diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..ece552f --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,137 @@ +name: CodeQL + +on: + push: + branches: + - main + paths: + - ".github/workflows/**" + - "package.json" + - "package-lock.json" + - "tsconfig.json" + - "src/**" + - "test/**" + - "examples/**/*.mjs" + - "website/scripts/**/*.py" + pull_request: + branches: + - main + paths: + - ".github/workflows/**" + - "package.json" + - "package-lock.json" + - "tsconfig.json" + - "src/**" + - "test/**" + - "examples/**/*.mjs" + - "website/scripts/**/*.py" + workflow_dispatch: + +permissions: + actions: read + contents: read + security-events: write + +concurrency: + group: codeql-${{ github.ref }} + cancel-in-progress: true + +jobs: + changes: + runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: read + outputs: + javascript_typescript: ${{ steps.manual.outputs.javascript_typescript || steps.filter.outputs.javascript_typescript }} + python: ${{ steps.manual.outputs.python || steps.filter.outputs.python }} + actions: ${{ steps.manual.outputs.actions || steps.filter.outputs.actions }} + + steps: + - name: Check out repository + uses: actions/checkout@v6 + + - name: Mark all analyzers active for manual runs + id: manual + if: ${{ github.event_name == 'workflow_dispatch' }} + run: | + echo "javascript_typescript=true" >> "$GITHUB_OUTPUT" + echo "python=true" >> "$GITHUB_OUTPUT" + echo "actions=true" >> "$GITHUB_OUTPUT" + + - name: Detect CodeQL-relevant changes + id: filter + if: ${{ github.event_name != 'workflow_dispatch' }} + uses: dorny/paths-filter@v4 + with: + filters: | + javascript_typescript: + - '.github/workflows/codeql.yml' + - 'package.json' + - 'package-lock.json' + - 'tsconfig.json' + - 'src/**' + - 'test/**' + - 'examples/**/*.mjs' + python: + - '.github/workflows/codeql.yml' + - 'website/scripts/**/*.py' + actions: + - '.github/workflows/**' + + analyze-javascript-typescript: + needs: changes + if: ${{ needs.changes.outputs.javascript_typescript == 'true' }} + runs-on: ubuntu-latest + + steps: + - name: Check out repository + uses: actions/checkout@v6 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + languages: javascript-typescript + + - name: Perform CodeQL analysis + uses: github/codeql-action/analyze@v4 + with: + category: "/language:javascript-typescript" + + analyze-python: + needs: changes + if: ${{ needs.changes.outputs.python == 'true' }} + runs-on: ubuntu-latest + + steps: + - name: Check out repository + uses: actions/checkout@v6 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + languages: python + + - name: Perform CodeQL analysis + uses: github/codeql-action/analyze@v4 + with: + category: "/language:python" + + analyze-actions: + needs: changes + if: ${{ needs.changes.outputs.actions == 'true' }} + runs-on: ubuntu-latest + + steps: + - name: Check out repository + uses: actions/checkout@v6 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + languages: actions + + - name: Perform CodeQL analysis + uses: github/codeql-action/analyze@v4 + with: + category: "/language:actions" diff --git a/.github/workflows/post-merge-150k.yml b/.github/workflows/post-merge-150k.yml index d9859c0..69439d6 100644 --- a/.github/workflows/post-merge-150k.yml +++ b/.github/workflows/post-merge-150k.yml @@ -4,6 +4,12 @@ on: push: branches: - main + paths: + - 'package.json' + - 'package-lock.json' + - 'tsconfig.json' + - 'src/**' + - 'perf/**' workflow_dispatch: permissions: @@ -14,33 +20,7 @@ concurrency: cancel-in-progress: true jobs: - changes: - runs-on: ubuntu-latest - outputs: - code: ${{ steps.filter.outputs.code }} - - steps: - - name: Check out repository - uses: actions/checkout@v6 - - - name: Detect code changes - id: filter - uses: dorny/paths-filter@v4 - with: - filters: | - code: - - '.github/workflows/**' - - 'package.json' - - 'package-lock.json' - - 'tsconfig.json' - - 'src/**' - - 'test/**' - - 'perf/**' - - 'examples/**/*.mjs' - confidence: - needs: changes - if: ${{ github.event_name == 'workflow_dispatch' || needs.changes.outputs.code == 'true' }} runs-on: ubuntu-latest timeout-minutes: 