSTGRES_PASSWORD: aurum
POSTGRES_DB: aurum
ports:
- 5432:5432
options: >-
--health-cmd "pg_isready -U aurum"
--health-interval 5s
--health-timeout 5s
--health-retries 10
env:
AURUM_POSTGRES_USER: aurum
AURUM_POSTGRES_PASSWORD: aurum
AURUM_POSTGRES_DB: aurum
AURUM_POSTGRES_HOST: localhost
AURUM_POSTGRES_PORT: 5432
defaults:
run:
working-directory: backend
steps:
- uses: actions/checkout@v7
- uses: actions/setup-python@v7
with:
python-version: "3.12"
cache: pip
cache-dependency-path: backend/requirements-dev.txt
- run: pip install -r requirements-dev.txt
- run: pytest -v
frontend-build:
runs-on: ubuntu-latest
defaults:
run:
working-directory: frontend
steps:
- uses: actions/checkout@v7
- uses: actions/setup-node@v7
with:
node-version: "22"
cache: npm
cache-dependency-path: frontend/package-lock.json
- run: npm ci
# tsc -b (type-check) then vite build — catches both a broken build
# and a type error a PR might introduce, same as `npm run build`
# locally before shipping a change.
- run: npm run build
# Vitest over the pure-logic modules (lib/format.ts, the Crypto tab's
# allocation math) — kept in the same job rather than a new one so a
# renamed job doesn't silently stop matching branch protection's
# required status checks.
- run: npm run test