chore(deps): bump the go-maintenance group in /server-go with 3 updates #126
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Unit tests | |
| # Go and Python unit tests, which nothing ran until now. | |
| # | |
| # Node's have been covered by the benchmark workflow since it existed, so the | |
| # gap was invisible from the outside: every check on a pull request was green | |
| # while two of the three implementations were unverified. Among the tests that | |
| # had never run in CI: | |
| # | |
| # - TestOnlyJA4TLSIsImplemented, which is the only thing standing between this | |
| # MIT project and a FoxIO License 1.1 module that cannot legally ship in it | |
| # - TestWeightsSumToOne, which guards the scoring weights invariant | |
| # - every Python test, on an implementation with no coverage but a container | |
| # smoke test | |
| # | |
| # The sync rule says a change lands in all three servers. That is worth very | |
| # little if only one of them is checked. | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| jobs: | |
| browser: | |
| name: Browser lifecycle and dependency audit | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: '24' | |
| - run: npm ci && npm audit --omit=dev | |
| working-directory: server-node | |
| - run: npm ci && npm audit && npm run build | |
| working-directory: client | |
| - run: npm ci && npx playwright install --with-deps chromium | |
| working-directory: test/browser | |
| - run: npm test | |
| working-directory: test/browser | |
| go: | |
| name: Go | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| # crypto/tls only exposes ClientHelloInfo.Extensions from 1.24, which | |
| # native JA4 needs. go.mod says so; keep this in step with it. | |
| go-version: '1.26.8' | |
| cache-dependency-path: server-go/go.sum | |
| - name: Vet | |
| working-directory: server-go | |
| run: go vet ./... | |
| - name: Test | |
| working-directory: server-go | |
| run: go test -race ./... | |
| - name: Check reachable vulnerabilities | |
| working-directory: server-go | |
| run: | | |
| go install golang.org/x/vuln/cmd/govulncheck@v1.8.0 | |
| govulncheck ./... | |
| python: | |
| name: Python | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.12' | |
| cache: pip | |
| cache-dependency-path: server-python/requirements.lock | |
| - name: Install dependencies | |
| working-directory: server-python | |
| run: pip install --require-hashes -r requirements.lock | |
| # Discovery, not a loop over files: a file that stops being discoverable | |
| # should show up as a drop in the count rather than as silence. It used to | |
| # report 12 tests and two import errors where there are in fact 43. | |
| - name: Test | |
| working-directory: server-python | |
| env: | |
| FCAPTCHA_SECRET: python-unit-test-secret-0123456789abcdef0123456789abcdef | |
| run: python -m unittest discover -p "test_*.py" -v |