nodejs.yml

---
name: Node.js CI

on:
  push:
    branches: [v*, next]
    paths-ignore:
      - 'docs/*'
      - '*.md'
  pull_request:
    branches: [v*, next]
    paths-ignore:
      - 'docs/*'
      - '*.md'

jobs:
  Build:
    runs-on: ${{ matrix.os }}

    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
        node-version: [18.18.0, 18.x, 20.x, 22.x]

    permissions:
      checks: write
      pull-requests: write

    steps:
      - name: Checkout branch
        uses: actions/checkout@v4
      - name: Setup NodeJS ${{ matrix.node-version }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node-version }}
          cache: 'yarn'
      - name: Install dependencies
        run: yarn install --frozen-lockfile
      - name: Build projects
        run: yarn build
      - name: Run tests
        run: yarn test
      - name: Publish Test Results
        uses: EnricoMi/publish-unit-test-result-action@v2
        if: matrix.os == 'ubuntu-latest'
        with:
          junit_files: 'test-results/*.xml'
      - name: Upload unit-tests coverage to Codecov
        uses: codecov/codecov-action@v4.5.0
        with:
          directory: coverage/library
          flags: unittests
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
      - name: Upload examples code coverage to Codecov
        uses: codecov/codecov-action@v4.5.0
        with:
          directory: coverage/integration
          flags: integration
        env:
          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
      # - name: SonarCloud Scan
      #   uses: sonarsource/sonarcloud-github-action@v2.3.0
      #   if: matrix.os == 'ubuntu-latest'
      #   env:
      #     SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
      #   with:
      #     args: >
      #       -Dsonar.organization=l2jliga
      #       -Dsonar.projectKey=L2jLiga_fastify-decorators

  Lint-Files:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout branch
        uses: actions/checkout@v4
      - name: Setup NodeJS
        uses: actions/setup-node@v4
        with:
          cache: 'yarn'
      - name: Install dependencies
        run: yarn install --frozen-lockfile
      - name: Check licenses
        run: yarn license-checker
      - name: Lint project
        run: yarn lint -f @microsoft/eslint-formatter-sarif -o eslint.sarif
      - name: Upload linter SARIF file
        if: always()
        uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: eslint.sarif

  CodeQL-Analysis:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout branch
        uses: actions/checkout@v4
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
        with:
          languages: javascript
      - name: Setup NodeJS
        uses: actions/setup-node@v4
        with:
          cache: 'yarn'
      - name: Install dependencies
        run: yarn install --frozen-lockfile
      - name: Build projects
        run: yarn build
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3

  automerge:
    name: 'Merge Dependabot updates'
    if: github.event_name == 'pull_request'
    needs: [Build, Lint-Files, CodeQL-Analysis]
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: write
    steps:
      - uses: fastify/github-action-merge-dependabot@v3.10.2
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}