v1961: Update Convex to 1.44.0 (samebase/samebase#1515) #15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| jobs: | |
| supply-chain: | |
| name: supply-chain | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm | |
| uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 | |
| with: | |
| version: 11.1.1 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6 | |
| with: | |
| node-version: 24.x | |
| cache: pnpm | |
| - name: Install dependencies without lifecycle scripts | |
| run: pnpm install --frozen-lockfile --ignore-scripts | |
| - name: Audit package signatures | |
| run: pnpm audit signatures | |
| - name: Audit production dependencies | |
| run: pnpm audit --prod | |
| - name: Reject critical development-tool vulnerabilities | |
| run: pnpm audit --dev --audit-level=critical | |
| check: | |
| name: check | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| needs: supply-chain | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Setup pnpm | |
| uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 | |
| with: | |
| version: 11.1.1 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6 | |
| with: | |
| node-version: 24.x | |
| cache: pnpm | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Run the Cloudflare build | |
| # The CI artifact is discarded. Convex supplies the real deployment URL | |
| # during development and provider builds. | |
| env: | |
| VITE_CONVEX_URL: http://127.0.0.1:3210 | |
| run: pnpm run build |