pnpm/.github/workflows/test.yml

name: Test (reusable)

on:
  workflow_call:
    inputs:
      node:
        required: true
        type: string
      platform:
        required: true
        type: string
      garnet:
        required: false
        type: boolean
        default: false
    secrets:
      GARNET_API_TOKEN:
        required: false

permissions:
  contents: read

jobs:
  test:
    name: Test
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}-${{ inputs.platform }}-${{ inputs.node }}
      cancel-in-progress: true

    runs-on: ${{ inputs.platform }}

    env:
      pnpm_config_verify_deps_before_run: false

    steps:
    - name: Configure Git
      run: |
        git config --global core.autocrlf false
        git config --global user.name "xyz"
        git config --global user.email "x@y.z"
    - name: Checkout Commit
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - if: ${{ inputs.garnet }}
      uses: garnet-org/action@9e819143e63d6dda04bca2e90ac85e3cf0e5289d # v2
      with:
        api_token: ${{ secrets.GARNET_API_TOKEN }}
    - name: Install pnpm and Node
      uses: pnpm/setup@b1cac37306e39c21283b9dd6cb0ac288fb35ba6b
      with:
        install: false
        runtime: node@${{ inputs.node }}
    - name: pacquet install
      run: pnx --config.minimum-release-age=0 pacquet@0.2.2-7 install --frozen-lockfile --no-runtime
    - name: Verify Node version
      shell: bash
      env:
        NODE_VERSION: ${{ inputs.node }}
      run: |
        actual=$(pn node -v)
        expected="v${NODE_VERSION}"
        if [ "$actual" != "$expected" ]; then
          echo "Expected Node version $expected but got $actual"
          exit 1
        fi
    # npm is needed for preparing git-hosted dependencies (e.g. in dlx tests).
    # `pnpm runtime set node` does not extract npm; the runner image's
    # pre-installed Node toolchain provides it on PATH.
    - name: Verify npm
      run: npm --version
    - name: Download compiled artifacts
      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
      with:
        name: compiled-packages
    - name: Extract compiled artifacts
      run: tar -xzf compiled.tar.gz
    - name: Determine test scope
      id: test-scope
      shell: bash
      env:
        REF_NAME: ${{ github.ref_name }}
      run: |
        if [[ "$REF_NAME" == "main" || "$REF_NAME" == "chore/update-lockfile" || "$REF_NAME" == release/* ]]; then
          echo "script=ci:test-all" >> "$GITHUB_OUTPUT"
          echo "scope=all" >> "$GITHUB_OUTPUT"
        else
          git remote set-branches --add origin main && git fetch origin main --depth=1
          if [ -n "$(git diff --name-only origin/main HEAD -- pnpm-workspace.yaml)" ]; then
            echo "script=ci:test-all" >> "$GITHUB_OUTPUT"
            echo "scope=all — pnpm-workspace.yaml modified" >> "$GITHUB_OUTPUT"
          else
            echo "script=ci:test-branch" >> "$GITHUB_OUTPUT"
            echo "scope=affected packages" >> "$GITHUB_OUTPUT"
          fi
        fi
    - name: Run tests (${{ steps.test-scope.outputs.scope }})
      timeout-minutes: 70
      shell: bash
      env:
        PNPM_WORKERS: 3
        TEST_SCRIPT: ${{ steps.test-scope.outputs.script }}
      run: pn run "$TEST_SCRIPT"