freestarcapital
diff --git a/‎.circleci/config.yml
Lines changed: 8 additions & 71 deletions b/‎.circleci/config.yml
Lines changed: 8 additions & 71 deletions
diff --git a/‎.devcontainer/devcontainer.json
Lines changed: 3 additions & 1 deletion b/‎.devcontainer/devcontainer.json
Lines changed: 3 additions & 1 deletion
diff --git a/‎.github/codeql/queries/jsonRequestContentType.ql
Lines changed: 18 additions & 0 deletions b/‎.github/codeql/queries/jsonRequestContentType.ql
Lines changed: 18 additions & 0 deletions
diff --git a/‎.github/dependabot.yml
Lines changed: 8 additions & 0 deletions b/‎.github/dependabot.yml
Lines changed: 8 additions & 0 deletions
diff --git a/‎.github/release-drafter.yml
Lines changed: 3 additions & 3 deletions b/‎.github/release-drafter.yml
Lines changed: 3 additions & 3 deletions
diff --git a/‎.github/workflows/build.yaml
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/build.yaml
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/code-path-changes.yml
Lines changed: 0 additions & 37 deletions b/‎.github/workflows/code-path-changes.yml
Lines changed: 0 additions & 37 deletions
diff --git a/‎.github/workflows/run-unit-tests.yml
Lines changed: 109 additions & 0 deletions b/‎.github/workflows/run-unit-tests.yml
Lines changed: 109 additions & 0 deletions
diff --git a/‎.github/workflows/scripts/codepath-notification
Lines changed: 2 additions & 1 deletion b/‎.github/workflows/scripts/codepath-notification
Lines changed: 2 additions & 1 deletion
diff --git a/‎.github/workflows/test-chunk.yml
Lines changed: 79 additions & 0 deletions b/‎.github/workflows/test-chunk.yml
Lines changed: 79 additions & 0 deletions
@@ -1,75 +1,12 @@
-# Javascript Node CircleCI 2.0 configuration file
-#
-# Check https://circleci.com/docs/2.0/language-javascript/ for more details
-#
-
-aliases:
-  - &environment
-      docker:
-        # specify the version you desire here
-        - image: cimg/node:20.14.0-browsers
-      resource_class: xlarge
-        # Specify service dependencies here if necessary
-        # CircleCI maintains a library of pre-built images
-        # documented at https://circleci.com/docs/2.0/circleci-images/
-        # - image: circleci/mongo:3.4.4
-      working_directory: ~/Prebid.js
-
-  - &restore_dep_cache
-      keys:
-        - v1-dependencies-{{ checksum "package.json" }}
-
-  - &save_dep_cache
-      paths:
-        - node_modules
-      key: v1-dependencies-{{ checksum "package.json" }}
-
-  - &install
-      name: Install gulp cli
-      command: sudo npm install -g gulp-cli
-
-  - &run_unit_test
-      name: BrowserStack testing
-      command: gulp test --browserstack --nolintfix
-
-  - &run_endtoend_test
-      name: BrowserStack End to end testing
-      command: gulp e2e-test
-
-  - &unit_test_steps
-    - checkout
-    - restore_cache: *restore_dep_cache
-    - run: npm ci
-    - save_cache: *save_dep_cache
-    - run: *install
-    - run: *run_unit_test
-
-  - &endtoend_test_steps
-    - checkout
-    - restore_cache: *restore_dep_cache
-    - run: npm install
-    - save_cache: *save_dep_cache
-    - run: *install
-    - run: *run_endtoend_test
-
-version: 2
+version: 2.1
 jobs:
-  build:
-    <<: *environment
-    steps: *unit_test_steps
-
-  e2etest:
-    <<: *environment
-    steps: *endtoend_test_steps
-
+  noop:
+    docker:
+      - image: cimg/base:stable
+    steps:
+      - run: echo "CircleCI build skipped - using GitHub Actions. This job can be removed once 9.x is no longer supported."
 workflows:
   version: 2
-  commit:
+  default:
     jobs:
-      - build
-      - e2etest:
-          requires:
-            - build
-
-experimental:
-  pipelines: true
+      - noop
@@ -5,7 +5,9 @@
 
 	"build": {
 		"dockerfile": "Dockerfile",		
-		"args": { "VARIANT": "12" }
+		"args": {
+			"VARIANT": "18"
+		}
 	},
 
 	"postCreateCommand": "bash .devcontainer/postCreate.sh",
 
@@ -0,0 +1,18 @@
+/**
+ * @id prebid/json-request-content-type
+ * @name Application/json request type in bidder
+ * @kind problem
+ * @problem.severity warning
+ * @description Using 'application/json' as request type triggers browser preflight requests and may increase bidder timeouts
+ */
+
+import javascript
+
+from Property prop
+where
+  prop.getName() = "contentType" and
+  prop.getInit() instanceof StringLiteral and
+  prop.getInit().(StringLiteral).getStringValue() = "application/json"
+select prop,
+  "application/json request type triggers preflight requests and may increase bidder timeouts"
+
@@ -4,3 +4,11 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    versioning-strategy: increase
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
@@ -8,13 +8,13 @@ autolabeler:
 categories:
   - title: '🚀 New Features'
     label: 'feature'
-  - title: '🛠 Maintenance'
-    label: 'maintenance'    
   - title: '🐛 Bug Fixes'
     labels:
       - 'fix'
       - 'bugfix'
-      - 'bug'      
+      - 'bug'
+  - title: '🛠 Maintenance'
+    labels: []
 change-template: '- $TITLE (#$NUMBER)'
 version-resolver:
   major:
 
@@ -16,7 +16,7 @@ jobs:
       - uses: actions/setup-node@v2
         with:
           always-auth: true
-          node-version: '14.x'
+          node-version: '20.x'
           registry-url: https://npm.pkg.github.com
           scope: '@freestarcapital'
       - run: npm install
 
