Use Ubicloud for GitHub Actions (#365)

.github/workflows/check-codegen.yaml

@@ -1,113 +0,0 @@
-name: Ensure up-to-date codegen
-
-on:
-  push:
-    branches:
-      - dev
-      - main
-  pull_request:
-    branches:
-      - dev
-      - main
-
-jobs:
-  check_codegen:
-    runs-on: ubuntu-latest
-
-    strategy:
-      matrix:
-        node-version: [22.x]
-
-    steps:
-      - uses: actions/checkout@v3
-
-      - name: Setup Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
-        with:
-          node-version: ${{ matrix.node-version }}
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v3
-        with:
-            version: 9.1.2
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      - name: Create .env.production.local file for apps/backend
-        run: cp apps/backend/.env.development apps/backend/.env.production.local
-
-      - name: Create .env.production.local file for apps/dashboard
-        run: cp apps/dashboard/.env.development apps/dashboard/.env.production.local
-      
-      - name: Create .env.production.local file for apps/e2e
-        run: cp apps/e2e/.env.development apps/e2e/.env.production.local
-
-      - name: Create .env.production.local file for examples/cjs-test
-        run: cp examples/cjs-test/.env.development examples/cjs-test/.env.production.local
-      
-      - name: Create .env.production.local file for examples/demo
-        run: cp examples/demo/.env.development examples/demo/.env.production.local
-
-      - name: Create .env.production.local file for examples/docs-examples
-        run: cp examples/docs-examples/.env.development examples/docs-examples/.env.production.local
-
-      - name: Create .env.production.local file for examples/e-commerce
-        run: cp examples/e-commerce/.env.development examples/e-commerce/.env.production.local
-
-      - name: Create .env.production.local file for examples/middleware
-        run: cp examples/middleware/.env.development examples/middleware/.env.production.local
-
-      - name: Create .env.production.local file for examples/partial-prerendering
-        run: cp examples/partial-prerendering/.env.development examples/partial-prerendering/.env.production.local
-
-      - name: Create .env.production.local file for examples/supabase
-        run: cp examples/supabase/.env.development examples/supabase/.env.production.local
-
-      - name: Build
-        run: pnpm build
-
-      - name: Store Quetzal API key in packages/stack/.env.local
-        run: echo "QUETZAL_API_KEY=${{ secrets.QUETZAL_API_KEY }}" > packages/stack/.env.local
-
-      - name: Run code gen
-        run: pnpm codegen
-      
-      - name: Check for uncommitted changes
-        run: |
-          if [[ -n $(git status --porcelain) ]]; then
-            echo "Error: There are uncommitted changes after build/lint/typecheck."
-            echo "Please commit all changes before pushing."
-            git status
-            exit 1
-          fi
-
-  
-  check_prisma_migrations:
-    runs-on: ubuntu-latest
-
-    strategy:
-      matrix:
-        node-version: [22.x]
-
-    steps:
-      - uses: actions/checkout@v3
-
-      - name: Setup Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
-        with:
-          node-version: ${{ matrix.node-version }}
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v3
-        with:
-            version: 9.1.2
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-      
-      - name: Start Postgres shadow DB
-        run: docker run -d --name postgres-prisma-diff-shadow -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=PLACEHOLDER-PASSWORD--dfaBC1hm1v -e POSTGRES_DB=postgres -p 5432:5432 postgres:latest
-      
-      - name: Check for differences in Prisma schema and migrations
-        run: pnpm run prisma migrate diff --from-migrations ./prisma/migrations --to-schema-datamodel ./prisma/schema.prisma --shadow-database-url postgres://postgres:PLACEHOLDER-PASSWORD--dfaBC1hm1v@localhost:5432/postgres --exit-code

