deps(python/biometric-engine): bump mediapipe from 0.10.18 to 1.0.1 in /services/biometric-engine #523
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: BIS Validation | |
| on: | |
| pull_request: | |
| branches: [main, hardening/production-readiness] | |
| push: | |
| branches: [main, hardening/production-readiness] | |
| permissions: | |
| contents: read | |
| jobs: | |
| node-tests: | |
| name: node-tests | |
| runs-on: ubuntu-24.04 | |
| services: | |
| postgres: | |
| image: postgres:16-alpine | |
| env: | |
| POSTGRES_USER: bis_ci | |
| POSTGRES_PASSWORD: bis_ci_disposable_password | |
| POSTGRES_DB: bis_ci | |
| ports: | |
| - 5432:5432 | |
| options: >- | |
| --health-cmd "pg_isready -U bis_ci -d bis_ci" | |
| --health-interval 10s | |
| --health-timeout 5s | |
| --health-retries 10 | |
| env: | |
| DATABASE_URL: postgresql://bis_ci:bis_ci_disposable_password@localhost:5432/bis_ci | |
| BIS_DATABASE_URL: postgresql://bis_ci:bis_ci_disposable_password@localhost:5432/bis_ci | |
| JWT_SECRET: ci-session-secret-not-for-production | |
| KEYCLOAK_URL: https://auth.bis.invalid | |
| KEYCLOAK_REALM: bis | |
| KEYCLOAK_CLIENT_ID: bis-bff | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 22 | |
| cache: pnpm | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Apply canonical PostgreSQL migrations | |
| run: pnpm db:migrate | |
| - name: Type-check | |
| run: pnpm check | |
| - name: Production build | |
| run: pnpm build | |
| - name: Node integration suite | |
| run: pnpm test | |
| gateway-race: | |
| name: gateway-race | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: services/gateway/go.mod | |
| cache-dependency-path: services/gateway/go.sum | |
| - name: Gateway control-plane race suite | |
| working-directory: services/gateway | |
| run: go test -race ./... | |
| archive-worker: | |
| name: archive-worker | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: services/cold-archive-writer/go.mod | |
| cache-dependency-path: services/cold-archive-writer/go.sum | |
| - name: Archive worker static and race checks | |
| working-directory: services/cold-archive-writer | |
| run: | | |
| go vet ./... | |
| go test -race ./... | |
| mobile-security: | |
| name: mobile-security | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: pnpm/action-setup@v6 | |
| - uses: actions/setup-node@v7 | |
| with: | |
| node-version: 22 | |
| cache: pnpm | |
| cache-dependency-path: | | |
| pnpm-lock.yaml | |
| bis-mobile/pnpm-lock.yaml | |
| - name: Reject deprecated mobile client references | |
| run: ./scripts/check-deprecated-mobile-references.sh | |
| - name: Install typed AppRouter dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Install authoritative native client dependencies | |
| working-directory: bis-mobile | |
| run: pnpm install --frozen-lockfile --ignore-workspace | |
| - name: Validate authoritative native client | |
| working-directory: bis-mobile | |
| run: | | |
| pnpm typecheck | |
| pnpm lint |