Skip to content

GHA reusable actions + web#4

Open
mklos-kw wants to merge 17 commits into
masterfrom
feat/ocisdev-821-4
Open

GHA reusable actions + web#4
mklos-kw wants to merge 17 commits into
masterfrom
feat/ocisdev-821-4

Conversation

@mklos-kw

@mklos-kw mklos-kw commented Jul 7, 2026

Copy link
Copy Markdown
Owner

Replaces the inline CI steps with two reusable composite actions — ocis-setup and ocis-test — living in a dedicated mklos-kw/ocis-github-actions repo. All acceptance test jobs now declare their intent (which services, which suites) rather than scripting the setup imperatively.

fix ci

fix ci

mvp: ocis github actions steps

mvp: ocis github actions steps

mvp: ocis github actions steps

mvp: ocis github actions steps, remove run-xyz.py

mvp: ocis github actions steps, remove run-xyz.py

mvp: ocis github actions steps, remove run-xyz.py

mvp: ocis github actions steps, cleanup

mvp: ocis github actions steps, cleanup

mvp: ocis github actions steps, extract steps to repo

mvp: ocis github actions steps, resolve remaining rfc points

fix: bump packages

fix(ci): pin node to 24.15.0 for e2e — 24.16.0 breaks playwright zip extraction

fix(ci): fix e2e web config path and litmus async uploads

fix: ci

fix: ci

feat: ocis unit test

feat: adapt to improved ocis-setup

feat: cleanup stop ocis

feat: improved ocm developer experience

feat: remove unused test pipeline

feat: declarative wopi step

feat: improve ocm providers step

feat: simplify the cli antivirus steps

feat: fix ocm

feat: fix antivirus

feat: fix ocm

fix: add OCIS_INSECURE and OCIS_LDAP_URI to federation extra-server-env

fix: add data server URLs to federation extra-server-env

feat: fix ocm

fix: add THUMBNAILS_DATA_ENDPOINT to federation extra-server-env

dx: remove redundant debug addr overrides from e2e extra-server-env

dx: fix e2e job — correct playwright cache key, drop redundant env vars, fold cert step

dx: collapse generate-code step, drop dead CHROMEDRIVER env var

dx: add .npmrc with pnpm store-dir to replace imperative config mutation in CI

dx: reorder e2e steps — tools → fetch → build → configure → services → run

dx: remove .npmrc — pnpm store handled by setup-node cache: pnpm

dx: replace corepack pnpm setup with pnpm/action-setup, delegate store cache to setup-node

fix: drop pnpm store cache from build-and-test — no pnpm-lock.yaml at repo root

fix: drop pnpm store cache from e2e setup-node — webTestRunner clone happens after tool setup

dx: pin pnpm/action-setup SHA, move generate-code before clone, add cache restore-keys, simplify ternaries

dx: remove Generate code step — now handled inside ocis-setup

revert: restore Generate oCIS frontend assets step in e2e — pnpm not available in ocis-setup

dx: remove Trust oCIS cert step from e2e — now handled inside ocis-setup

dx: remove Generate frontend assets from e2e — now self-contained in ocis-setup

dx: use web-ui-config input — remove Patch web UI config step and WEB_UI_CONFIG_FILE from extra-server-env

fix: e2e-keycloak - disable demo users for keycloak matrix entry (409 conflict)

fix: trust keycloak cert for playwright; combine CA bundle for NODE_EXTRA_CA_CERTS

feat: enable litmus job (declarative 3-step form)

fix: bump Go to 1.25.11 (GO-2026-5039 net/textproto)

refactor: replace Python with jq in govulncheck-wrapper.sh

ci: trigger run after ocis-test YAML fix

feat: enable cs3api job (declarative ocis-setup with docker-accessible)

feat: enable cs3api job

fix: use --network host for cs3api-validator so localhost resolves on host

oCIS returns localhost:9200 in data upload URLs; the validator container
needs host networking so those URLs are reachable.

feat: wopi-builtin:

feat: wopi-cs3

ci: retrigger

fix: bump golang.org/x/image to v0.43.0 (GO-2026-4961, GO-2026-5061, GO-2026-5062)

fix: wopi-cs3 uses app-provider (legacy arch) so cs3 wopi server issues its own tokens

ci: retrigger wopi-cs3 — start FakeOffice before oCIS

simplify: drop separate ocis-keycloak-setup step — Keycloak stack now started by ocis-setup(keycloak=true)

ci: retrigger — actions fixes (jq, WOPI_PORT, fakeoffice guard)

ci: retrigger — env safety, docker failure detection, WOPI timeout, cs3-wopi guard, port-offset
  collab, WOPI_TTL null

ci: retrigger — readability pass

ci: retrigger

ci: retrigger
@mklos-kw
mklos-kw force-pushed the feat/ocisdev-821-4 branch 2 times, most recently from 474a1d4 to 4c9cee2 Compare July 8, 2026 12:44
@mklos-kw
mklos-kw force-pushed the feat/ocisdev-821-4 branch from 4c9cee2 to 42ca492 Compare July 8, 2026 12:45
mklos-kw added 13 commits July 8, 2026 17:04
Use web/dev/docker/ocis/app-registry.yaml (Collabora+OnlyOffice for
ODT/ODS/ODP/DOCX/XLSX/PPTX) instead of the minimal 2-entry registry.
Passed via new app-registry-file input in ocis-setup action so the
correct MIME types are registered before oCIS starts, no restart needed.
…suite

The reva app-provider only marks a WOPI provider as secureView=true when
its registered gRPC address matches FRONTEND_APP_HANDLER_SECURE_VIEW_APP_ADDR.
The collaboration service registers as com.owncloud.api.collaboration.<AppName>
(e.g. com.owncloud.api.collaboration.Collabora), but the oCIS default for this
env is the shorter "com.owncloud.api.collaboration" — so the addresses never
match and secure_view stays false in /app/list responses.

Without secureView=true, web-app-external hides the "Open in Collabora" action
for files shared with the "Can view (secure)" role (because canDownload()=false
and !fileExtension.secureView → action filtered out), causing both secureView
e2e tests to fail.
@mklos-kw
mklos-kw force-pushed the feat/ocisdev-821-4 branch 4 times, most recently from bab45fc to 38e4eb4 Compare July 17, 2026 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant