ci: run only github actions affected by PR (#5402)

https://coveord.atlassian.net/browse/KIT-4301

Using a NX command, we can determine what projects are affected by the
files changed. We can then add a condition to every github action that
will check if one of its dependant project is affected.

Example :

This typedoc action builds typedoc for headless & headless-react. If one
of those is in the projects affected, it will run it. If not, it will
skip it.

```
  typedoc:
    name: 'Build typedoc'
    needs: affected
    if: contains(needs.affected.outputs.projects, 'headless') || contains(needs.affected.outputs.projects, 'headless-react')
```


**Please review each action to make sure it has the right projects in
the condition.**

Author: alexprudhomme

.github/workflows/prbot.yml

@@ -103,9 +103,29 @@ jobs:
       - uses: ./.github/actions/build
         with:
           cache-suffix: 'cdn'
+  affected:
+    name: 'Determine affected projects'
+    runs-on: ubuntu-latest
+    needs: build
+    outputs:
+      projects: ${{ steps.set.outputs.projects }}
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          fetch-depth: 0
+      - uses: ./.github/actions/setup
+      - name: Get affected projects
+        id: set
+        run: |
+          AFFECTED=$(npx nx show projects --affected --base=origin/master | tr '\n' ' ')
+          echo "projects=$AFFECTED" >> "$GITHUB_OUTPUT"
+      - name: Log affected projects
+        run: |
+          echo "Affected projects: ${{ steps.set.outputs.projects }}"
   cdn-checks:
     name: 'CDN Checks'
-    needs: build-cdn
+    needs: [affected, build-cdn]
+    if: contains(needs.affected.outputs.projects, 'atomic') || contains(needs.affected.outputs.projects, 'headless-commerce-react-samples') || contains(needs.affected.outputs.projects, 'atomic-hosted-page')
     env:
       DEPLOYMENT_ENVIRONMENT: CDN
     runs-on: ubuntu-latest
@@ -149,10 +169,12 @@ jobs:
           egress-policy: audit
 
