From 37a05021a75379c129daeda66038ad366d398192 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 5 Aug 2026 23:42:51 +0100 Subject: [PATCH 1/9] ci: guard runs to npmx repo --- .github/workflows/chromatic.yml | 1 + .github/workflows/lunaria.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/chromatic.yml b/.github/workflows/chromatic.yml index b66bd886ae..1f8f4832f9 100644 --- a/.github/workflows/chromatic.yml +++ b/.github/workflows/chromatic.yml @@ -16,6 +16,7 @@ permissions: jobs: chromatic: name: πŸ“š Chromatic + if: github.repository == 'npmx-dev/npmx.dev' runs-on: ubuntu-24.04-arm steps: diff --git a/.github/workflows/lunaria.yml b/.github/workflows/lunaria.yml index bbca2f3f86..6be7535e0e 100644 --- a/.github/workflows/lunaria.yml +++ b/.github/workflows/lunaria.yml @@ -15,6 +15,7 @@ permissions: {} jobs: lunaria-overview: name: 🌝 Generate Lunaria Overview + if: github.repository == 'npmx-dev/npmx.dev' runs-on: ubuntu-24.04-arm permissions: contents: read From 3174dd1420563a989ec5d8d8ee13f65a10654a77 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 5 Aug 2026 23:43:40 +0100 Subject: [PATCH 2/9] ci: use ubuntu-slim where possible --- .github/workflows/ci.yml | 4 ++-- .github/workflows/deploy-canary.yml | 2 +- .github/workflows/mirror-tangled.yml | 2 +- .github/workflows/stale.yml | 4 ++-- .github/workflows/welcome-open.yml | 2 +- .github/workflows/zizmor.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2ef968ad3a..213b4d8134 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,7 +23,7 @@ permissions: jobs: lint: name: πŸ”  Lint project - runs-on: ubuntu-24.04-arm + runs-on: ubuntu-slim steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -234,7 +234,7 @@ jobs: i18n: name: 🌐 i18n validation - runs-on: ubuntu-24.04-arm + runs-on: ubuntu-slim steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 diff --git a/.github/workflows/deploy-canary.yml b/.github/workflows/deploy-canary.yml index 54099c4943..3807e47c9d 100644 --- a/.github/workflows/deploy-canary.yml +++ b/.github/workflows/deploy-canary.yml @@ -15,7 +15,7 @@ jobs: deploy-canary: if: github.repository == 'npmx-dev/npmx.dev' name: πŸš€ Deploy to canary (main.npmx.dev) - runs-on: ubuntu-24.04-arm + runs-on: ubuntu-slim steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: diff --git a/.github/workflows/mirror-tangled.yml b/.github/workflows/mirror-tangled.yml index cfabd9ea83..39d5b5a0b5 100644 --- a/.github/workflows/mirror-tangled.yml +++ b/.github/workflows/mirror-tangled.yml @@ -18,7 +18,7 @@ jobs: mirror: name: πŸ•ΈοΈ Mirror to Tangled if: ${{ github.repository == 'npmx-dev/npmx.dev' }} - runs-on: ubuntu-24.04-arm + runs-on: ubuntu-slim steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index a02e7eea3e..78a60f7acc 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -15,7 +15,7 @@ permissions: {} jobs: stale-bugs: name: 🧹 Mark stale bug issues - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: issues: write # mark and close stale bug issues steps: @@ -33,7 +33,7 @@ jobs: stale-prs: name: 🧹 Mark stale pull requests - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: pull-requests: write # mark and close stale pull requests steps: diff --git a/.github/workflows/welcome-open.yml b/.github/workflows/welcome-open.yml index 544592b124..b3a55cf1af 100644 --- a/.github/workflows/welcome-open.yml +++ b/.github/workflows/welcome-open.yml @@ -15,7 +15,7 @@ jobs: greeting: name: Greet First-Time Contributors if: github.repository == 'npmx-dev/npmx.dev' - runs-on: ubuntu-latest + runs-on: ubuntu-slim permissions: pull-requests: write # post first-time contributor greeting comments steps: diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 6135e3efbe..85ca3d39a0 