Use devenv in Github Action

.github/actions/devenv/action.yml

@@ -0,0 +1,27 @@
+name: Setup devenv
+
+runs:
+  using: "composite"
+  steps:
+    - name: Install Nix
+      uses: nixbuild/nix-quick-install-action@v26
+
+    - name: Restore and cache Nix store
+      uses: nix-community/cache-nix-action@v4
+      with:
+        key: cache-${{ runner.os }}-nix-store-${{ hashFiles('**/*.nix') }}
+        restore-keys: |
+          cache-${{ runner.os }}-nix-store-
+
+    - name: Setup Cachix
+      uses: cachix/cachix-action@v12
+      with:
+        name: devenv
+
+    - name: Install devenv.sh
+      shell: bash
+      run: nix profile install tarball+https://install.devenv.sh/python-rewrite
+
+    - name: Build the devenv shell
+      shell: bash
+      run: devenv ci

.github/actions/install/action.yml

@@ -1,20 +1,10 @@
-name: Install
+name: Install dependencies
 
 runs:
   using: "composite"
   steps:
-    - name: Install Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: 18
-
-    - name: Install pnpm
-      uses: pnpm/action-setup@v2
-      with:
-        run_install: false
-
     - name: Get pnpm store directory
-      shell: bash
+      shell: devenv shell bash -e {0}
       run: |
         echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
 
@@ -27,8 +17,5 @@ runs:
           ${{ runner.os }}-pnpm-store-
 
     - name: Install dependencies
-      shell: bash
+      shell: devenv shell bash -e {0}
       run: pnpm install
-
-    - name: Setup environment variables
-      uses: ./.github/actions/setup-env

.github/actions/setup-env/action.yml

@@ -3,13 +3,6 @@ name: Setup environment variables
 runs:
   using: "composite"
   steps:
-    # TODO: use devenv or npm or cache the binary
-    - name: Install Infisical CLI
-      shell: bash
-      run: |
-        curl -1sLf 'https://dl.cloudsmith.io/public/infisical/infisical-cli/setup.deb.sh' | sudo -E bash
-        sudo apt-get update && sudo apt-get install -y infisical
-
     - name: Pull .env files
-      shell: bash
+      shell: devenv shell bash -e {0}
       run: pnpm env:pull

.github/actions/setup/action.yml

@@ -0,0 +1,13 @@
+name: Setup
+
+runs:
+  using: "composite"
+  steps:
+    - name: Setup devenv
+      uses: ./.github/actions/devenv
+
+    - name: Install dependencies
+      uses: ./.github/actions/install
+
+    - name: Setup environment variables
+      uses: ./.github/actions/setup-env

.github/renovate.json

@@ -7,5 +7,11 @@
   "automerge": true,
   "timezone": "Europe/Paris",
   "schedule": ["after 9am and before 10am"],
-  "postUpdateOptions": ["pnpmDedupe"]
+  "postUpdateOptions": ["pnpmDedupe"],
+  "packageRules": [
+    {
+      "matchPackagePatterns": ["@playwright/*"],
+      "allowedVersions": "=1.38.0"
+    }
+  ]
 }

.github/workflows/tests.yml

@@ -14,6 +14,10 @@ concurrency:
   group: tests-${{ github.head_ref }}
   cancel-in-progress: true
 
+defaults:
+  run:
+    shell: devenv shell bash -e {0}
+
 env:
   INFISICAL_ENV: ${{ vars.INFISICAL_ENV }}
   INFISICAL_TOKEN: ${{ secrets.INFISICAL_TOKEN }}
@@ -29,8 +33,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Type check
         run: pnpm type-check
@@ -46,8 +50,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Lint
         run: pnpm lint
@@ -63,8 +67,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Lint monorepo
         run: pnpm lint-monorepo
@@ -80,8 +84,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Run unit and integration tests
         run: pnpm test
@@ -97,11 +101,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
-
-      - name: Setup Playwright
-        uses: ./.github/actions/setup-playwright
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Run components tests
         run: pnpm test:components
@@ -117,11 +118,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
-
-      - name: Setup Playwright
-        uses: ./.github/actions/setup-playwright
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Run Storybook tests
         run: pnpm test:storybook
@@ -137,11 +135,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
-
-      - name: Setup Playwright
-        uses: ./.github/actions/setup-playwright
+      - name: Setup
+        uses: ./.github/actions/setup
 
       - name: Run E2E tests
         run: pnpm test:e2e

.github/workflows/update-cache.yml

@@ -21,8 +21,5 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Install
-        uses: ./.github/actions/install
-
-      - name: Setup Playwright
-        uses: ./.github/actions/setup-playwright
+      - name: Setup
+        uses: ./.github/actions/setup

apps/web/package.json

@@ -25,8 +25,8 @@
   },
   "devDependencies": {
     "@acme/eslint-config": "workspace:*",
-    "@playwright/experimental-ct-react": "1.39.0",
-    "@playwright/test": "1.39.0",
+    "@playwright/experimental-ct-react": "1.38.0",
+    "@playwright/test": "1.38.0",
     "@storybook/addon-a11y": "7.5.1",
     "@storybook/addon-essentials": "7.5.1",
     "@storybook/addon-interactions": "7.5.1",
@@ -44,7 +44,7 @@
     "axe-playwright": "1.2.3",
     "eslint": "8.52.0",
     "start-server-and-test": "2.0.1",
-    "storybook": "^7.4.6",
+    "storybook": "^7.5.1",
     "typescript": "5.2.2",
     "vite": "4.5.0",
     "vite-bundle-visualizer": "0.10.0"