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          fetch-depth: 0
       - uses: ./.github/actions/setup
       - name: Install Playwright Browsers
         run: npx playwright install --with-deps
-      - run: npm test
+      - run: npx nx affected --target=test --base=origin/master --head=HEAD
   package-compatibility:
     name: 'Verify compatibility of packages'
     needs: build
@@ -168,7 +190,8 @@ jobs:
       - run: npm run package-compatibility
   typedoc:
     name: 'Build typedoc'
-    needs: build
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'headless') || contains(needs.affected.outputs.projects, 'headless-react')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -184,27 +207,10 @@ jobs:
       - name: 'Build headless-react typedoc'
         run: npm run build:typedoc
         working-directory: packages/headless-react
-  should-e2e-atomic:
-    name: 'Should e2e test Atomic?'
-    needs: build
-    runs-on: ubuntu-latest
-    outputs:
-      changesOnlyInQuantic: ${{ steps.shouldRunAtomice2e.outputs.changesOnlyInQuantic }}
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
-        with:
-          egress-policy: audit
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-        with:
-          fetch-depth: 0
-      - uses: ./.github/actions/setup
-      - run: node ./scripts/ci/everyFilesChangedMatchPatterns.mjs changesOnlyInQuantic 'packages/quantic/**/*'
-        id: shouldRunAtomice2e
   e2e-atomic-csp-test:
     name: 'Run e2e tests on Atomic CSP'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -217,8 +223,8 @@ jobs:
       - uses: ./.github/actions/e2e-atomic-csp
   prepare-playwright-atomic:
     name: 'Determine Playwright E2E tests to run'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic')
     runs-on: ubuntu-latest
     env:
       maximumShards: 12
@@ -315,8 +321,8 @@ jobs:
           copy: true
   playwright-atomic-theming:
     name: 'Run theming smoke tests for Atomic'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -330,8 +336,8 @@ jobs:
       - uses: ./.github/actions/playwright-atomic-theming
   e2e-atomic-test:
     name: 'Run e2e tests on Atomic'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic')
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -384,8 +390,8 @@ jobs:
           SPLIT_INDEX: ${{ strategy.job-index }}
   e2e-atomic-screenshots:
     name: 'Run e2e screenshots tests on Atomic'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -398,8 +404,8 @@ jobs:
       - uses: ./.github/actions/e2e-atomic-screenshots
   e2e-atomic-react-test:
     name: 'Run e2e tests on Atomic React'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic-react-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -412,8 +418,8 @@ jobs:
       - uses: ./.github/actions/e2e-atomic-react
   e2e-atomic-react-nextjs-test:
     name: 'Run e2e tests on Atomic React NextJS'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic-next-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -426,8 +432,8 @@ jobs:
       - uses: ./.github/actions/e2e-atomic-next
   e2e-iife-test:
     name: 'Run e2e tests for IIFE'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'iife-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -441,8 +447,8 @@ jobs:
       # - uses: ./.github/actions/e2e-iife
   e2e-atomic-angular-test:
     name: 'Run e2e tests on Atomic Angular'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic-angular-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -455,8 +461,8 @@ jobs:
       - uses: ./.github/actions/e2e-atomic-angular
   e2e-atomic-vuejs-test:
     name: 'Run e2e tests on Vue.js sample'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic-vuejs-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -469,8 +475,8 @@ jobs:
       - uses: ./.github/actions/e2e-vuejs
   e2e-atomic-stencil-test:
     name: 'Run e2e tests on Stencil.js sample'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic-stencil-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -483,8 +489,8 @@ jobs:
       - uses: ./.github/actions/e2e-stencil
   playwright-atomic-hosted-page-test:
     name: 'Run e2e tests for Atomic Hosted Page'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic-hosted-page')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -498,8 +504,8 @@ jobs:
       - uses: ./.github/actions/playwright-atomic-hosted-pages
   playwright-headless-ssr-commerce:
     name: 'Run e2e tests for Headless Commerce SSR'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'headless-ssr-commerce-samples')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -513,8 +519,8 @@ jobs:
       - uses: ./.github/actions/playwright-headless-ssr-commerce-nextjs
   e2e-atomic-insight-panel-test:
     name: 'Run e2e tests on Atomic insight panel'
-    needs: should-e2e-atomic
-    if: ${{ needs.should-e2e-atomic.outputs.changesOnlyInQuantic == 'false' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'atomic')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -527,7 +533,8 @@ jobs:
       - uses: ./.github/actions/e2e-atomic-insight-panel
   e2e-headless-ssr-test-app:
     name: 'Run e2e tests on Headless SSR App router sample'
-    needs: build
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'headless-ssr-samples-app-router')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -540,7 +547,8 @@ jobs:
       - uses: ./.github/actions/e2e-headless-ssr-app
   e2e-headless-ssr-test-pages:
     name: 'Run e2e tests on Headless SSR Pages router sample'
-    needs: build
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'headless-ssr-samples-pages-router')
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
@@ -551,28 +559,10 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: ./.github/actions/setup
       - uses: ./.github/actions/e2e-headless-ssr-pages
-  should-e2e-quantic:
-    name: 'Should test Quantic?'
-    needs: build
-    runs-on: ubuntu-latest
-    outputs:
-      shouldRunQuantic: ${{ steps.shouldRunQuantic.outputs.shouldRunQuantic }}
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-        with:
-          fetch-depth: 0
-      - uses: ./.github/actions/setup
-      - run: node ./scripts/ci/someFilesChangedInPatterns.mjs shouldRunQuantic 'packages/quantic/**/*' 'packages/headless/**/*' 'packages/bueno/**/*' package.json package-lock.json
-        id: shouldRunQuantic
   e2e-quantic:
     name: 'Run Quantic E2E tests'
-    needs: should-e2e-quantic
-    if: ${{ needs.should-e2e-quantic.outputs.shouldRunQuantic == 'true' }}
+    needs: affected
+    if: contains(needs.affected.outputs.projects, 'quantic')
     uses: ./.github/workflows/e2e-quantic.yml
     secrets:
       SFDX_AUTH_CLIENT_ID: ${{ secrets.SFDX_AUTH_CLIENT_ID }}