@catladder/pipeline 3.25.0 → 3.26.0

package/examples/__snapshots__/override-secrets.test.ts.snap

@@ -103,7 +103,7 @@ before_script:
     local section_title="\${1}"
       echo -e "section_end:\`date +%s\`:\${section_title}\\r\\e[0K"
     }
-my-app 🛡 audit:
+'my-app 🛡 audit | dev ':
   stage: test
   image: path/to/docker/jobs-default:the-version
   variables:
@@ -120,9 +120,6 @@ my-app 🛡 audit:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: &a1
     max: 2
@@ -131,7 +128,7 @@ my-app 🛡 audit:
       - stuck_or_timeout_failure
   interruptible: true
   allow_failure: true
-my-app 👮 lint:
+'my-app 👮 lint | dev ':
   stage: test
   image: path/to/docker/jobs-default:the-version
   variables:
@@ -168,13 +165,10 @@ my-app 👮 lint:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
-my-app 🧪 test:
+'my-app 🧪 test | dev ':
   stage: test
   image: path/to/docker/jobs-testing-chrome:the-version
   variables:
@@ -211,9 +205,6 @@ my-app 🧪 test:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
@@ -483,17 +474,17 @@ my-app 🧪 test:
     - when: on_success
       if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
   needs:
-    - job: my-app 👮 lint
+    - job: 'my-app 👮 lint | dev '
       artifacts: false
     - job: 'my-app 🔨 app | dev '
       artifacts: false
     - job: 'my-app 🔨 docker | dev '
       artifacts: false
-    - job: my-app 🧪 test
+    - job: 'my-app 🧪 test | dev '
       artifacts: false
     - job: 'my-app 🧾 sbom | dev '
       artifacts: true
-    - job: my-app 🛡 audit
+    - job: 'my-app 🛡 audit | dev '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -532,6 +523,115 @@ my-app 🧪 test:
   retry: *a1
   interruptible: true
   allow_failure: true
+'my-app 🛡 audit | review ':
+  stage: test
+  image: path/to/docker/jobs-default:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="app"
+    - collapseable_section_end "injectvars"
+    - cd app
+    - yarn npm audit --environment production
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+  allow_failure: true
+'my-app 👮 lint | review ':
+  stage: test
+  image: path/to/docker/jobs-default:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="app"
+    - collapseable_section_end "injectvars"
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - cd app
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - collapseable_section_start "yarninstall" "Yarn install"
+    - yarn install --immutable
+    - collapseable_section_end "yarninstall"
+    - yarn lint
+  cache:
+    - key: app-yarn-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - app/.yarn
+      fallback_keys:
+        - app-yarn
+    - key: app-node-modules-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - app/node_modules
+      fallback_keys:
+        - app-node-modules
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+'my-app 🧪 test | review ':
+  stage: test
+  image: path/to/docker/jobs-testing-chrome:the-version
+  variables:
+    KUBERNETES_CPU_REQUEST: '0.45'
+    KUBERNETES_MEMORY_REQUEST: 1Gi
+    KUBERNETES_MEMORY_LIMIT: 4Gi
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - export APP_PATH="app"
+    - collapseable_section_end "injectvars"
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - cd app
+    - collapseable_section_start "nodeinstall" "Ensure node version"
+    - if [ -f ~/.nvm/nvm.sh ];  then source ~/.nvm/nvm.sh; fi
+    - if command -v nvm &> /dev/null && [ -f ./.nvmrc ]; then nvm install; fi
+    - collapseable_section_end "nodeinstall"
+    - collapseable_section_start "yarninstall" "Yarn install"
+    - yarn install --immutable
+    - collapseable_section_end "yarninstall"
+    - yarn test
+  cache:
+    - key: app-yarn-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - app/.yarn
+      fallback_keys:
+        - app-yarn
+    - key: app-node-modules-mr$CI_MERGE_REQUEST_IID
+      policy: pull-push
+      paths:
+        - app/node_modules
+      fallback_keys:
+        - app-node-modules
