ci: fixed issues with the new ci

.github/workflows/lint.yml

@@ -16,8 +16,6 @@ permissions:
     contents: "read" # to fetch code (actions/checkout)
 
 env:
-    NX_BRANCH: "${{ github.event.number }}"
-    NX_RUN_GROUP: "${{ github.run_id }}"
     HEAD_REF: "${{ github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.ref_name }}"
     HEAD_REPOSITORY: "${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}"
 

.github/workflows/semantic-release.yml

@@ -64,12 +64,12 @@ jobs:
 
             - name: "test and coverage"
               run: "pnpm run test:coverage"
-
-            - name: "Upload code coverage to codecov"
-              uses: "anolilab/workflows/step/codecov@main"
-              with:
-                  run-lint: "false"
-                  codecov-token: "${{ secrets.CODECOV_TOKEN }}"
+# @TODO: Enable it later
+#            - name: "Upload code coverage to codecov"
+#              uses: "anolilab/workflows/step/codecov@main"
+#              with:
+#                  run-lint: "false"
+#                  codecov-token: "${{ secrets.CODECOV_TOKEN }}"
 
             - name: "Semantic Release"
               if: "success()"

.github/workflows/test.yml

@@ -99,14 +99,14 @@ jobs:
             - name: "Run tests"
               shell: "bash"
               run: "pnpm run test:coverage"
-
-            - name: "Upload code coverage to codecov"
-              if: "matrix.os == 'ubuntu-latest' && matrix.node_version == 18"
-              uses: "anolilab/workflows/step/codecov@main"
-              with:
-                  run-lint: true
-                  codecov-token: "${{ secrets.CODECOV_TOKEN }}"
-                  use-affected: false
+# @TODO: Enable it later
+#            - name: "Upload code coverage to codecov"
+#              if: "matrix.os == 'ubuntu-latest' && matrix.node_version == 18"
+#              uses: "anolilab/workflows/step/codecov@main"
+#              with:
+#                  run-lint: true
+#                  codecov-token: "${{ secrets.CODECOV_TOKEN }}"
+#                  use-affected: false
 
     # This check runs once all dependant jobs have passed
     # It symbolizes that all required checks have successfully passed (Or skipped)

audit-ci.jsonc

@@ -4,5 +4,10 @@
     "low": true,
     "package-manager": "pnpm",
     "report-type": "important",
-    "allowlist": []
+    "allowlist": [
+        // Is used only in the examples
+        // GHSA-35jh-r3h4-6jhm|. > @rspack/plugin-html@0.5.8 > lodash.template@4.5.0
+        // GHSA-35jh-r3h4-6jhm|examples/rspack > @rspack/plugin-html@0.5.8 > lodash.template@4.5.0
+        "GHSA-35jh-r3h4-6jhm"
+    ]
 }

package.json

@@ -146,7 +146,7 @@
         "@types/ssri": "^7.1.5",
         "@visulima/packem": "^1.0.0-alpha.55",
         "@vitest/coverage-v8": "^2.0.4",
-        "audit-ci": "^6.6.1",
+        "audit-ci": "^7.1.0",
         "caniuse-lite": "^1.0.30001643",
         "commitizen": "^4.3.0",
         "commitlint": "^19.3.0",