@@ -0,0 +1,109 @@
+name: Run unit tests
+on:
+  workflow_call:
+    inputs:
+      build-cmd:
+        description: Build command, run once
+        required: true
+        type: string
+      test-cmd:
+        description: Test command, run once per chunk
+        required: true
+        type: string
+      serialize:
+        description: If true, allow only one concurrent chunk (see note on concurrency below)
+        required: false
+        type: boolean
+    outputs:
+      wdir:
+        description: Cache key for the working directory after running tests
+        value: ${{ jobs.chunk-4.outputs.wdir }}
+    secrets:
+      BROWSERSTACK_USER_NAME:
+        description: "Browserstack user name"
+      BROWSERSTACK_ACCESS_KEY:
+        description: "Browserstack access key"
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Fetch source
+        uses: actions/cache/restore@v4
+        with:
+          path: .
+          key: source-${{ github.run_id }}
+          fail-on-cache-miss: true
+
+      - name: Build
+        run: ${{ inputs.build-cmd }}
+
+      - name: Cache build output
+        uses: actions/cache/save@v4
+        with:
+          path: .
+          key: build-${{ inputs.build-cmd }}-${{ github.run_id }}
+
+      - name: Verify cache
+        uses: actions/cache/restore@v4
+        with:
+          path: .
+          key: build-${{ inputs.build-cmd }}-${{ github.run_id }}
+          lookup-only: true
+          fail-on-cache-miss: true
+
+  chunk-1:
+    needs: build
+    name: Run tests (chunk 1 of 4)
+    uses: ./.github/workflows/test-chunk.yml
+    with:
+      chunk-no: 1
+      wdir: build-${{ inputs.build-cmd }}-${{ github.run_id }}
+      cmd: ${{ inputs.test-cmd }}
+      serialize: ${{ inputs.serialize }}
+    secrets:
+      BROWSERSTACK_USER_NAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
+      BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
+  chunk-2:
+    name: Run tests (chunk 2 of 4)
+    needs: chunk-1
+    uses: ./.github/workflows/test-chunk.yml
+    with:
+      chunk-no: 2
+      wdir: ${{ needs.chunk-1.outputs.wdir }}
+      cmd: ${{ inputs.test-cmd }}
+      serialize: ${{ inputs.serialize }}
+    secrets:
+      BROWSERSTACK_USER_NAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
+      BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
+  chunk-3:
+    name: Run tests (chunk 3 of 4)
+    needs: chunk-2
+    uses: ./.github/workflows/test-chunk.yml
+    with:
+      chunk-no: 3
+      wdir: ${{ needs.chunk-2.outputs.wdir }}
+      cmd: ${{ inputs.test-cmd }}
+      serialize: ${{ inputs.serialize }}
+    secrets:
+      BROWSERSTACK_USER_NAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
+      BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
+  chunk-4:
+    name: Run tests (chunk 4 of 4)
+    needs: chunk-3
+    uses: ./.github/workflows/test-chunk.yml
+    with:
+      chunk-no: 4
+      wdir: ${{ needs.chunk-3.outputs.wdir }}
+      cmd: ${{ inputs.test-cmd }}
+      serialize: ${{ inputs.serialize }}
+    secrets:
+      BROWSERSTACK_USER_NAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
+      BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
@@ -15,4 +15,5 @@ rubicon|magnite : [email protected]
 appnexus : [email protected]
 pubmatic : [email protected]
 openx : [email protected]
-medianet : [email protected]
+(modules|libraries)/medianet : [email protected]
+teads : [email protected]
@@ -0,0 +1,79 @@
+name: Test chunk
+on:
+  workflow_call:
+    inputs:
+      serialize:
+        required: false
+        type: boolean
+      cmd:
+        required: true
+        type: string
+      chunk-no:
+        required: true
+        type: number
+      wdir:
+        required: true
+        type: string
+    outputs:
+      wdir:
+        description: "Cache key for the working directory after running tests"
+        value: test-${{ inputs.cmd }}-${{ inputs.chunk-no }}-${{ github.run_id }}
+    secrets:
+      BROWSERSTACK_USER_NAME:
+        description: "Browserstack user name"
+      BROWSERSTACK_ACCESS_KEY:
+        description: "Browserstack access key"
+
+concurrency:
+  # The following generates 'browserstack-<run_id>' when inputs.serialize is true, and a hopefully unique ID otherwise
+  # Ideally we'd like to serialize browserstack access across all workflows, but github's max queue length is only 1
+  # (cfr. https://github.com/orgs/community/discussions/12835)
+  # so we add the run_id to serialize only within one push / pull request (which has the effect of queueing e2e and unit tests)
+  group: ${{ inputs.serialize && 'browser' || github.run_id }}${{ inputs.serialize && 'stack' || inputs.cmd }}-${{ github.run_id }}
+  cancel-in-progress: false
+
+jobs:
+  test:
+    name: "Test chunk ${{ inputs.chunk-no }}"
+    env:
+      BROWSERSTACK_USERNAME: ${{ secrets.BROWSERSTACK_USER_NAME }}
+      BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
+      TEST_CHUNKS: 4
+      TEST_CHUNK: ${{ inputs.chunk-no }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Restore working directory
+        id: restore-dir
+        uses: actions/cache/restore@v4
+        with:
+          path: .
+          key: ${{ inputs.wdir }}
+          fail-on-cache-miss: true
+
+      - name: Run tests
+        uses: nick-fields/retry@v3
+        with:
+          timeout_minutes: 8
+          max_attempts: 3
+          command: ${{ inputs.cmd }}
+
+      - name: Save working directory
+        uses: actions/cache/save@v4
+        with:
+          path: .
+          key: test-${{ inputs.cmd }}-${{ inputs.chunk-no }}-${{ github.run_id }}
+
+      - name: Verify cache
+        uses: actions/cache/restore@v4
+        with:
+          path: .
+          key: test-${{ inputs.cmd }}-${{ inputs.chunk-no }}-${{ github.run_id }}
+          lookup-only: true
+          fail-on-cache-miss: true
+
+