30 strategy: diff --git a/website/public/package-footprint-badge.json b/website/public/package-footprint-badge.json index 36e6388..f0d7daa 100644 --- a/website/public/package-footprint-badge.json +++ b/website/public/package-footprint-badge.json @@ -1,6 +1,6 @@ { "schemaVersion": 1, "label": "publish size", - "message": "37.4 kB (gzip) | 31.7 kB (brotli)", + "message": "37.6 kB (gzip) | 31.8 kB (brotli)", "color": "blue" } diff --git a/website/public/package-footprint-badge.svg b/website/public/package-footprint-badge.svg index 2014c1d..8d10097 100644 --- a/website/public/package-footprint-badge.svg +++ b/website/public/package-footprint-badge.svg @@ -1,5 +1,5 @@ - -publish size: 37.4 kB (gzip) | 31.7 kB (brotli) + +publish size: 37.6 kB (gzip) | 31.8 kB (brotli) @@ -15,7 +15,7 @@ publish size publish size -37.4 kB (gzip) | 31.7 kB (brotli) -37.4 kB (gzip) | 31.7 kB (brotli) +37.6 kB (gzip) | 31.8 kB (brotli) +37.6 kB (gzip) | 31.8 kB (brotli) diff --git a/website/public/package-footprint.json b/website/public/package-footprint.json index 70c5d7d..c669bd5 100644 --- a/website/public/package-footprint.json +++ b/website/public/package-footprint.json @@ -3,17 +3,17 @@ "version": "0.8.0", "fileCount": 69, "totals": { - "rawBytes": 130234, - "gzipBytes": 37444, - "brotliBytes": 31733, - "raw": "130.2 kB", - "gzip": "37.4 kB", - "brotli": "31.7 kB" + "rawBytes": 131200, + "gzipBytes": 37595, + "brotliBytes": 31838, + "raw": "131.2 kB", + "gzip": "37.6 kB", + "brotli": "31.8 kB" }, "badge": { "schemaVersion": 1, "label": "publish size", - "message": "37.4 kB (gzip) | 31.7 kB (brotli)", + "message": "37.6 kB (gzip) | 31.8 kB (brotli)", "color": "blue" }, "files": [ @@ -151,27 +151,27 @@ }, { "path": "dist/compare/deterministicCompare.d.ts", - "size": 497, - "gzip": 184, - "brotli": 158 + "size": 855, + "gzip": 362, + "brotli": 281 }, { "path": "dist/compare/deterministicCompare.js", - "size": 2435, - "gzip": 538, - "brotli": 460 + "size": 2793, + "gzip": 707, + "brotli": 588 }, { "path": "dist/compare/hlcCompare.d.ts", - "size": 441, - "gzip": 262, - "brotli": 194 + "size": 428, + "gzip": 253, + "brotli": 184 }, { "path": "dist/compare/hlcCompare.js", - "size": 1044, - "gzip": 432, - "brotli": 347 + "size": 1031, + "gzip": 424, + "brotli": 337 }, { "path": "dist/index.d.ts", @@ -211,9 +211,9 @@ }, { "path": "dist/inspect/inspectOutputs.d.ts", - "size": 1673, - "gzip": 530, - "brotli": 467 + "size": 1685, + "gzip": 532, + "brotli": 476 }, { "path": "dist/inspect/inspectOutputs.js", @@ -259,9 +259,9 @@ }, { "path": "dist/order/internalOrderValidatedEvents.d.ts", - "size": 721, - "gzip": 381, - "brotli": 298 + "size": 717, + "gzip": 374, + "brotli": 285 }, { "path": "dist/order/internalOrderValidatedEvents.js", @@ -271,39 +271,39 @@ }, { "path": "dist/order/orderEvents.d.ts", - "size": 779, - "gzip": 380, - "brotli": 291 + "size": 610, + "gzip": 322, + "brotli": 234 }, { "path": "dist/order/orderEvents.js", - "size": 14800, - "gzip": 3247, - "brotli": 2885 + "size": 15687, + "gzip": 3319, + "brotli": 2955 }, { "path": "dist/order/orderEventStream.d.ts", - "size": 231, - "gzip": 170, - "brotli": 149 + "size": 243, + "gzip": 168, + "brotli": 160 }, { "path": "dist/order/orderEventStream.js", - "size": 10101, - "gzip": 2315, - "brotli": 2041 + "size": 9829, + "gzip": 2270, + "brotli": 1994 }, { "path": "dist/order/tieBreakers.d.ts", - "size": 522, - "gzip": 307, - "brotli": 245 + "size": 187, + "gzip": 146, + "brotli": 118 }, { "path": "dist/order/tieBreakers.js", - "size": 522, - "gzip": 303, - "brotli": 240 + "size": 139, + "gzip": 122, + "brotli": 103 }, { "path": "dist/order/watermarkStrategies.d.ts", @@ -355,9 +355,9 @@ }, { "path": "dist/types.d.ts", - "size": 14499, - "gzip": 3702, - "brotli": 3214 + "size": 14505, + "gzip": 3705, + "brotli": 3217 }, { "path": "dist/types.js", @@ -421,15 +421,15 @@ }, { "path": "package.json", - "size": 5184, - "gzip": 1248, + "size": 5219, + "gzip": 1258, "brotli": 1102 }, { "path": "README.md", - "size": 21422, - "gzip": 6933, - "brotli": 5707 + "size": 21909, + "gzip": 7121, + "brotli": 5869 } ] }