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
 'my-app 🔨 app | review ':
   stage: build
   image: path/to/docker/jobs-default:the-version
@@ -593,14 +693,18 @@ my-app 🧪 test:
     - collapseable_section_end "yarninstall"
     - yarn build
   cache:
-    - key: app-yarn
+    - key: app-yarn-mr$CI_MERGE_REQUEST_IID
       policy: pull-push
       paths:
         - app/.yarn
-    - key: app-node-modules
+      fallback_keys:
+        - app-yarn
+    - key: app-node-modules-mr$CI_MERGE_REQUEST_IID
       policy: pull-push
       paths:
         - app/node_modules
+      fallback_keys:
+        - app-node-modules
   artifacts:
     paths:
       - app/__build_info.json
@@ -667,10 +771,12 @@ my-app 🧪 test:
     - docker push $DOCKER_CACHE_IMAGE
     - collapseable_section_end "docker-push"
   cache:
-    - key: app-yarn
+    - key: app-yarn-mr$CI_MERGE_REQUEST_IID
       policy: pull
       paths:
         - app/.yarn
+      fallback_keys:
+        - app-yarn
   rules:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
@@ -806,17 +912,17 @@ my-app 🧪 test:
     - when: on_success
       if: $CI_MERGE_REQUEST_ID
   needs:
-    - job: my-app 👮 lint
+    - job: 'my-app 👮 lint | review '
       artifacts: false
     - job: 'my-app 🔨 app | review '
       artifacts: false
     - job: 'my-app 🔨 docker | review '
       artifacts: false
-    - job: my-app 🧪 test
+    - job: 'my-app 🧪 test | review '
       artifacts: false
     - job: 'my-app 🧾 sbom | review '
       artifacts: true
-    - job: my-app 🛡 audit
+    - job: 'my-app 🛡 audit | review '
       artifacts: false
   retry: *a1
   interruptible: true

package/examples/__snapshots__/rails-k8s-with-worker-dockerfile.test.ts.snap

@@ -103,7 +103,7 @@ before_script:
     local section_title="\${1}"
       echo -e "section_end:\`date +%s\`:\${section_title}\\r\\e[0K"
     }
-app 🛡 audit:
+'app 🛡 audit | dev ':
   stage: test
   image: ruby:3.2.1
   variables: {}
@@ -117,9 +117,6 @@ app 🛡 audit:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: &a1
     max: 2
@@ -128,7 +125,7 @@ app 🛡 audit:
       - stuck_or_timeout_failure
   interruptible: true
   allow_failure: true
-app 👮 lint:
+'app 👮 lint | dev ':
   stage: test
   image: ruby:3.2.1
   variables: {}
@@ -150,13 +147,10 @@ app 👮 lint:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
-app 🧪 test:
+'app 🧪 test | dev ':
   stage: test
   image: ruby:3.2.1
   services:
@@ -181,9 +175,6 @@ app 🧪 test:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
@@ -398,15 +389,15 @@ app 🧪 test:
     - when: on_success
       if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
   needs:
-    - job: app 👮 lint
+    - job: 'app 👮 lint | dev '
       artifacts: false
     - job: 'app 🔨 docker | dev '
       artifacts: false
-    - job: app 🧪 test
+    - job: 'app 🧪 test | dev '
       artifacts: false
     - job: 'app 🧾 sbom | dev '
       artifacts: true
-    - job: app 🛡 audit
+    - job: 'app 🛡 audit | dev '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -519,6 +510,77 @@ app 🧪 test:
   retry: *a1
   interruptible: true
   allow_failure: true
+'app 🛡 audit | review ':
+  stage: test
+  image: ruby:3.2.1
+  variables: {}
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - collapseable_section_end "injectvars"
+    - cd .temp-with-dockerfile
+    - gem install bundler-audit
+    - bundle audit check
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+  allow_failure: true
+'app 👮 lint | review ':
+  stage: test
+  image: ruby:3.2.1
+  variables: {}
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - collapseable_section_end "injectvars"
+    - cd .temp-with-dockerfile
+    - bundle config set path 'tmp/cache'
+    - bundle install -j $(nproc)
+    - bundle exec rubocop
+  cache: &a3
+    key:
+      files:
+        - Gemfile.lock
+      prefix: $CI_JOB_IMAGE
+    paths:
+      - tmp/cache
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+'app 🧪 test | review ':
+  stage: test
+  image: ruby:3.2.1
+  services:
