openvibers/openvibe.sdk Commits

CI on the shared test and security workflows (WS-Q task 1, OpenVibe.Shared 66b76f8): install, node --check, tests, contract and pin-drift checks from one definition; this repository's own steps kept as inputs and extra steps

OP OpenVibers committed 25 Sept 2026 · e090ae9f33 · 1 file, +7 −18





Changes
ddiff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
iindex 77e629e..3e9314f 100644
---- a/.github/workflows/ci.yml
++++ b/.github/workflows/ci.yml
@@@ -4,23 +4,12 @@ on:
      branches: [main]
    pull_request:
  jobs:
++  # install, node --check, tests, contract and pin-drift checks: the shared test job (WS-Q task 1).
    test:
--    runs-on: ubuntu-latest
--    steps:
--      - uses: actions/checkout@v4
--      - uses: actions/setup-node@v4
--        with:
--          node-version: 22.22.1   # production services run Node 22
--          cache: npm
--      # devDependencies: better-sqlite3 backs the outbox/inbox tests; openvibe-contracts (pinned tag
--      # tarball) validates the tools tests' requests and answers, and types.test.js compares
--      # types/contracts.d.ts with it.
--      - run: npm ci --no-audit --no-fund
--      - run: npm test             # includes the pack test (npm pack + install into a temp project)
--      - run: node scripts/esm.js --check
--      # Pin drift (WS-C task 5): an openvibe-* library pin that is not a published tag, or is more
--      # than one minor behind the latest release, fails.
--      - run: curl -fsSL https://raw.githubusercontent.com/OpenVibers/OpenVibe.Shared/main/scripts/pin-drift.js | node - "$GITHUB_WORKSPACE"
--  # Secret scan (gitleaks) and dependency audit, shared by every OpenVibers repo (Track Q).
++    uses: OpenVibers/OpenVibe.Shared/.github/workflows/test.yml@66b76f868ea8228aad7811309eafef3726b036f3
++    with:
++      syntax-dirs: src scripts
++      extra: node scripts/esm.js --check   # the generated ESM wrappers match src/
++  # Secret scan (gitleaks) and dependency audit, shared by every OpenVibers repo.
    security:
--    uses: OpenVibers/OpenVibe.Shared/.github/workflows/security.yml@83c998b65424fb97e6f6de55ad9cc5981767e89c
++    uses: OpenVibers/OpenVibe.Shared/.github/workflows/security.yml@66b76f868ea8228aad7811309eafef3726b036f3