[Snyk] Security upgrade puppeteer-core from 13.7.0 to 19.7.3 #17
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [master] | |
| pull_request: # run on all PRs, not just PRs to a particular branch | |
| jobs: | |
| # `basics` includes all non-smoke and non-unit CI | |
| basics: | |
| runs-on: ubuntu-latest | |
| # A few steps are duplicated across all jobs. Can be done better when this feature lands: | |
| # https://gh.neting.ccmunity/t/reusing-sharing-inheriting-steps-between-jobs-declarations/16851 | |
| # https://github.com/actions/runner/issues/438 | |
| steps: | |
| - name: git clone | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 100 | |
| - run: bash lighthouse-core/scripts/github-actions-commit-range.sh | |
| env: | |
| GITHUB_CONTEXT_PR_BASE_SHA: ${{ github.event.pull_request.base.sha }} | |
| GITHUB_CONTEXT_BASE_SHA: ${{ github.event.before }} | |
| - name: Use Node.js 14.x | |
| uses: actions/setup-node@v1 | |
| with: | |
| node-version: 14.x | |
| - run: yarn install --frozen-lockfile --network-timeout 1000000 | |
| - run: yarn build-all | |
| # Run pptr tests using ToT Chrome instead of stable default. | |
| - name: Define ToT chrome path | |
| run: echo "CHROME_PATH=/home/runner/chrome-linux-tot/chrome" >> $GITHUB_ENV | |
| - name: Install Chrome ToT | |
| working-directory: /home/runner | |
| run: bash $GITHUB_WORKSPACE/lighthouse-core/scripts/download-chrome.sh && mv chrome-linux chrome-linux-tot | |
| # Run tests that require headfull Chrome. | |
| - run: sudo apt-get install xvfb | |
| - name: yarn test-clients | |
| run: xvfb-run --auto-servernum bash $GITHUB_WORKSPACE/.github/scripts/test-retry.sh yarn test-clients | |
| - name: yarn test-docs | |
| run: xvfb-run --auto-servernum yarn test-docs | |
| - name: yarn test-viewer | |
| run: xvfb-run --auto-servernum bash $GITHUB_WORKSPACE/.github/scripts/test-retry.sh yarn test-viewer | |
| - name: yarn test-treemap | |
| run: xvfb-run --auto-servernum bash $GITHUB_WORKSPACE/.github/scripts/test-retry.sh yarn test-treemap | |
| - run: yarn diff:sample-json | |
| - run: yarn diff:flow-sample-json | |
| - run: yarn type-check | |
| - run: yarn lint | |
| - run: yarn test-lantern | |
| - run: yarn test-legacy-javascript | |
| - run: yarn i18n:checks | |
| - run: yarn dogfood-lhci | |
| - run: bash lighthouse-core/scripts/copy-util-commonjs.sh | |
| # Fail if any changes were written to any source files or generated untracked files (ex, from: build/build-cdt-lib.js). | |
| - run: git add -A && git diff --cached --exit-code | |
| # buildtracker needs history and a common merge commit. | |
| - name: Fixup git history (for buildtracker) | |
| run: bash $GITHUB_WORKSPACE/.github/scripts/git-get-shared-history.sh | |
| env: | |
| # https://buildtracker.dev/docs/guides/github-actions#configuration | |
| BT_API_AUTH_TOKEN: ${{ secrets.BT_API_AUTH_TOKEN }} | |
| - name: Store in buildtracker | |
| # TODO(paulirish): Don't allow this to fail the build. https://github.com/paularmstrong/build-tracker/issues/200 | |
| run: yarn bt-cli upload-build || true | |
| env: | |
| # https://buildtracker.dev/docs/guides/github-actions#configuration | |
| BT_API_AUTH_TOKEN: ${{ secrets.BT_API_AUTH_TOKEN }} | |
| - name: Upload dist | |
| uses: actions/upload-artifact@v1 | |
| with: | |
| name: dist | |
| path: dist/ |