+    - name: docker.io/postgres:latest
+      alias: database
+      variables:
+        POSTGRES_HOST_AUTH_METHOD: trust
+  variables:
+    RAILS_ENV: test
+    DATABASE_URL: postgresql://postgres@database
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - collapseable_section_end "injectvars"
+    - cd .temp-with-dockerfile
+    - bundle config set path 'tmp/cache'
+    - bundle install -j $(nproc)
+    - bundle exec rake db:test:prepare
+    - bundle exec rake assets:precompile assets:clean
+    - bundle exec rspec
+  cache: *a3
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
 'app 🔨 docker | review ':
   stage: build
   image: path/to/docker/docker-build:the-version
@@ -736,15 +798,15 @@ app 🧪 test:
     - when: on_success
       if: $CI_MERGE_REQUEST_ID
   needs:
-    - job: app 👮 lint
+    - job: 'app 👮 lint | review '
       artifacts: false
     - job: 'app 🔨 docker | review '
       artifacts: false
-    - job: app 🧪 test
+    - job: 'app 🧪 test | review '
       artifacts: false
     - job: 'app 🧾 sbom | review '
       artifacts: true
-    - job: app 🛡 audit
+    - job: 'app 🛡 audit | review '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -1514,13 +1576,13 @@ create release:
     - semanticRelease
     - echo '👉 The project access token might be invald - run \`project-renew-token\` in catladder CLI to fix.'
   rules:
-    - &a3
+    - &a4
       if: $CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/
       when: never
-    - &a4
+    - &a5
       if: $CI_PIPELINE_SOURCE  == "trigger"
       when: never
-    - &a5
+    - &a6
       if: $CI_PIPELINE_SOURCE  == "schedule"
       when: never
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
@@ -1534,9 +1596,9 @@ create release:
     - semanticRelease
     - echo '👉 The project access token might be invald - run \`project-renew-token\` in catladder CLI to fix.'
   rules:
-    - *a3
     - *a4
     - *a5
+    - *a6
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
       when: manual
     - if: $CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/

package/examples/__snapshots__/rails-k8s-with-worker.test.ts.snap

@@ -103,7 +103,7 @@ before_script:
     local section_title="\${1}"
       echo -e "section_end:\`date +%s\`:\${section_title}\\r\\e[0K"
     }
-app 🛡 audit:
+'app 🛡 audit | dev ':
   stage: test
   image: ruby:3.2.1
   variables: {}
@@ -117,9 +117,6 @@ app 🛡 audit:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: &a1
     max: 2
@@ -128,7 +125,7 @@ app 🛡 audit:
       - stuck_or_timeout_failure
   interruptible: true
   allow_failure: true
-app 👮 lint:
+'app 👮 lint | dev ':
   stage: test
   image: ruby:3.2.1
   variables: {}
@@ -150,13 +147,10 @@ app 👮 lint:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
-app 🧪 test:
+'app 🧪 test | dev ':
   stage: test
   image: ruby:3.2.1
   services:
@@ -181,9 +175,6 @@ app 🧪 test:
     - when: never
       if: $CI_PIPELINE_SOURCE  == "trigger"
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
-    - when: never
-      if: $CI_PIPELINE_SOURCE  == "trigger"
-    - if: $CI_MERGE_REQUEST_ID
   needs: []
   retry: *a1
   interruptible: true
@@ -393,15 +384,15 @@ app 🧪 test:
     - when: on_success
       if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_COMMIT_MESSAGE !~ /^chore\\(release\\).*/
   needs:
-    - job: app 👮 lint
+    - job: 'app 👮 lint | dev '
       artifacts: false
     - job: 'app 🔨 docker | dev '
       artifacts: false
-    - job: app 🧪 test
+    - job: 'app 🧪 test | dev '
       artifacts: false
     - job: 'app 🧾 sbom | dev '
       artifacts: true
-    - job: app 🛡 audit
+    - job: 'app 🛡 audit | dev '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -514,6 +505,77 @@ app 🧪 test:
   retry: *a1
   interruptible: true
   allow_failure: true
+'app 🛡 audit | review ':
+  stage: test
+  image: ruby:3.2.1
+  variables: {}
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - collapseable_section_end "injectvars"
+    - cd .
