Lock file maintenance #303
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Main | |
on: | |
push: | |
branches: [main] | |
pull_request: {} | |
jobs: | |
validate-renovate-config: | |
uses: BlindfoldedSurgery/renovate-config/.github/workflows/validate.yml@main | |
check-format: | |
name: Check Format | |
runs-on: ubuntu-latest | |
steps: | |
- name: Check out repo | |
uses: actions/checkout@v4 | |
- uses: asdf-vm/actions/install@v3 | |
- name: Check lib formatting | |
run: dart format lib --set-exit-if-changed --output=none | |
lint: | |
name: Lint | |
runs-on: ubuntu-latest | |
steps: | |
- name: Check out repo | |
uses: actions/checkout@v4 | |
- uses: asdf-vm/actions/install@v3 | |
- name: Get dependencies | |
run: flutter pub get | |
- name: Run code generation | |
run: dart run build_runner build | |
- name: Run Analysis | |
run: flutter analyze --fatal-infos | |
build: | |
name: Build Web Package | |
runs-on: ubuntu-latest | |
needs: [check-format, lint] | |
steps: | |
- name: Check out repo | |
uses: actions/checkout@v4 | |
- uses: asdf-vm/actions/install@v3 | |
- name: Get dependencies | |
run: flutter pub get | |
- name: Run code generation | |
run: dart run build_runner build | |
- name: Build web package | |
run: flutter build web | |
- name: Store build result | |
uses: actions/upload-artifact@v4 | |
with: | |
name: web-app | |
path: build/web | |
build-image: | |
runs-on: ubuntu-latest | |
needs: build | |
if: ${{ success() && github.ref != 'refs/heads/main' }} | |
steps: | |
- name: Check out repo | |
uses: actions/checkout@v4 | |
- name: Pull Artifacts | |
uses: actions/download-artifact@v4 | |
with: | |
name: web-app | |
path: build/web | |
- name: Build container image | |
uses: docker/build-push-action@v5 | |
with: | |
context: . | |
tags: ghcr.io/preparingforexams/wheel-of-misfortune-app:${{ github.sha }} | |
push-image: | |
runs-on: ubuntu-latest | |
needs: build | |
if: ${{ success() && github.ref == 'refs/heads/main' }} | |
steps: | |
- name: Check out repo | |
uses: actions/checkout@v4 | |
- name: Pull Artifacts | |
uses: actions/download-artifact@v4 | |
with: | |
name: web-app | |
path: build/web | |
- name: Login to GitHub Container Registry | |
uses: docker/login-action@v3 | |
with: | |
registry: ghcr.io | |
username: ${{ github.repository_owner }} | |
password: ${{ github.token }} | |
- name: Build container image | |
uses: docker/build-push-action@v5 | |
with: | |
build-args: build=${{ github.sha }} | |
context: . | |
push: true | |
tags: ghcr.io/preparingforexams/wheel-of-misfortune-app:${{ github.sha }} | |
deploy: | |
runs-on: ubuntu-latest | |
needs: push-image | |
concurrency: production | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Substitute environment variables in values.yaml | |
run: "envsubst < values.yaml > values_sub.yaml && mv values_sub.yaml values.yaml" | |
- uses: WyriHaximus/github-action-helm3@v4 | |
with: | |
exec: helm upgrade app . --install --namespace=misfortune --atomic | |
kubeconfig: '${{ secrets.KUBECONFIG_RAW }}' |