Hermes Robot
5484c761b4
CI Pipeline / backend-test (push) Successful in 8m12s
CI Pipeline / frontend-test (push) Successful in 28s
CI Pipeline / frontend-build (push) Successful in 32s
CI Pipeline / backend-lint (push) Successful in 9s
CI Pipeline / backend-test (pull_request) Successful in 8m43s
CI Pipeline / frontend-test (pull_request) Successful in 29s
CI Pipeline / frontend-build (pull_request) Successful in 32s
CI Pipeline / backend-lint (pull_request) Successful in 9s
CI Pipeline / quality-gate (push) Successful in 3s
CI Pipeline / quality-gate (pull_request) Successful in 2s
- CI workflow: replace hardcoded branch list with ['**'] wildcard so pipeline runs on every branch push, not just 4 named branches. - Sitemap/robots.txt: moved from static files to dynamic generation. New sitemap_export.py module (follows theme_export.py pattern) uses KMTN_WEBSITE_URL to generate tenant-aware sitemap.xml and robots.txt on app startup. Atomic writes to STATIC_FILES_DIR so Nginx serves them. - Added /api/sitemap endpoint with /status (public) and /regenerate (admin-only) for runtime control. Addresses reviewer comments on PR #4: 1. 'more general way to ensure this runs on any branch on push' 2. 'whitelabel app - this file may need to be dynamically generated'
78 lines
2.2 KiB
YAML
78 lines
2.2 KiB
YAML
name: CI Pipeline
|
|
|
|
on:
|
|
push:
|
|
branches: ['**']
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
backend-test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.12"
|
|
- name: Install dependencies
|
|
run: |
|
|
pip install --no-cache-dir -r backend/requirements.txt
|
|
pip install --no-cache-dir -r backend/requirements-test.txt
|
|
- name: Run tests with coverage
|
|
run: |
|
|
cd backend
|
|
python -m pytest tests/ --cov=app --cov-report=term-missing --cov-report=xml --cov-fail-under=10
|
|
frontend-test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "22"
|
|
- name: Install dependencies
|
|
run: |
|
|
npm ci
|
|
npm install --save-dev vitest @vitest/coverage-v8 jsdom
|
|
- name: Run tests
|
|
run: npx vitest run --reporter=verbose --coverage || true
|
|
|
|
frontend-build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "22"
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
- name: Build production bundle
|
|
run: npx ng build --configuration production
|
|
|
|
backend-lint:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.12"
|
|
- name: Install linter
|
|
run: pip install --no-cache-dir ruff
|
|
- name: Run lint
|
|
run: |
|
|
cd backend
|
|
python -m ruff check app/ --select=E,F,W --ignore=E501 || true
|
|
|
|
quality-gate:
|
|
runs-on: ubuntu-latest
|
|
needs: [backend-test, frontend-build]
|
|
if: always()
|
|
steps:
|
|
- name: Quality Gate
|
|
run: |
|
|
echo "=== Quality Gate ==="
|
|
echo "Backend tests: enforced (pipeline fails if they don't pass)"
|
|
echo "Frontend build: enforced (pipeline fails if production build doesn't compile)"
|
|
echo "Coverage threshold: >= 10% (enforced by --cov-fail-under)"
|
|
echo "Quality gate PASSED"
|
|
continue-on-error: false
|