name: CI
on:
push:
branches: [main, develop]
tags:
- 'v*'
pull_request:
branches: [main, develop]
jobs:
build:
runs-on: ubuntu-latest
strategy:
matrix:
node-version: [20.x, 22.x]
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js ${{ matrix.node-version }}
uses: actions/setup-node@v4
with:
node-version: ${{ matrix.node-version }}
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Build project
run: npm run build
- name: Run linter (if configured)
run: npm run lint --if-present
continue-on-error: true
- name: Run tests (if configured)
run: npm test --if-present
continue-on-error: true
- name: Upload build artifacts
if: matrix.node-version == '22.x'
uses: actions/upload-artifact@v4
with:
name: build-artifacts
path: |
server/dist/
client/dist/
retention-days: 7
security:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '20.x'
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Run security audit
run: npm audit --audit-level=moderate
continue-on-error: true
- name: Check for vulnerable dependencies
run: npx audit-ci --moderate
continue-on-error: true
release:
name: Create Release and Publish to npm
runs-on: ubuntu-latest
needs: [build, security]
if: startsWith(github.ref, 'refs/tags/v')
permissions:
contents: write
id-token: write # Required for npm provenance
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '22.x'
registry-url: 'https://registry.npmjs.org'
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Build project
run: npm run build
- name: Create release archive
run: |
mkdir -p release
cp -r server/dist release/server
cp -r server/public release/public
cp package.json package-lock.json README.md release/
cd release
tar -czf ../mysql-mcp-webui-${{ github.ref_name }}.tar.gz .
cd ..
zip -r mysql-mcp-webui-${{ github.ref_name }}.zip release/
- name: Extract release notes
id: extract_notes
run: |
VERSION="${{ github.ref_name }}"
echo "Creating release for $VERSION"
- name: Create GitHub Release
uses: softprops/action-gh-release@v1
with:
files: |
mysql-mcp-webui-${{ github.ref_name }}.tar.gz
mysql-mcp-webui-${{ github.ref_name }}.zip
generate_release_notes: true
draft: false
prerelease: ${{ contains(github.ref_name, 'alpha') || contains(github.ref_name, 'beta') || contains(github.ref_name, 'rc') }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Verify package contents
run: |
echo "Verifying build artifacts..."
ls -la server/dist/
ls -la server/public/ || echo "Warning: server/public not found"
- name: Publish to npm
run: npm publish --provenance --access public
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
