Prod deployment

.docker-hub/frontend/Dockerfile

@@ -1,5 +1,19 @@
-# build stage
-FROM node:lts-alpine AS build-stage
+# pdf build stage
+FROM node:lts-alpine AS pdf-build-stage
+
+COPY common /common
+
+# Build the pdf module
+COPY pdf /pdf
+WORKDIR /pdf
+RUN npm ci && npm run build
+
+# frontend build stage
+FROM node:lts-alpine AS frontend-build-stage
+ARG SENTRY_AUTH_TOKEN
+ARG SENTRY_ORG
+ARG SENTRY_FRONTEND_PROJECT
+ARG SENTRY_RELEASE_NAME
 
 COPY common /common
 
@@ -11,13 +25,21 @@ COPY frontend/scripts ./scripts
 # so they do not increase the image layer size
 RUN apk --no-cache add --virtual native-deps g++ make python3 git && npm ci && apk del native-deps
 COPY frontend .
+COPY --from=pdf-build-stage /pdf/dist ./src/pdf
+COPY --from=pdf-build-stage /pdf/src/assets/fonts/Inter ./src/assets/fonts/Inter
+
+ENV SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN
+ENV SENTRY_ORG=$SENTRY_ORG
+ENV SENTRY_FRONTEND_PROJECT=$SENTRY_FRONTEND_PROJECT
+ENV SENTRY_RELEASE_NAME=$SENTRY_RELEASE_NAME
+
 RUN npm run build
 
 # production stage
 FROM nginx:stable-alpine as production-stage
 RUN mkdir /app
 WORKDIR /app
-COPY --from=build-stage /app/dist /app
+COPY --from=frontend-build-stage /app/dist /app
 COPY .docker-hub/frontend/nginx.conf /etc/nginx/nginx.conf
 COPY .docker-hub/frontend/docker-entrypoint.d/* /docker-entrypoint.d/
 RUN chmod -R +x /docker-entrypoint.d/

.docker-hub/print/Dockerfile

@@ -1,19 +1,29 @@
 # build stage
-FROM node:20.5.1 AS build-stage
+FROM node:20.8.1 AS build-stage
+ARG SENTRY_AUTH_TOKEN
+ARG SENTRY_ORG
+ARG SENTRY_PRINT_PROJECT
+ARG SENTRY_RELEASE_NAME
 
 COPY common /common
 
 WORKDIR /app
 
 COPY print/package*.json ./
+
+ENV SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN
+ENV SENTRY_ORG=$SENTRY_ORG
+ENV SENTRY_PRINT_PROJECT=$SENTRY_PRINT_PROJECT
+ENV SENTRY_RELEASE_NAME=$SENTRY_RELEASE_NAME
+
 RUN npm ci
 
 COPY print .
 ENV NODE_OPTIONS=--openssl-legacy-provider
 RUN npm run build
 
 # production stage
-FROM node:20.5.1 AS production-stage
+FROM node:20.8.1 AS production-stage
 WORKDIR /app
 
 COPY --from=build-stage /app/node_modules ./node_modules

.github/workflows/check-dependencies.yml

@@ -2,27 +2,28 @@ name: Dependency Check
 
 on:
   push:
+    branches-ignore:
+      - gh-readonly-queue/**
   pull_request:
   merge_group:
   workflow_dispatch:
   schedule:
-    - cron: "42 3 * * *"
+    - cron: '42 3 * * *'
 
 env:
   USER_ID: 1001
 
 jobs:
   api-check-dependencies:
-    name: "Api Platform check dependencies"
+    name: 'Api Platform check dependencies'
     runs-on: ubuntu-latest
     steps:
-
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.2.8'
-          tools: composer:2.5.0
+          php-version: '8.2.11'
+          tools: composer:2.6.0
           coverage: xdebug
 
       - run: composer update --lock --no-interaction --no-plugins --no-scripts --prefer-dist

.github/workflows/continuous-integration-optional.yml

@@ -2,6 +2,8 @@ name: CI (optional checks)
 
 on:
   push:
+    branches-ignore:
+      - gh-readonly-queue/**
   pull_request:
   merge_group:
   workflow_dispatch:
@@ -11,12 +13,12 @@ jobs:
     name: 'Validate Api Platform composer.lock'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.2.8'
-          tools: composer:2.5.0
+          php-version: '8.2.11'
+          tools: composer:2.6.0
           coverage: xdebug
 
       - run: composer validate -n --no-check-all --no-check-publish --strict
@@ -26,20 +28,20 @@ jobs:
     name: 'Lint: API (psalm)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.2.8'
-          tools: composer:2.5.0
+          php-version: '8.2.11'
+          tools: composer:2.6.0
           coverage: xdebug
 
       - name: Get Composer Cache Directory
         id: composer-cache
         run: 'echo "dir=$(composer config cache-files-dir)" | tr -d "\n" >> $GITHUB_OUTPUT'
         working-directory: api
 
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: ${{ steps.composer-cache.outputs.dir }}
           key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -56,20 +58,20 @@ jobs:
     name: 'Lint: API (phpstan)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.2.8'
-          tools: composer:2.5.0
+          php-version: '8.2.11'
+          tools: composer:2.6.0
           coverage: xdebug
 
       - name: Get Composer Cache Directory
         id: composer-cache
         run: 'echo "dir=$(composer config cache-files-dir)" | tr -d "\n" >> $GITHUB_OUTPUT'
         working-directory: api
 
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: ${{ steps.composer-cache.outputs.dir }}
           key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -81,7 +83,7 @@ jobs:
 
       - run: composer phpstan
         working-directory: api
-  
+
   api-validate-migrations:
     name: 'API: validate migrations'
     runs-on: ubuntu-latest
@@ -104,20 +106,20 @@ jobs:
           --health-retries 5
 
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.2.8'
-          tools: composer:2.5.0
+          php-version: '8.2.11'
+          tools: composer:2.6.0
           coverage: xdebug
 
       - name: Get Composer Cache Directory
         id: composer-cache
         run: 'echo "dir=$(composer config cache-files-dir)" | tr -d "\n" >> $GITHUB_OUTPUT'
         working-directory: api
 
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
         with:
           path: ${{ steps.composer-cache.outputs.dir }}
           key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}