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -21,7 +21,7 @@ permissions: {} jobs: zizmor: name: 🌈 GitHub Actions security analysis - runs-on: ubuntu-24.04-arm + runs-on: ubuntu-slim permissions: contents: read # checkout repository From a0dcf38dbdfe8b9c17e9ff524d8d226f39599e5c Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 5 Aug 2026 23:44:00 +0100 Subject: [PATCH 3/9] ci: make codecov uploads paralell. --- .github/workflows/ci.yml | 82 ++++++++++++++++++++-------------------- 1 file changed, 42 insertions(+), 40 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 213b4d8134..8702c661d9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -77,26 +77,27 @@ jobs: - name: πŸ§ͺ Unit tests run: vp test --project unit --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml - - name: β¬†οΈŽ Upload test results to Codecov - if: ${{ !cancelled() }} - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 - with: - disable_search: true - files: test-report.junit.xml - flags: unit - report_type: test_results - env: - CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - - - name: β¬†οΈŽ Upload coverage reports to Codecov - if: ${{ !cancelled() }} - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 - with: - disable_search: true - files: coverage/clover.xml - flags: unit - env: - CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} + - parallel: + - name: β¬†οΈŽ Upload test results to Codecov + if: ${{ !cancelled() }} + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + with: + disable_search: true + files: test-report.junit.xml + flags: unit + report_type: test_results + env: + CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} + + - name: β¬†οΈŽ Upload coverage reports to Codecov + if: ${{ !cancelled() }} + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + with: + disable_search: true + files: coverage/clover.xml + flags: unit + env: + CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} test: name: πŸ§ͺ Component tests @@ -119,26 +120,27 @@ jobs: - name: πŸ§ͺ Component tests run: vp test --project nuxt --coverage --reporter=default --reporter=junit --outputFile=test-report.junit.xml - - name: β¬†οΈŽ Upload test results to Codecov - if: ${{ !cancelled() }} - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 - with: - disable_search: true - files: test-report.junit.xml - flags: component - report_type: test_results - env: - CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - - - name: β¬†οΈŽ Upload coverage reports to Codecov - if: ${{ !cancelled() }} - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 - with: - disable_search: true - files: coverage/clover.xml - flags: component - env: - CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} + - parallel: + - name: β¬†οΈŽ Upload test results to Codecov + if: ${{ !cancelled() }} + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + with: + disable_search: true + files: test-report.junit.xml + flags: component + report_type: test_results + env: + CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} + + - name: β¬†οΈŽ Upload coverage reports to Codecov + if: ${{ !cancelled() }} + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + with: + disable_search: true + files: coverage/clover.xml + flags: component + env: + CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} browser: name: πŸ–₯️ Browser tests From 1bcc6f83c10622b4cfbecefc950228d4fe2d5b95 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 5 Aug 2026 23:47:47 +0100 Subject: [PATCH 4/9] ci: zizmor requires docker. oops! --- .github/workflows/zizmor.