also looking at this
Harden AnalyticsHQ release and dashboard quality
#52
34 files
+1236
-340
| @@ -201,7 +201,7 @@ jobs: | ||
| 201 | 201 | |
| 202 | 202 | deploy-prod: |
| 203 | 203 | if: github.event_name == 'push' && github.ref == 'refs/heads/main' && needs.release-check.outputs.contains_release == '0' |
| 204 | needs: [secrets, lint, typecheck, test, release-check] | |
| 204 | needs: [secrets, lint, typecheck, test, release-check, build] | |
| 205 | 205 | runs-on: ubuntu-latest |
| 206 | 206 | environment: production |
| 207 | 207 | |
| @@ -250,7 +250,7 @@ jobs: | ||
| 250 | 250 | |
| 251 | 251 | deploy-stage: |
| 252 | 252 | if: (github.event_name == 'push' && github.ref == 'refs/heads/main') || (startsWith(github.ref, 'refs/tags/') && contains(github.ref, '-beta.')) |
| 253 | needs: [secrets, lint, typecheck, test] | |
| 253 | needs: [secrets, lint, typecheck, test, build] | |
| 254 | 254 | runs-on: ubuntu-latest |
| 255 | 255 | environment: staging |
| 256 | 256 | |
| @@ -297,7 +297,7 @@ jobs: | ||
| 297 | 297 | |
| 298 | 298 | deploy-dev: |
| 299 | 299 | if: (github.event_name == 'push' && github.ref == 'refs/heads/main') || (github.event_name == 'pull_request' && github.base_ref == 'main') |
| 300 | needs: [secrets, lint, typecheck, test] | |
| 300 | needs: [secrets, lint, typecheck, test, build] | |
| 301 | 301 | runs-on: ubuntu-latest |
| 302 | 302 | environment: development |
| 303 | 303 | |
| @@ -342,8 +342,7 @@ jobs: | ||
| 342 | 342 | AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
| 343 | 343 | run: bun buddy deploy development --yes |
| 344 | 344 | |
| 345 | publish-commit: | |
| 346 | if: github.event_name == 'pull_request' | |
| 345 | build: | |
| 347 | 346 | runs-on: ubuntu-latest |
| 348 | 347 | |
| 349 | 348 | steps: |
| @@ -363,8 +362,23 @@ jobs: | ||
| 363 | 362 | - name: Install Dependencies |
| 364 | 363 | run: bun install |
| 365 | 364 | |
| 366 | - name: Build | |
| 365 | - name: Build application | |
| 367 | 366 | run: bun run build |
| 368 | 367 | |
| 369 | - name: Publish Commit | |
| 370 | run: ./storage/framework/scripts/publish-commit | |
| 368 | - name: Build documentation | |
| 369 | run: bun buddy build docs | |
| 370 | ||
| 371 | - name: Validate documentation | |
| 372 | run: bun run docs:validate | |
| 373 | ||
| 374 | - name: Validate UI accessibility | |
| 375 | run: bun run ui:validate | |
| 376 | ||
| 377 | - name: Validate responsive visual contracts | |
| 378 | run: bun run visual:validate | |
| 379 | ||
| 380 | - name: Validate production release artifact | |
| 381 | run: bun run release:validate | |
| 382 | ||
| 383 | - name: Verify generated files are current | |
| 384 | run: git diff --exit-code | |