dependabot[bot]
11c2e89d25
Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [actions/setup-node](https://github.com/actions/setup-node). Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/setup-go` from 5 to 7 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v5...v7) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <[email protected]>
28 lines
1019 B
YAML
28 lines
1019 B
YAML
name: Web route check
|
|
|
|
# web/nginx.conf answers 404 for any path that isn't a route, which means
|
|
# it has to know which routes exist. Most it infers from the build output,
|
|
# but dynamic routes (dashboards/[id] and friends) and non-prerendered
|
|
# routes (/data-sources) have no file on disk and are hand-listed there.
|
|
#
|
|
# That list drifting is a production-only failure: `vite dev` and
|
|
# `npm run preview` route from the client manifest and never read
|
|
# nginx.conf, so a new dynamic route works perfectly everywhere a
|
|
# developer would look and 404s the moment it ships. This job is what
|
|
# catches it. Its own workflow rather than another job bolted onto
|
|
# license-compliance.yml, which already carries one unrelated check
|
|
# (tenant-boundary) for historical reasons worth not compounding.
|
|
|
|
on:
|
|
push:
|
|
branches: [master, main]
|
|
pull_request:
|
|
|
|
jobs:
|
|
web-routes:
|
|
name: nginx route allowlist check
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
- run: bash hack/check-web-routes.sh
|