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 85ca3d39a0..6135e3efbe 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -21,7 +21,7 @@ permissions: {} jobs: zizmor: name: 🌈 GitHub Actions security analysis - runs-on: ubuntu-slim + runs-on: ubuntu-24.04-arm permissions: contents: read # checkout repository From c96614dc6b68c0c177e370aeea0db748677932ff Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Wed, 5 Aug 2026 23:55:08 +0100 Subject: [PATCH 5/9] ci: change lint job to run on ubuntu-24.04-arm --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8702c661d9..5b3b8fe3f4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,7 +23,7 @@ permissions: jobs: lint: name: πŸ”  Lint project - runs-on: ubuntu-slim + runs-on: ubuntu-24.04-arm steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 From a08aea29e87d8d6301da2f166ea937e4902448c4 Mon Sep 17 00:00:00 2001 From: Luke Nelson Date: Thu, 6 Aug 2026 09:06:15 +0100 Subject: [PATCH 6/9] Apply suggestion from @coderabbitai[bot] Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --- .github/workflows/welcome-open.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/welcome-open.yml b/.github/workflows/welcome-open.yml index b3a55cf1af..544592b124 100644 --- a/.github/workflows/welcome-open.yml +++ b/.github/workflows/welcome-open.yml @@ -15,7 +15,7 @@ jobs: greeting: name: Greet First-Time Contributors if: github.repository == 'npmx-dev/npmx.dev' - runs-on: ubuntu-slim + runs-on: ubuntu-latest permissions: pull-requests: write # post first-time contributor greeting comments steps: From 43db19e335fc208a0979c4fc1de60d21fce9c64b Mon Sep 17 00:00:00 2001 From: Felix Schneider <99918022+trueberryless@users.noreply.github.com> Date: Sat, 19 Sep 2026 22:40:01 +0200 Subject: [PATCH 7/9] Apply suggestion from @trueberryless --- .github/workflows/lunaria.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lunaria.yml b/.github/workflows/lunaria.yml index 3ddcfc3fab..ae667c60f2 100644 --- a/.github/workflows/lunaria.yml +++ b/.github/workflows/lunaria.yml @@ -37,4 +37,4 @@ jobs: sfw: true - name: Generate Lunaria Overview - uses: lunariajs/action@4911ad0736d1e3b20af4cb70f5079aea2327ed8e # astro-docs + uses: lunariajs/action@e5ab09c3c8353fa80786d8c2149873ba3978a3a7 # v0.2.0 From c7448d466d406e5ff168c0d8ccd8f29174ea7581 Mon Sep 17 00:00:00 2001 From: Felix Schneider <99918022+trueberryless@users.noreply.github.com> Date: Sat, 19 Sep 2026 22:58:28 +0200 Subject: [PATCH 8/9] Apply suggestion from @trueberryless --- .github/workflows/lunaria.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/lunaria.yml b/.github/workflows/lunaria.yml index ae667c60f2..b4853a8f41 100644 --- a/.github/workflows/lunaria.yml +++ b/.github/workflows/lunaria.yml @@ -37,4 +37,5 @@ jobs: sfw: true - name: Generate Lunaria Overview + # zizmor: ignore[unpinned-uses] uses: lunariajs/action@e5ab09c3c8353fa80786d8c2149873ba3978a3a7 # v0.2.0 From a654f6811de88d2dfd44465692b658c04d10b915 Mon Sep 17 00:00:00 2001 From: Felix Schneider <99918022+trueberryless@users.noreply.github.com> Date: Sat, 19 Sep 2026 23:30:28 +0200 Subject: [PATCH 9/9] fix: adapt ignore rule line --- .github/workflows/lunaria.yml | 1 - .github/zizmor.yml | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/lunaria.yml b/.github/workflows/lunaria.yml index b4853a8f41..ae667c60f2 100644 --- a/.github/workflows/lunaria.yml +++ b/.github/workflows/lunaria.yml @@ -37,5 +37,4 @@ jobs: sfw: true - name: Generate Lunaria Overview - # zizmor: ignore[unpinned-uses] uses: lunariajs/action@e5ab09c3c8353fa80786d8c2149873ba3978a3a7 # v0.2.0 diff --git a/.github/zizmor.yml b/.github/zizmor.yml index 600359efcb..8a706714bf 100644 --- a/.github/zizmor.yml +++ b/.github/zizmor.yml @@ -4,7 +4,7 @@ rules: stale-action-refs: ignore: # lunariajs/action has no tag refs; keep the branch commit hash-pinned. - - lunaria.yml:39 + - lunaria.yml:40 dangerous-triggers: ignore: - enforce-release-source.yml