trix/.github/workflows/ci.yml

name: CI

concurrency:
  group: "${{github.workflow}}-${{github.ref}}"
  cancel-in-progress: true

on:
  workflow_dispatch:
  push:
    branches: [ main ]
  pull_request:
    types: [opened, synchronize]
    branches: [ '*' ]

permissions: {}

env:
  SAUCE_USERNAME: ${{ secrets.SAUCE_USERNAME }}
  SAUCE_ACCESS_KEY: ${{ secrets.SAUCE_ACCESS_KEY }}
  SAUCE_REGION: us
  SAUCE_TUNNEL_IDENTIFIER: trix-${{ github.run_id }}

jobs:
  lint-actions:
    name: GitHub Actions audit
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false

      - name: Run actionlint
        uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12

      - name: Run zizmor
        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
        with:
          advanced-security: false

  build:
    name: Browser tests
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false
      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 18
          cache: "yarn"
      - name: Install Dependencies
        run: yarn install --frozen-lockfile
      - name: Start Sauce Connect
        if: ${{ env.SAUCE_ACCESS_KEY != '' }}
        uses: saucelabs/sauce-connect-action@cb88b508c6f9ff4d84490093733315dbd55de022 # v3
        with:
          username: ${{ env.SAUCE_USERNAME }}
          accessKey: ${{ env.SAUCE_ACCESS_KEY }}
          tunnelName: ${{ env.SAUCE_TUNNEL_IDENTIFIER }}
          region: ${{ env.SAUCE_REGION }}
          proxyLocalhost: allow
      - name: Install Playwright Browsers
        if: ${{ env.SAUCE_ACCESS_KEY == '' }}
        run: npx playwright install --with-deps chromium
      - run: bin/ci
      - name: Fail when generated npm changes are not checked-in
        run: |
          git update-index --refresh && git diff-index --quiet HEAD --

  rails-tests:
    name: Downstream Rails integration tests
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false
      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 18
          cache: "yarn"
      - uses: ruby/setup-ruby-pkgs@2233d39c1315c667a2970436418b520a6300124e # v1.33.5
        with:
          ruby-version: "3.4"
          apt-get: libvips-tools
      - name: Install Dependencies
        run: yarn install --frozen-lockfile
      - name: Packaging
        run: yarn build
      - name: Clone Rails
        run: git clone --depth=1 https://github.com/rails/rails
      - name: Configure Rails
        run: |
          cd rails
          yarn install --frozen-lockfile
          bundle add action_text-trix --path ".."
          bundle show --paths action_text-trix
      - name: Action Text tests
        env:
          RACK_ENV: test # see https://github.com/rails/rails/issues/56563
        run: |
          cd rails/actiontext
          bundle exec rake test test:system
  action_text-trix:
    name: Action Text tests
    runs-on: ubuntu-latest
    permissions:
      contents: read
    strategy:
      fail-fast: false
      matrix:
        include:
          - ruby: "3.2"
            rails_branch: 7-2-stable
          - ruby: "3.3"
            rails_branch: 7-2-stable
          - ruby: "3.4"
            rails_branch: 7-2-stable

          - ruby: "3.2"
            rails_branch: 8-0-stable
          - ruby: "3.3"
            rails_branch: 8-0-stable
          - ruby: "3.4"
            rails_branch: 8-0-stable

          - ruby: "3.2"
            rails_branch: 8-1-stable
          - ruby: "3.3"
            rails_branch: 8-1-stable
          - ruby: "3.4"
            rails_branch: 8-1-stable
          - ruby: "4.0"
            rails_branch: 8-1-stable

          - ruby: "3.3"
            rails_branch: main
            experimental: true
          - ruby: "3.4"
            rails_branch: main
            experimental: true
          - ruby: "4.0"
            rails_branch: main
            experimental: true

          - ruby: head
            rails_branch: main
            experimental: true
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false
      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 18
          cache: "yarn"
      - uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
        env:
          RAILS_BRANCH: ${{ matrix.rails_branch }}
        with:
          working-directory: "./action_text-trix"
          ruby-version: ${{ matrix.ruby }}
          bundler-cache: true
      - name: Run tests
        env:
          RAILS_BRANCH: ${{ matrix.rails_branch }}
        continue-on-error: ${{ matrix.experimental || false }}
        working-directory: "./action_text-trix"
        run: bin/rails test:all