.gitlab-ci.yml

image: node:lts-alpine

stages:
  - tests
  - security
  - publish

code quality:
  stage: tests
  script:
    - yarn install
    - yarn run lint

dependencies outdated:
  stage: tests
  script:
    - yarn install
    - yarn outdated
  allow_failure: true

tests & coverage:
  stage: tests
  script:
    - yarn install
    - yarn coverage
  coverage: '/All files[^|]*\|[^|]*\s+([\d\.]+)/'
  artifacts:
    paths:
      - coverage/

security audit:
  stage: security
  needs:
    - code quality
    - dependencies outdated
    - tests & coverage
  script:
    - yarn audit --level high --groups dependencies

package:
  stage: publish
  needs:
    - security audit
  script:
    - yarn install
    - yarn pack
  artifacts:
    paths:
      - ./*.tgz

publish:
  stage: publish
  needs:
    - security audit
  only:
    - tags
    - triggers
  script:
    - echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > .npmrc
    - yarn install
    - yarn publish