code_review.yaml

name: Code Review

on:
  pull_request:
  push:
    branches:
      - main

defaults:
  run:
    shell: bash

jobs:
  changes:
    runs-on: ubuntu-latest
    if: github.event_name != 'pull_request' || github.event.pull_request.title != ${{ vars.CHANGESET_PR_TITLE }}
    permissions:
      pull-requests: read
    outputs:
      nextjswebsite: ${{ steps.filter.outputs.nextjswebsite }}
    steps:
    - name: Checkout code
      if: ${{ github.event_name != 'pull_request' }}
      # Checkout is needed if not triggered by a PR
      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3

    - uses: dorny/paths-filter@0bc4621a3135347011ad047f9ecf449bf72ce2bd # v3.0
      id: filter
      with:
        filters: |
          nextjswebsite:
            - 'apps/nextjs-website/**'

  compile:
    name: Compile project
    runs-on: ubuntu-latest
    needs: changes
    if: ${{ needs.changes.outputs.nextjswebsite == 'true' }}

    steps:
      - name: Checkout code
        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3

      - name: Setup Node.JS
        uses: ./.github/actions/setup-node

      - name: Check lock file
        run: npx -y package-lock-utd@1.1.3

      - name: Install dependencies
        run: npm ci --audit=false --fund=false

      - name: Compile
        run: npm run compile

      - name: Store in cache
        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
        id: restore-build
        with:
          path: ./*
          key: ${{ github.sha }}

  code_checks:
    name: Code checks
    runs-on: ubuntu-latest
    needs: [changes, compile]

    steps:
      - name: Restore cache
        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
        id: restore-build
        with:
          path: ./*
          key: ${{ github.sha }}

      - name: Check lint rules
        run: npm run lint

      - name: Run tests
        run: npm run test

  build_website:
    name: Build Website
    runs-on: ubuntu-latest
    strategy:
      matrix:
        # We want to make sure the env variables are set correctly
        environment: [ 'dev', 'uat', 'prod' ]
      fail-fast: false # Do not cancel any other jobs in the matrix, if a single job fails
    environment: ${{ matrix.environment }}

    needs: compile

    steps:
      - name: Restore cache
        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
        id: restore-build
        with:
          path: ./*
          key: ${{ github.sha }}

      # TODO: Add "build openNext" step?