From 2370b0691360c8b1f1b806a6ffa8499a0c99a8c3 Mon Sep 17 00:00:00 2001 From: Aneurin Barker Snook Date: Sat, 5 Sep 2026 10:39:19 +0100 Subject: [PATCH] Add frontend build and dependency audits to CI Nothing previously checked that a PR still produces a working frontend build -- add a job that type-checks and builds the Vue app. Also run composer audit / npm audit so known CVEs in dependencies fail the build rather than going unnoticed. Co-Authored-By: Claude Sonnet 5 --- .gitea/workflows/ci.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index a704ea5..ff67007 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -23,5 +23,26 @@ jobs: - name: Install dependencies run: composer install --no-progress --prefer-dist + - name: Audit dependencies + run: composer audit + - name: Run tests run: vendor/bin/phpunit + + frontend-build: + runs-on: ubuntu-latest + container: node:24-alpine + defaults: + run: + working-directory: web + steps: + - uses: actions/checkout@v4 + + - name: Install dependencies + run: npm ci + + - name: Audit dependencies + run: npm audit --audit-level=high + + - name: Type-check and build + run: npm run build