chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#1326) #3236
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Code Health | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| run-tests: | |
| name: Run MongoDB tests | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| strategy: | |
| matrix: | |
| os: [ubuntu-latest, macos-latest, windows-latest] | |
| node-version: ["22"] | |
| include: | |
| - os: ubuntu-latest | |
| node-version: "24" | |
| - os: ubuntu-latest | |
| node-version: "26" | |
| fail-fast: false | |
| continue-on-error: true | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - uses: GitHubSecurityLab/actions-permissions/monitor@v1 | |
| if: matrix.os == 'ubuntu-latest' | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: docker/setup-docker-action@v5 | |
| if: matrix.os == 'ubuntu-latest' | |
| name: Setup Docker Environment | |
| with: | |
| set-host: true | |
| - uses: pnpm/action-setup@v5 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Run tests | |
| run: pnpm test | |
| env: | |
| SKIP_ATLAS_INTEGRATION_TESTS: "true" | |
| SKIP_ATLAS_LOCAL_TESTS: "true" | |
| MDB_MONGOT_PASSWORD: ${{ secrets.TEST_MDB_MONGOT_PASSWORD }} | |
| MDB_VOYAGE_API_KEY: ${{ secrets.TEST_MDB_MCP_VOYAGE_API_KEY }} | |
| - name: Upload test results | |
| if: always() && matrix.os == 'ubuntu-latest' && matrix.node-version == '22' | |
| uses: actions/upload-artifact@v7.0.1 | |
| with: | |
| name: test-results | |
| path: coverage/lcov.info | |
| run-atlas-tests: | |
| name: Run Atlas tests | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: GitHubSecurityLab/actions-permissions/monitor@v1 | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: pnpm/action-setup@v5 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version-file: package.json | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Run tests | |
| env: | |
| MDB_MCP_API_CLIENT_ID: ${{ secrets.TEST_ATLAS_CLIENT_ID }} | |
| MDB_MCP_API_CLIENT_SECRET: ${{ secrets.TEST_ATLAS_CLIENT_SECRET }} | |
| MDB_MCP_API_BASE_URL: ${{ vars.TEST_ATLAS_BASE_URL }} | |
| run: pnpm test tests/integration/tools/atlas/ | |
| - name: Upload test results | |
| uses: actions/upload-artifact@v7.0.1 | |
| if: always() | |
| with: | |
| name: atlas-test-results | |
| path: coverage/lcov.info | |
| run-atlas-mcp-remote: | |
| name: Run Atlas MCP Remote E2E tests | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: GitHubSecurityLab/actions-permissions/monitor@v1 | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: pnpm/action-setup@v5 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version-file: package.json | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Run Remote MCP E2E tests | |
| env: | |
| REMOTE_MCP_E2E_CLIENT_ID: ${{ secrets.TEST_REMOTE_MCP_CLIENT_ID }} | |
| REMOTE_MCP_E2E_CLIENT_SECRET: ${{ secrets.TEST_REMOTE_MCP_CLIENT_SECRET }} | |
| REMOTE_MCP_E2E_BASE_URL: ${{ vars.TEST_REMOTE_MCP_BASE_URL }} | |
| run: pnpm --filter mongodb-atlas-mcp-remote test src/e2e.test.ts | |
| run-atlas-local-tests: | |
| name: Run Atlas Local tests | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: GitHubSecurityLab/actions-permissions/monitor@v1 | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: pnpm/action-setup@v5 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version-file: package.json | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Pre-pull Atlas Local images | |
| run: | | |
| docker pull mongodb/mongodb-atlas-local:preview & | |
| docker pull mongodb/mongodb-atlas-local:latest & | |
| wait | |
| - name: Run tests | |
| run: pnpm test tests/integration/tools/atlas-local/ | |
| - name: Upload test results | |
| uses: actions/upload-artifact@v7.0.1 | |
| if: always() | |
| with: | |
| name: atlas-local-test-results | |
| path: coverage/lcov.info | |
| run-browser-tests: | |
| name: Run Browser tests | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: GitHubSecurityLab/actions-permissions/monitor@v1 | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: pnpm/action-setup@v5 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version-file: package.json | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Install Playwright Chromium | |
| run: pnpm --filter browser run install:browser | |
| - name: Run browser tests | |
| run: pnpm run test:browser | |
| - name: Upload test results | |
| if: always() | |
| uses: actions/upload-artifact@v7.0.1 | |
| with: | |
| name: browser-test-results | |
| path: coverage/tests/browser/lcov.info | |
| coverage: | |
| name: Report Coverage | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| runs-on: ubuntu-latest | |
| needs: | |
| [run-tests, run-atlas-tests, run-atlas-local-tests, run-browser-tests] | |
| steps: | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: pnpm/action-setup@v5 | |
| - uses: actions/setup-node@v6 | |
| with: | |
| node-version-file: package.json | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Download test results | |
| uses: actions/download-artifact@v8 | |
| with: | |
| name: test-results | |
| path: coverage/mongodb | |
| - name: Download atlas test results | |
| uses: actions/download-artifact@v8 | |
| with: | |
| name: atlas-test-results | |
| path: coverage/atlas | |
| - name: Download atlas local test results | |
| uses: actions/download-artifact@v8 | |
| with: | |
| name: atlas-local-test-results | |
| path: coverage/atlas-local | |
| - name: Download browser test results | |
| uses: actions/download-artifact@v8 | |
| with: | |
| name: browser-test-results | |
| path: coverage/browser | |
| - name: Merge coverage reports | |
| run: | | |
| pnpm dlx lcov-result-merger@5.0.1 "coverage/*/lcov.info" "coverage/lcov.info" | |
| - name: Coveralls GitHub Action | |
| uses: coverallsapp/github-action@v2.3.7 | |
| with: | |
| file: coverage/lcov.info | |
| run-git-secrets: | |
| name: Run git secrets | |
| if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: GitHubSecurityLab/actions-permissions/monitor@v1 | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - name: Install dependencies | |
| run: | | |
| sudo apt-get install -y git-secrets | |
| - name: Run git-secrets | |
| run: git-secrets --register-aws && git-secrets --scan |