fix: http and websocket proxy endpoints lack authent... in index.ts #2960
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| # Cancel in-progress runs for pull requests when developers push | |
| # additional changes, and serialize builds in branches. | |
| # https://docs.github.com/en/actions/using-jobs/using-concurrency#example-using-concurrency-to-cancel-any-in-progress-job-or-run | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: ${{ github.event_name == 'pull_request' }} | |
| jobs: | |
| changes: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| ci: ${{ steps.filter.outputs.ci }} | |
| code: ${{ steps.filter.outputs.code }} | |
| deps: ${{ steps.filter.outputs.deps }} | |
| docs: ${{ steps.filter.outputs.docs }} | |
| helm: ${{ steps.filter.outputs.helm }} | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1 | |
| id: filter | |
| with: | |
| filters: | | |
| ci: | |
| - ".github/**" | |
| - "ci/**" | |
| docs: | |
| - "docs/**" | |
| - "README.md" | |
| - "CHANGELOG.md" | |
| helm: | |
| - "ci/helm-chart/**" | |
| code: | |
| - "src/**" | |
| - "test/**" | |
| deps: | |
| - "lib/**" | |
| - "patches/**" | |
| - "package-lock.json" | |
| - "test/package-lock.json" | |
| - id: debug | |
| run: | | |
| echo "${{ toJSON(steps.filter )}}" | |
| prettier: | |
| name: Run prettier check | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - run: npx prettier --check . | |
| doctoc: | |
| name: Doctoc markdown files | |
| runs-on: ubuntu-22.04 | |
| needs: changes | |
| if: needs.changes.outputs.docs == 'true' | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - run: npm run doctoc | |
| lint-helm: | |
| name: Lint Helm chart | |
| runs-on: ubuntu-22.04 | |
| needs: changes | |
| if: needs.changes.outputs.helm == 'true' | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| version: "v3.19.2" | |
| - run: helm plugin install https://github.com/instrumenta/helm-kubeval | |
| - run: helm kubeval ci/helm-chart | |
| lint-ts: | |
| name: Lint TypeScript files | |
| runs-on: ubuntu-22.04 | |
| needs: changes | |
| if: needs.changes.outputs.code == 'true' | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - run: npm run lint:ts | |
| lint-actions: | |
| name: Lint GitHub Actions | |
| runs-on: ubuntu-latest | |
| needs: changes | |
| if: needs.changes.outputs.ci == 'true' | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - name: Check workflow files | |
| run: | | |
| bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash) 1.7.9 | |
| ./actionlint -color -shellcheck= -ignore "softprops/action-gh-release" | |
| shell: bash | |
| test-unit: | |
| name: Run unit tests | |
| runs-on: ubuntu-22.04 | |
| needs: changes | |
| if: needs.changes.outputs.code == 'true' | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - run: npm run test:unit | |
| - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 | |
| if: success() | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| build: | |
| name: linux-x64 | |
| runs-on: ubuntu-22.04 | |
| env: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| DISABLE_V8_COMPILE_CACHE: 1 | |
| VERSION: 0.0.0 | |
| VSCODE_TARGET: linux-x64 | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| ELECTRON_SKIP_BINARY_DOWNLOAD: 1 | |
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1 | |
| steps: | |
| - run: sudo apt update && sudo apt install -y libkrb5-dev | |
| - uses: awalsh128/cache-apt-pkgs-action@553a35bb8ebd9fcabcb1c9451aa4c98e1b4ca8a9 # latest | |
| with: | |
| packages: quilt | |
| version: 1.0 | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| with: | |
| submodules: true | |
| - run: quilt push -a | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - run: npm run build | |
| # Get Code's git hash. When this changes it means the content is | |