+    - gem install bundler-audit
+    - bundle audit check
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+  allow_failure: true
+'app 👮 lint | review ':
+  stage: test
+  image: ruby:3.2.1
+  variables: {}
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - collapseable_section_end "injectvars"
+    - cd .
+    - bundle config set path 'tmp/cache'
+    - bundle install -j $(nproc)
+    - bundle exec rubocop
+  cache: &a3
+    key:
+      files:
+        - Gemfile.lock
+      prefix: $CI_JOB_IMAGE
+    paths:
+      - tmp/cache
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
+'app 🧪 test | review ':
+  stage: test
+  image: ruby:3.2.1
+  services:
+    - name: docker.io/postgres:latest
+      alias: database
+      variables:
+        POSTGRES_HOST_AUTH_METHOD: trust
+  variables:
+    RAILS_ENV: test
+    DATABASE_URL: postgresql://postgres@database
+  script:
+    - collapseable_section_start "injectvars" "Injecting variables"
+    - collapseable_section_end "injectvars"
+    - cd .
+    - bundle config set path 'tmp/cache'
+    - bundle install -j $(nproc)
+    - bundle exec rake db:test:prepare
+    - bundle exec rake assets:precompile assets:clean
+    - bundle exec rspec
+  cache: *a3
+  rules:
+    - when: never
+      if: $CI_PIPELINE_SOURCE  == "trigger"
+    - if: $CI_MERGE_REQUEST_ID
+  needs: []
+  retry: *a1
+  interruptible: true
 'app 🔨 docker | review ':
   stage: build
   image: path/to/docker/docker-build:the-version
@@ -726,15 +788,15 @@ app 🧪 test:
     - when: on_success
       if: $CI_MERGE_REQUEST_ID
   needs:
-    - job: app 👮 lint
+    - job: 'app 👮 lint | review '
       artifacts: false
     - job: 'app 🔨 docker | review '
       artifacts: false
-    - job: app 🧪 test
+    - job: 'app 🧪 test | review '
       artifacts: false
     - job: 'app 🧾 sbom | review '
       artifacts: true
-    - job: app 🛡 audit
+    - job: 'app 🛡 audit | review '
       artifacts: false
   retry: *a1
   interruptible: true
@@ -1494,13 +1556,13 @@ create release:
     - semanticRelease
     - echo '👉 The project access token might be invald - run \`project-renew-token\` in catladder CLI to fix.'
   rules:
-    - &a3
+    - &a4
       if: $CI_COMMIT_MESSAGE =~ /^chore\\(release\\).*/
       when: never
-    - &a4
+    - &a5
       if: $CI_PIPELINE_SOURCE  == "trigger"
       when: never
-    - &a5
+    - &a6
       if: $CI_PIPELINE_SOURCE  == "schedule"
       when: never
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
@@ -1514,9 +1576,9 @@ create release:
     - semanticRelease
     - echo '👉 The project access token might be invald - run \`project-renew-token\` in catladder CLI to fix.'
   rules:
-    - *a3
     - *a4
     - *a5
+    - *a6
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
       when: manual
     - if: $CI_COMMIT_BRANCH =~ /^[0-9]+.([0-9]+|x).x$/