[Snyk] Security upgrade next from 9.4.1 to 12.0.8 #402
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| pull_request: | |
| types: [opened, synchronize] | |
| name: Generate Pull Request Stats | |
| jobs: | |
| build-native-dev: | |
| name: Build dev binary for tests | |
| runs-on: ubuntu-18.04 | |
| steps: | |
| # https://github.com/actions/virtual-environments/issues/1187 | |
| - name: tune linux network | |
| run: sudo ethtool -K eth0 tx off rx off | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 25 | |
| - run: echo ::set-output name=DOCS_CHANGE::$(node skip-docs-change.js echo 'not-docs-only-change') | |
| id: docs-change | |
| - name: Setup node | |
| uses: actions/setup-node@v2 | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| with: | |
| node-version: 14 | |
| check-latest: true | |
| - name: Install | |
| uses: actions-rs/toolchain@v1 | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| with: | |
| profile: minimal | |
| toolchain: nightly-2021-11-15 | |
| - name: Cache cargo registry | |
| uses: actions/cache@v1 | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| with: | |
| path: ~/.cargo/registry | |
| key: stable-ubuntu-18.04-node@14-cargo-registry-trimmed-${{ hashFiles('**/Cargo.lock') }} | |
| - name: Cache cargo index | |
| uses: actions/cache@v1 | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| with: | |
| path: ~/.cargo/git | |
| key: stable-ubuntu-18.04-node@14-cargo-index-trimmed-${{ hashFiles('**/Cargo.lock') }} | |
| # We use week in the turbo cache key to keep the cache from infinitely growing | |
| - id: get-week | |
| run: echo ::set-output name=WEEK::$(date +%U) | |
| - name: Turbo Cache | |
| id: turbo-cache | |
| uses: actions/cache@v2 | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| with: | |
| path: .turbo | |
| key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ steps.get-week.outputs.WEEK }}-${{ github.sha }} | |
| restore-keys: | | |
| turbo-${{ github.job }}-${{ github.ref_name }}-${{ steps.get-week.outputs.WEEK }}- | |
| turbo-${{ github.job }}-canary-${{ steps.get-week.outputs.WEEK }}- | |
| # We use restore-key to pick latest cache. | |
| # We will not get exact match, but doc says | |
| # "If there are multiple partial matches for a restore key, the action returns the most recently created cache." | |
| # So we get latest cache | |
| - name: Cache built files | |
| uses: actions/cache@v2 | |
| with: | |
| path: ./packages/next-target | |
| key: next-swc-cargo-cache-ubuntu-18.04--${{ hashFiles('**/Cargo.lock') }} | |
| restore-keys: | | |
| next-swc-cargo-cache-ubuntu-18.04 | |
| # since the repo's dependencies aren't installed we need | |
| # to install napi globally | |
| - run: npm i -g @napi-rs/cli@1.2.1 | |
| - run: npm i -g turbo@1.0.28 | |
| - name: Build | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| run: turbo run build-native --cache-dir=".turbo" | |
| env: | |
| MACOSX_DEPLOYMENT_TARGET: '10.13' | |
| TURBO_TOKEN: ${{secrets.TURBO_TOKEN}} | |
| TURBO_TEAM: nextjs | |
| TURBO_PROJECT: nextjs | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v2.2.4 | |
| with: | |
| name: next-swc-dev-binary | |
| path: packages/next-swc/native/next-swc.linux-x64-gnu.node | |
| - name: Clear the cargo caches | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| run: | | |
| cargo install cargo-cache --no-default-features --features ci-autoclean | |
| cargo-cache | |
| stats: | |
| name: PR Stats | |
| needs: build-native-dev | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 25 | |
| - run: echo ::set-output name=DOCS_CHANGE::$(node skip-docs-change.js echo 'not-docs-only-change') | |
| id: docs-change | |
| - uses: actions/download-artifact@v2 | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| with: | |
| name: next-swc-dev-binary | |
| path: packages/next-swc/native | |
| - run: cp -r packages/next-swc/native .github/actions/next-stats-action/native | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} | |
| - uses: ./.github/actions/next-stats-action | |
| if: ${{ steps.docs-change.outputs.DOCS_CHANGE != 'docs only change' }} |