chore(ci): bump the github-actions-all group with 5 updates (#71) #312

	name: CI

	on:
	push:
	branches:
	- '*'
	pull_request:

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v7

	- name: Set up pnpm
	uses: pnpm/action-setup@v6

	- name: Use Node.js 24
	uses: actions/setup-node@v6
	with:
	node-version: 24
	cache: 'pnpm'

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Run checks
	run: pnpm check

	- name: Run tests
	run: pnpm test

	- name: Build project
	run: pnpm build

	- name: CLI smoke test
	run: node ./build/bin/qasphere.js --help

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v4

	- name: Cache Docker images
	uses: actions/cache@v5
	with:
	path: /tmp/.buildx-cache
	key: ${{ runner.os }}-docker-${{ hashFiles('mnode-test/docker-test.sh') }}
	restore-keys: \|
	${{ runner.os }}-docker-

	- name: Pre-pull Docker images
	run: \|
	echo "Pre-pulling Node.js Docker images..."
	docker pull node:18-alpine \|\| true
	docker pull node:20-alpine \|\| true
	docker pull node:22-alpine \|\| true
	docker pull node:24-alpine \|\| true

	- name: Multi-node version test
	run: cd mnode-test && ./docker-test.sh

	- name: Run live API tests
	# Dependabot PRs don't have access to repository secrets, so live tests
	# would always fail. Skip them for Dependabot-triggered runs.
	if: github.actor != 'dependabot[bot]'
	env:
	QAS_TEST_URL: ${{ secrets.QAS_TEST_URL }}
	QAS_TEST_TOKEN: ${{ secrets.QAS_TEST_TOKEN }}
	QAS_TEST_USERNAME: ${{ secrets.QAS_TEST_USERNAME }}
	QAS_TEST_PASSWORD: ${{ secrets.QAS_TEST_PASSWORD }}
	QAS_DEV_AUTH: ${{ secrets.QAS_DEV_AUTH }}
	run: pnpm test:live

Provide feedback