build(deps): bump @angular/core from 21.2.18 to 21.2.19 in /web/frontend #627
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2026 Google LLC | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, | |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| # See the License for the specific language governing permissions and | |
| # limitations under the License. | |
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| # Required before the merge queue can be turned on. A queued pull request is | |
| # tested on a temporary `gh-readonly-queue/...` ref, and GitHub reports the | |
| # result against the `merge_group` event -- so a required check that does not | |
| # listen for this event never reports, and every queued pull request waits | |
| # forever. Adding the trigger is inert while the queue is disabled: no | |
| # merge_group events are produced, so this changes nothing until the setting | |
| # is flipped. That is deliberate -- it has to land first. | |
| merge_group: | |
| branches: [main] | |
| # Default to least privilege; individual jobs may grant more. | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ci-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| build-and-test: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| # Nothing in this workflow pushes back to the repository, so the | |
| # checkout credential is not needed after the initial fetch and | |
| # should not persist into later steps or artifacts. | |
| persist-credentials: false | |
| - name: Set up Go | |
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| go-version: '1.25' | |
| - name: Check license headers | |
| # Year range tolerates files written 2024-2030 without yearly churn. | |
| run: | | |
| go install github.com/google/addlicense@latest | |
| addlicense -check -y "2024-2030" -ignore 'gen_proto/**' -ignore 'web/**/node_modules/**' -ignore 'web/**/dist/**' . | |
| - name: Set up Node.js | |
| uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 | |
| with: | |
| # Single source of truth: .nvmrc. The Dockerfile and | |
| # cloudbuild-bootstrap.yaml pin the same major, and | |
| # scripts/check-node-versions.sh enforces that they agree. | |
| node-version-file: '.nvmrc' | |
| - name: Set up Python | |
| uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 | |
| with: | |
| python-version: '3.13' | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0 | |
| - name: Build Go | |
| run: go build ./... | |
| - name: Test Go | |
| run: go test ./... -short -count=1 | |
| - name: Build Frontend | |
| working-directory: web/frontend | |
| run: | | |
| npm ci | |
| npm run build | |
| - name: Build Admin Dashboard | |
| working-directory: web/admin-dash | |
| run: | | |
| npm ci | |
| npm run build | |
| - name: Build Tester UI | |
| working-directory: web/tester | |
| run: | | |
| npm ci | |
| npm run build | |
| - name: Install Python deps | |
| run: uv sync --frozen | |
| - name: Install lint tools | |
| # golangci-lint is pinned; install pattern mirrors `addlicense` above. | |
| # pre-commit is required by the `lint-configs` Makefile target. | |
| run: | | |
| go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.64.8 | |
| uv tool install pre-commit | |
| - name: Lint | |
| # Single source of truth: `make lint` runs Go, Python (ruff), pyright, | |
| # and config (yaml/json) linters. Matches what contributors run locally. | |
| run: make lint | |
| - name: Test Python | |
| env: | |
| GOOGLE_CLOUD_PROJECT: test-project | |
| GOOGLE_CLOUD_LOCATION: global | |
| run: uv run pytest agents/ -x -q -m "not slow" |