Skip to content

Update CI actions and remove unused imports #2402

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MarceloRGonc merged 7 commits into from
Jul 23, 2026
+243 −230
Merged

Update CI actions and remove unused imports #2402

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
336928b
WIP
MarceloRGonc Jul 22, 2026
0e9cf7f
WIP
MarceloRGonc Jul 22, 2026
a5f7274
WIP
MarceloRGonc Jul 22, 2026
64b32a6
WIP
MarceloRGonc Jul 22, 2026
722de8a
WIP
MarceloRGonc Jul 22, 2026
6222abd
WIP
MarceloRGonc Jul 22, 2026
5e96cee
Update licenses (#2404)
MarceloRGonc Jul 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/chromatic.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,11 +18,11 @@
NODE_OPTIONS: --max-old-space-size=4096
steps:
- name: Checkout code
uses: actions/checkout@v7.0.0
uses: actions/checkout@v7.0.1
with:
fetch-depth: 0

- uses: actions/setup-node@v6
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'

Expand All @@ -36,7 +36,7 @@

- name: Install dependencies
if: steps.node-modules-cache.outputs.cache-hit != 'true'
run: npm ci --prefer-offline
run: npm ci --no-audit --no-fund --prefer-offline

Check warning on line 39 in .github/workflows/chromatic.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation. 


See more on https://sonarcloud.io/project/issues?id=openops-cloud_openops&issues=AZ-KcE7XU20n6vaUogRl&open=AZ-KcE7XU20n6vaUogRl&pullRequest=2402

- name: Run Chromatic
if: env.CHROMATIC_PROJECT_TOKEN
Expand Down
30 changes: 15 additions & 15 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,8 +14,8 @@
name: Install Dependencies
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/setup-node@v6
- uses: actions/checkout@v7.0.1
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'
- name: Lookup node_modules cache
Expand All @@ -28,14 +28,14 @@
save-always: true
- name: Install dependencies
if: steps.node-modules-cache.outputs.cache-hit != 'true'
run: npm ci --no-audit --no-fund
run: npm ci --no-audit --no-fund --prefer-offline

Check warning on line 31 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation. 


See more on https://sonarcloud.io/project/issues?id=openops-cloud_openops&issues=AZ-KcE61U20n6vaUogRg&open=AZ-KcE61U20n6vaUogRg&pullRequest=2402
audit:
name: Security Audit
needs: install
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/setup-node@v6
- uses: actions/checkout@v7.0.1
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'
- name: Restore node_modules cache
Expand All @@ -52,8 +52,8 @@
needs: install
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/setup-node@v6
- uses: actions/checkout@v7.0.1
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'
- name: Restore node_modules cache
Expand All @@ -77,7 +77,7 @@
# default heap; match the headroom already used in chromatic.yml.
NODE_OPTIONS: --max-old-space-size=4096
run: |
npx nx run-many --target=lint --exclude openops --quiet

Check warning on line 80 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Define exact package version to avoid installing unverified releases. 


See more on https://sonarcloud.io/project/issues?id=openops-cloud_openops&issues=AZ-KcE61U20n6vaUogRi&open=AZ-KcE61U20n6vaUogRi&pullRequest=2402

Check warning on line 80 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

"npx" can install packages on-demand and run their lifecycle scripts. 


See more on https://sonarcloud.io/project/issues?id=openops-cloud_openops&issues=AZ-KcE61U20n6vaUogRh&open=AZ-KcE61U20n6vaUogRh&pullRequest=2402
- name: Truncate NX cache
run: ./tools/truncate-nx-cache.sh
check-licenses:
Expand All @@ -89,13 +89,13 @@
steps:
- name: Checkout for Dependabot PR
if: ${{ startsWith(github.head_ref || '', 'dependabot/') }}
uses: actions/checkout@v7.0.0
uses: actions/checkout@v7.0.1
with:
ref: ${{ github.head_ref }}
- name: Checkout for others
if: ${{ !startsWith(github.head_ref || '', 'dependabot/') }}
uses: actions/checkout@v7.0.0
- uses: actions/setup-node@v6
uses: actions/checkout@v7.0.1
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'
- name: Restore node_modules cache
Expand Down Expand Up @@ -144,8 +144,8 @@
needs: install
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/setup-node@v6
- uses: actions/checkout@v7.0.1
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'
- name: Restore node_modules cache
Expand Down Expand Up @@ -180,8 +180,8 @@
needs: install
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/setup-node@v6
- uses: actions/checkout@v7.0.1
- uses: actions/setup-node@v7
with:
node-version-file: '.nvmrc'
- name: Restore node_modules cache
Expand All @@ -202,7 +202,7 @@
NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
run: |
npm run prepare
npx nx run-many --target=build

Check warning on line 205 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Define exact package version to avoid installing unverified releases. 


See more on https://sonarcloud.io/project/issues?id=openops-cloud_openops&issues=AZ-KcE61U20n6vaUogRk&open=AZ-KcE61U20n6vaUogRk&pullRequest=2402

Check warning on line 205 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

"npx" can install packages on-demand and run their lifecycle scripts. 


