Fix CVEs #12551
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# This workflow will do a clean install of node dependencies at the root and check that a beachball change file has been committed. | |
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions | |
name: Beachball Check | |
on: | |
pull_request: | |
branches: | |
- dev | |
concurrency: | |
group: beachball-${{github.ref}} | |
cancel-in-progress: true | |
permissions: | |
contents: read | |
jobs: | |
beachball-check: | |
permissions: | |
contents: read # for actions/checkout to fetch code | |
pull-requests: read # for dorny/paths-filter to read pull requests | |
if: github.actor != 'dependabot[bot]' && github.head_ref != 'release-staging' && github.head_ref != '3p-release-staging' && !contains(github.head_ref, 'post-release') | |
runs-on: ubuntu-latest | |
env: | |
BEACHBALL: 1 | |
steps: | |
- uses: dorny/paths-filter@v3 | |
id: filter | |
with: | |
# Will return true if any file is not markdown and any file is in /lib | |
filters: | | |
lib: | |
- 'lib/**/**.!(md)' | |
- 'extensions/msal-node-extensions/**/**.!(md)' | |
- uses: actions/checkout@v4 | |
if: ${{ steps.filter.outputs.lib == 'true' }} | |
with: | |
fetch-depth: 0 | |
- name: Use Node.js | |
if: ${{ steps.filter.outputs.lib == 'true' }} | |
uses: actions/setup-node@v4 | |
with: | |
node-version: 18 | |
- name: Install beachball | |
if: ${{ steps.filter.outputs.lib == 'true' }} | |
run: npm ci --workspaces=false | |
- name: Run Beachball Check command | |
if: ${{ steps.filter.outputs.lib == 'true' }} | |
run: npm run beachball:check |