ci: create simpler action flows and add oicd token on release

Author: jmcdo29

.github/workflows/ci.yml

@@ -6,71 +6,66 @@ on:
   pull_request:
 
 env:
-  NX_CLOUD_DISTRIBUTED_EXECUTION: ${{ !contains(github.event.pull_request.user.login, 'dependabot') }}
   NX_CLOUD_AUTH_TOKEN: ${{ secrets.NX_CLOUD_TOKEN }}
 
 jobs:
   main:
     runs-on: ubuntu-latest
-    if: ${{ github.event_name != 'pull_request' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v6
         name: Checkout [main]
         with:
           fetch-depth: 0
-      - name: Derive appropriate SHAs for base and head for `nx affected` commands
-        uses: nrwl/nx-set-shas@v1
+      - name: Derive SHAs for base and head for `nx affected` commands
+        uses: nrwl/nx-set-shas@v4
+
+      - name: Set SHAs
+        shell: bash
+        run: |
+          echo "BASE: ${{ env.NX_BASE }}"
+          echo "HEAD: ${{ env.NX_HEAD }}"
+
       - uses: actions/setup-node@v1
         with:
-          node-version: 18.x
+          node-version: 24.x
       - name: Install pnpm
         run: npm i -g pnpm
       - name: Install deps
         run: pnpm i --frozen-lockfile=false
       - name: Build Projects
-        run: pnpm nx affected --target=build --parallel --max-parallel=3
+        run: pnpm nx affected --target=build  --base=${{ env.NX_BASE }} --head=${{ env.NX_HEAD }}
       - name: Test Projects
-        run: pnpm nx affected --target=test --parallel --max-parallel=2
-      - run: pnpm nx-cloud stop-all-agents
+        run: pnpm nx affected --target=test --base=${{ env.NX_BASE }} --head=${{ env.NX_HEAD }}
       - name: Tag main branch if all jobs succeed
         uses: nrwl/nx-tag-successful-ci-run@v1
-  pr:
-    runs-on: ubuntu-latest
-    if: ${{ github.event_name == 'pull_request' }}
-    steps:
-      - uses: actions/checkout@v2
-        with:
-          ref: ${{ github.event.pull_request.head.ref }}
-          fetch-depth: 0
-      - name: Derive appropriate SHAs for base and head for `nx affected` commands
-        uses: nrwl/nx-set-shas@v1
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 18.x
-      - name: Install pnpm
-        run: npm i -g pnpm
-      - name: Install deps
-        run: pnpm i --frozen-lockfile=false
-      - name: Build Projects
-        run: pnpm nx affected --target=build --parallel --max-parallel=3
-      - name: Test Projects
-        run: pnpm nx affected --target=test --parallel --max-parallel=2
-      - run: pnpm nx-cloud stop-all-agents
-  agents:
-    runs-on: ubuntu-latest
-    name: Agent 1
-    timeout-minutes: 60
-    strategy:
-      matrix:
-        agent: [ 1, 2, 3 ]
-    steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 18.x
-      - name: Install pnpm
-        run: npm i -g pnpm
-      - name: Install deps
-        run: pnpm i --frozen-lockfile=false
-      - name: Start Nx Agent ${{ matrix.agent }}
-        run: pnpm nx-cloud start-agent
+  # pr:
+  #   runs-on: ubuntu-latest
+  #   if: ${{ github.event_name == 'pull_request' }}
+  #   steps:
+  #     - uses: actions/checkout@v6
+  #       name: Checkout [pr]
+  #       with:
+  #         repository: ${{ github.event.pull_request.head.repo }}
+  #         ref: ${{ github.event.pull_request.head.ref }}
+  #         fetch-depth: 0
+  #     - name: Derive SHAs for base and head for `nx affected` commands
+  #       uses: nrwl/nx-set-shas@v4
+
+  #     - name: Set SHAs
+  #       shell: bash
+  #       run: |
+  #         echo "BASE: ${{ env.NX_BASE }}"
+  #         echo "HEAD: ${{ env.NX_HEAD }}"
+
+  #     - uses: actions/setup-node@v1
+  #       with:
+  #         node-version: 24.x
+  #     - name: Install pnpm
+  #       run: npm i -g pnpm
+  #     - name: Install deps
+  #       run: pnpm i --frozen-lockfile=false
+  #     - name: Build Projects
+  #       run: pnpm nx affected --target=build --parallel --max-parallel=3
+  #     - name: Test Projects
+  #       run: pnpm nx affected --target=test --parallel --max-parallel=2
+  #    - run: pnpm nx-cloud stop-all-agents

.github/workflows/release.yml

@@ -5,8 +5,11 @@ on:
     branches:
       - main
 
+permissions:
+  id-token: write
+  contents: read
+
 env:
-  NX_CLOUD_DISTRIBUTED_EXECUTION: true
   NX_CLOUD_AUTH_TOKEN: ${{ secrets.NX_CLOUD_TOKEN }}
 
 jobs:
@@ -20,10 +23,10 @@ jobs:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0
 
-      - name: Setup Node.js 18.x
+      - name: Setup Node.js 24.x
         uses: actions/setup-node@v1
         with:
-          node-version: 18.x
+          node-version: 24.x
 
       - name: Install pnpm
         run: npm i -g pnpm
@@ -44,24 +47,5 @@ jobs:
           publish: pnpm release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-      - run: pnpm nx-cloud stop-all-agents
+          # NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
-  agents:
-    runs-on: ubuntu-latest
-    name: Agent 1
-    timeout-minutes: 60
-    strategy:
-      matrix:
-        agent: [ 1, 2, 3 ]
-    steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v1
-        with:
-          node-version: 18.x
-      - name: Install pnpm
-        run: npm i -g pnpm
-      - name: Install deps
-        run: pnpm i --frozen-lockfile=false
-      - name: Start Nx Agent ${{ matrix.agent }}
-        run: pnpm nx-cloud start-agent