chore: update workflows (#2915)

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

* chore: update workflows

Author: iamkun

.github/workflows/check.yml

@@ -4,22 +4,9 @@ on:
     branches: [master, dev]
   pull_request:
     branches: [dev]
+
 jobs:
   check:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: 'lts/*'
-          cache: 'npm'
-      - name: Install dependencies
-        run: npm install -g codecov && npm install
-      - name: Run Lint
-        run: npm run lint
-      - name: Run tests
-        run: npm test
-      - name: Upload coverage
-        run: codecov || echo "Codecov upload failed, continuing..."
+    uses: ./.github/workflows/lint-test.yml
+    secrets:
+      inherit

.github/workflows/lint-test.yml

@@ -0,0 +1,27 @@
+on:
+  workflow_call:
+    secrets:
+      CODECOV_TOKEN:
+        required: true
+
+jobs:
+  lint-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 'lts/*'
+          cache: 'npm'
+      - name: Install dependencies
+        run: npm install
+      - name: Run Lint
+        run: npm run lint
+      - name: Run tests
+        run: npm test
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/release.yml

@@ -1,52 +1,42 @@
 name: Release
 on:
-  workflow_run:
-    workflows: ['Lint & Unit Test']
+  push:
     branches: [master]
-    types:
-      - completed
-
-permissions:
-  contents: read # for checkout
 
 jobs:
+  lint-and-test:
+    uses: ./.github/workflows/lint-test.yml
+    secrets:
+      inherit
   release:
-    env: 
-      GITHUB_TRIGGER_REF: ${{ github.event.workflow_run.head_branch }} # For workflow_run the GITHUB_REF is the default branch, as mentioned in the docs 
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    name: Release
+    needs: lint-and-test
     runs-on: ubuntu-latest
     permissions:
-      contents: write # to be able to publish a GitHub release
-      issues: write # to be able to comment on released issues
-      pull-requests: write # to be able to comment on released pull requests
-      id-token: write # to enable use of OIDC for npm provenance
+      contents: write
+      issues: write
+      pull-requests: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
-          ref: ${{ env.GITHUB_TRIGGER_REF }}
       - name: Setup Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 'lts/*' # semantic-release requires Node >= 18
+          node-version: 'lts/*'
       - name: Install dependencies
         run: npm clean-install
       - name: Build
-        env: # temporary workaround for "Error: error:0308010C:digital envelope routines::unsupported" in Node lts / 18
+        env:
           NODE_OPTIONS: --openssl-legacy-provider
         run: npm run build && npm run babel
-      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+      - name: Verify provenance
         run: npm audit signatures
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
-          npm install -g @semantic-release/changelog @semantic-release/git semantic-release 
-          GITHUB_REF=${{ env.GITHUB_TRIGGER_REF }} semantic-release
-          echo release success
-      - name: Notify
-        run: |
-          curl -s ${{ secrets.GITEE_SYNC_URL }}
+          npm install -g @semantic-release/changelog @semantic-release/git semantic-release
+          semantic-release