See more on https://sonarcloud.io/project/issues?id=openops-cloud_openops&issues=AZ-KcE61U20n6vaUogRj&open=AZ-KcE61U20n6vaUogRj&pullRequest=2402
./tools/truncate-nx-cache.sh
- name: Save build cache
uses: actions/cache/save@v6.1.0
Expand All @@ -224,7 +224,7 @@
needs: build
runs-on: ${{ matrix.platform == 'amd64' && 'ubuntu-latest' || 'ubuntu-arm64' }}
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/checkout@v7.0.1
- name: Restore build cache
uses: actions/cache/restore@v6.1.0
with:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/pr-reviewer.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ jobs:
owner: ${{ github.repository_owner }}

- name: Checkout repository
uses: actions/checkout@v7.0.0
uses: actions/checkout@v7.0.1
with:
token: ${{ steps.app_token.outputs.token }}
# Full history is required for `git merge-base` and the
Expand Down Expand Up @@ -78,7 +78,7 @@ jobs:
# the MCP github tools are authenticated separately and do not cover
# raw `gh` invocations.
GH_TOKEN: ${{ steps.app_token.outputs.token }}
uses: anthropics/claude-code-action@e90deca47693f9457b72f2b53c17d7c445a87342 # v1
uses: anthropics/claude-code-action@fa7e2f0a29a126f0b81cdcf360561b36e44cf608 # v1
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
github_token: ${{ steps.app_token.outputs.token }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,7 +84,7 @@ jobs:
VERSION: ${{ needs.get-version.outputs.version }}
RELEASE_DC_FILENAME: openops-dc-${{ needs.get-version.outputs.version }}.zip
steps:
- uses: actions/checkout@v7.0.0
- uses: actions/checkout@v7.0.1
- name: Create a release file
run: |
cp THIRD_PARTY_LICENSES.txt LICENSE NOTICE deploy/docker-compose
Expand Down
27 changes: 14 additions & 13 deletions THIRD_PARTY_LICENSES.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8371,7 +8371,7 @@ The following npm packages may be included in this product:
- minipass@7.1.3
- path-scurry@1.11.1
- path-scurry@2.0.2
- tar@7.5.16
- tar@7.5.21

These packages each contain the following license:

Expand Down Expand Up @@ -15125,7 +15125,7 @@ THE SOFTWARE.

The following npm package may be included in this product:

- fast-uri@3.1.2
- fast-uri@3.1.4

This package contains the following license:

Expand Down Expand Up @@ -19508,7 +19508,7 @@ The following npm packages may be included in this product:
- @ai-sdk/cohere@3.0.39
- @ai-sdk/deepinfra@2.0.55
- @ai-sdk/deepseek@2.0.39
- @ai-sdk/gateway@2.0.107
- @ai-sdk/gateway@2.0.117
- @ai-sdk/gateway@3.0.132
- @ai-sdk/gateway@3.0.133
- @ai-sdk/google-vertex@3.0.142
Expand All @@ -19522,14 +19522,14 @@ The following npm packages may be included in this product:
- @ai-sdk/openai@3.0.74
- @ai-sdk/perplexity@3.0.36
- @ai-sdk/provider-utils@3.0.26
- @ai-sdk/provider-utils@3.0.28
- @ai-sdk/provider-utils@3.0.30
- @ai-sdk/provider@2.0.3
- @ai-sdk/provider@3.0.10
- @ai-sdk/react@2.0.210
- @ai-sdk/react@2.0.220
- @ai-sdk/react@3.0.210
- @ai-sdk/togetherai@2.0.56
- @ai-sdk/xai@3.0.96
- ai@5.0.208
- ai@5.0.218
- ai@6.0.206
- ai@6.0.208

Expand Down Expand Up @@ -22854,7 +22854,7 @@ The following npm packages may be included in this product:
- @frontegg/types@7.113.0
- @linear/sdk@7.0.1
- @msgpackr-extract/msgpackr-extract-linux-x64@3.0.4
- @nodable/entities@2.2.0
- @nodable/entities@3.0.0
- @polka/url@1.0.0-next.29
- @posthog/core@1.35.4
- @radix-ui/primitive@1.0.0
Expand Down Expand Up @@ -23493,7 +23493,7 @@ CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

The following npm packages may be included in this product:

- brace-expansion@2.1.1
- brace-expansion@2.1.2
- isarray@2.0.5

These packages each contain the following license:
Expand Down Expand Up @@ -23766,7 +23766,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

The following npm package may be included in this product:

- immutable@5.1.7
- immutable@5.1.9

This package contains the following license:

Expand Down Expand Up @@ -24221,7 +24221,7 @@ SOFTWARE.

The following npm package may be included in this product:

- fast-xml-parser@5.9.3
- fast-xml-parser@5.10.1

This package contains the following license:

Expand Down Expand Up @@ -28447,7 +28447,7 @@ SOFTWARE.

The following npm package may be included in this product:

- path-expression-matcher@1.6.1
- path-expression-matcher@1.6.2

This package contains the following license:

Expand Down Expand Up @@ -29068,7 +29068,8 @@ The following npm packages may be included in this product:

- anynum@1.0.1
- fast-xml-builder@1.2.0
- is-unsafe@1.0.1
- is-unsafe@2.0.0
- xml-naming@0.3.0

These packages each contain the following license:

Expand Down Expand Up @@ -37687,7 +37688,7 @@ For more information, please refer to <http://unlicense.org>

The following npm package may be included in this product:

- protobufjs@7.6.4
- protobufjs@7.6.5

This package contains the following license:

Expand Down
Loading
Loading