| # different and we need to rebuild. | |
| - name: Get latest lib/vscode rev | |
| id: vscode-rev | |
| run: echo "rev=$(git rev-parse HEAD:./lib/vscode)" >> $GITHUB_OUTPUT | |
| # We need to rebuild when we have a new version of Code, when any of the | |
| # patches changed, or when the code-server version changes (since it gets | |
| # embedded into the code). Use VSCODE_CACHE_VERSION to force a rebuild. | |
| - name: Fetch prebuilt linux-x64 Code package from cache | |
| id: cache-vscode | |
| uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| with: | |
| path: lib/vscode-reh-web-linux-x64 | |
| key: vscode-linux-x64-package-${{ secrets.VSCODE_CACHE_VERSION }}-${{ steps.vscode-rev.outputs.rev }}-${{ hashFiles('patches/*.diff', 'ci/build/build-vscode.sh') }} | |
| - name: Build vscode | |
| if: steps.cache-vscode.outputs.cache-hit != 'true' | |
| run: | | |
| pushd lib/vscode | |
| npm ci | |
| popd | |
| npm run build:vscode | |
| # Push up an artifact containing the linux-x64 release. | |
| - run: KEEP_MODULES=1 npm run release | |
| - run: tar -czf package.tar.gz release | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| with: | |
| name: linux-x64-package | |
| path: ./package.tar.gz | |
| test-e2e: | |
| name: Run e2e tests | |
| runs-on: ubuntu-22.04 | |
| env: | |
| LOG_LEVEL: debug | |
| needs: [changes, build] | |
| if: needs.changes.outputs.code == 'true' || needs.changes.outputs.deps == 'true' || needs.changes.outputs.ci == 'true' | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - name: Install Playwright OS dependencies | |
| run: | | |
| ./test/node_modules/.bin/playwright install-deps | |
| ./test/node_modules/.bin/playwright install | |
| - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 | |
| with: | |
| name: linux-x64-package | |
| - run: tar -xzf package.tar.gz | |
| - run: CODE_SERVER_TEST_ENTRY=./release npm run test:e2e | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| if: always() | |
| with: | |
| name: failed-test-videos | |
| path: ./test/test-results | |
| test-e2e-proxy: | |
| name: Run e2e tests behind proxy | |
| runs-on: ubuntu-22.04 | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| LOG_LEVEL: debug | |
| needs: [changes, build] | |
| if: needs.changes.outputs.code == 'true' || needs.changes.outputs.deps == 'true' || needs.changes.outputs.ci == 'true' | |
| steps: | |
| - name: Cache Caddy | |
| uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| id: caddy-cache | |
| with: | |
| path: | | |
| ~/.cache/caddy | |
| key: cache-caddy-2.5.2 | |
| - name: Install Caddy | |
| if: steps.caddy-cache.outputs.cache-hit != 'true' | |
| run: | | |
| gh release download v2.5.2 --repo caddyserver/caddy --pattern "caddy_2.5.2_linux_amd64.tar.gz" | |
| mkdir -p ~/.cache/caddy | |
| tar -xzf caddy_2.5.2_linux_amd64.tar.gz --directory ~/.cache/caddy | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version-file: .node-version | |
| cache: npm | |
| cache-dependency-path: | | |
| package-lock.json | |
| test/package-lock.json | |
| - run: SKIP_SUBMODULE_DEPS=1 npm ci | |
| - name: Install Playwright OS dependencies | |
| run: | | |
| ./test/node_modules/.bin/playwright install-deps | |
| ./test/node_modules/.bin/playwright install | |
| - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 | |
| with: | |
| name: linux-x64-package | |
| - run: tar -xzf package.tar.gz | |
| - run: ~/.cache/caddy/caddy start --config ./ci/Caddyfile | |
| - run: CODE_SERVER_TEST_ENTRY=./release npm run test:e2e:proxy | |
| - run: ~/.cache/caddy/caddy stop --config ./ci/Caddyfile | |
| if: always() | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 | |
| if: always() | |
| with: | |
| name: failed-test-videos-proxy | |
| path: ./test/test-results |