.github/workflows/check-prisma-migrations.yaml

@@ -0,0 +1,41 @@
+name: Ensure Prisma migrations are in sync with the schema
+
+on:
+  push:
+    branches:
+      - dev
+      - main
+  pull_request:
+    branches:
+      - dev
+      - main
+
+jobs:
+  check_prisma_migrations:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [22.x]
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v3
+        with:
+            version: 9.1.2
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+      
+      - name: Start Postgres shadow DB
+        run: docker run -d --name postgres-prisma-diff-shadow -e POSTGRES_USER=postgres -e POSTGRES_PASSWORD=PLACEHOLDER-PASSWORD--dfaBC1hm1v -e POSTGRES_DB=postgres -p 5432:5432 postgres:latest
+      
+      - name: Check for differences in Prisma schema and migrations
+        run: pnpm run prisma migrate diff --from-migrations ./prisma/migrations --to-schema-datamodel ./prisma/schema.prisma --shadow-database-url postgres://postgres:PLACEHOLDER-PASSWORD--dfaBC1hm1v@localhost:5432/postgres --exit-code

.github/workflows/docker-build.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   build-server:
     name: Docker Build and Push Server
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-4
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/e2e-api-tests.yaml

@@ -12,14 +12,14 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-16
     env:
       NODE_ENV: test
       STACK_ENABLE_HARDCODED_PASSKEY_CHALLENGE_FOR_TESTING: yes
 
     strategy:
       matrix:
-        node-version: [20.x, 22.x]
+        node-version: [20.x]
 
     steps:
       - uses: actions/checkout@v3

.github/workflows/lint-and-build.yaml

@@ -12,7 +12,7 @@ on:
 
 jobs:
   lint_and_build:
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-8
 
     strategy:
       matrix:
@@ -72,6 +72,21 @@ jobs:
       
       - name: Typecheck
         run: pnpm typecheck
+
+      - name: Store Quetzal API key in packages/stack/.env.local to prepare for code gen
+        run: echo "QUETZAL_API_KEY=${{ secrets.QUETZAL_API_KEY }}" > packages/stack/.env.local
+
+      - name: Run code gen  # so we can check for uncommitted changes afterwards; `build` doesn't regenerate some committed files, eg. Quetzal
+        run: pnpm codegen
+      
+      - name: Check for uncommitted changes
+        run: |
+          if [[ -n $(git status --porcelain) ]]; then
+            echo "Error: There are uncommitted changes after build/lint/typecheck."
+            echo "Please commit all changes before pushing."
+            git status
+            exit 1
+          fi
       
       - name: Check for uncommitted changes
         run: |

.github/workflows/preview-docs.yaml

@@ -4,7 +4,7 @@ on: pull_request
 
 jobs:
   run:
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-8
 
     permissions: write-all
 

.github/workflows/publish-docs.yaml

@@ -7,22 +7,7 @@ on:
 
 jobs:
   run:
-    runs-on: ubuntu-latest
-    env:
-      NEXT_PUBLIC_STACK_API_URL: http://localhost:8102
-      NEXT_PUBLIC_STACK_PROJECT_ID: internal
-      NEXT_PUBLIC_STACK_PUBLISHABLE_CLIENT_KEY: internal-project-publishable-client-key
-      STACK_SECRET_SERVER_KEY: internal-project-secret-server-key
-      STACK_SERVER_SECRET: 23-wuNpik0gIW4mruTz25rbIvhuuvZFrLOLtL7J4tyo
-
-      STACK_EMAIL_HOST: 127.0.0.1
-      STACK_EMAIL_PORT: 2500
-      STACK_EMAIL_USERNAME: test
-      STACK_EMAIL_PASSWORD: none
-      STACK_EMAIL_SENDER: noreply@test.com
-
-      STACK_DATABASE_CONNECTION_STRING: postgres://postgres:PASSWORD-PLACEHOLDER--uqfEC1hmmv@localhost:5432/stackframe
-      STACK_DIRECT_DATABASE_CONNECTION_STRING: postgres://postgres:PASSWORD-PLACEHOLDER--uqfEC1hmmv@localhost:5432/stackframe
+    runs-on: ubicloud-standard-8
 
     permissions: write-all