chore: update hydrogen-alpine version (#6720)

* chore: update hydrogen-alpine version * chore: update hydrogen-alpine version * chore: update chromium and puppeteer versions to be compatible with alpine3.18 * chore: update node version on ci as 14 has reached eol * chore: add openssl-legacy-provider flag to ci before we upgrade to webpack5 * chore: reduce memory consumed by node as ci runner is running out of memory * chore: cache node modules directory so we run npm ci once and reuse for subsequent jobs * chore: set space to 4096 * chore: remove open-ssl flag * chore: add open-ssl flag * chore: increase swap file to prevent ci from failing * chore: increase space size to 8192 * increase space for backend test * chore: increase timeout for jest test * chore: increase jest timeout
opengovsg · Sep 22, 2023 · 3531eac · 3531eac
1 parent 860aad7
commit 3531eac
Show file tree

Hide file tree

Showing 5 changed files with 1,018 additions and 521 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -29,6 +29,7 @@ jobs:
               - src/**
               - package.json
               - package-lock.json
+            
 
   install:
     runs-on: ubuntu-latest
@@ -37,9 +38,14 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 18
           cache: 'npm'
           cache-dependency-path: '**/package-lock.json'
+      - name: Cache Node modules
+        uses: actions/cache@v2
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.OS }}-node-modules-${{ hashFiles('**/package-lock.json') }}
       - run: npm ci
 
   build:
@@ -51,13 +57,18 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 18
           cache: 'npm'
           cache-dependency-path: '**/package-lock.json'
-      - run: npm ci
+      # Load cached node_modules
+      - name: Cache Node modules
+        uses: actions/cache@v2
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.OS }}-node-modules-${{ hashFiles('**/package-lock.json') }}
       - run: npm run build
         env:
-          NODE_OPTIONS: '--max-old-space-size=4096'
+          NODE_OPTIONS: '--max-old-space-size=4096 --openssl-legacy-provider'
       - name: Upload build files
         uses: actions/upload-artifact@v2
         if: always()
@@ -76,10 +87,15 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 18
           cache: 'npm'
           cache-dependency-path: '**/package-lock.json'
-      - run: npm ci
+      # Load cached node_modules
+      - name: Cache Node modules
+        uses: actions/cache@v2
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.OS }}-node-modules-${{ hashFiles('**/package-lock.json') }}
       - run: npm run test:frontend
 
   frontend_lint:
@@ -91,17 +107,33 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 18
           cache: 'npm'
           cache-dependency-path: '**/package-lock.json'
-      - run: npm ci
+      # Load cached node_modules
+      - name: Cache Node modules
+        uses: actions/cache@v2
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.OS }}-node-modules-${{ hashFiles('**/package-lock.json') }}
       - run: npm run lint:frontend
 
   backend_test:
     needs: [changes, install, build]
     if: ${{ needs.changes.outputs.backend == 'true' }}
     runs-on: ubuntu-latest
     steps:
+      # prevent CI from failing when worker runs out of memory
+      # https://github.com/actions/runner-images/discussions/7188#discussioncomment-6750749
+      - name: Increase swapfile
+        run: |
+          df -h
+          sudo swapoff -a
+          sudo fallocate -l 15G /swapfile
+          sudo chmod 600 /swapfile
+          sudo mkswap /swapfile
+          sudo swapon /swapfile
+          sudo swapon --show
       - uses: actions/checkout@v2
       - uses: actions/download-artifact@v3
         if: always()
@@ -110,11 +142,19 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 18
           cache: 'npm'
           cache-dependency-path: '**/package-lock.json'
-      - run: npm ci && npm ci --prefix serverless/virus-scanner
+      # Load cached node_modules
+      - name: Cache Node modules
+        uses: actions/cache@v2
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.OS }}-node-modules-${{ hashFiles('**/package-lock.json') }}
+      - run: npm ci --prefix serverless/virus-scanner
       - run: npm run test:backend
+        env:
+          NODE_OPTIONS: '--max-old-space-size=4096'
       - name: Coveralls
         uses: coverallsapp/github-action@master
         with:
@@ -129,9 +169,14 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v3
         with:
-          node-version: 14
+          node-version: 18
           cache: 'npm'
           cache-dependency-path: '**/package-lock.json'
-      - run: npm ci
+      # Load cached node_modules
+      - name: Cache Node modules
+        uses: actions/cache@v2
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.OS }}-node-modules-${{ hashFiles('**/package-lock.json') }}
       - run: npm run lint-ci
       - run: npm_config_mode=yes npx lockfile-lint --type npm --path package.json --validate-https --allowed-hosts npm
diff --git a/Dockerfile.development b/Dockerfile.development
@@ -1,4 +1,4 @@
-FROM node:hydrogen-alpine3.16
+FROM node:hydrogen-alpine3.18
 LABEL maintainer=FormSG<[email protected]>
 
 WORKDIR /opt/formsg
@@ -28,7 +28,7 @@ RUN apk update && apk upgrade && \
     # that is guaranteed to work. Upgrades must be done in lockstep.
     # https://github.com/puppeteer/puppeteer/blob/master/docs/troubleshooting.md#running-on-alpine
     # https://www.npmjs.com/package/puppeteer-core?activeTab=versions for corresponding versions
-    chromium=102.0.5005.182-r0 \
+    chromium=115.0.5790.170-r0 \
     nss \
     freetype \
     freetype-dev \

diff --git a/Dockerfile.production b/Dockerfile.production
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM node:hydrogen-alpine3.16 as build
+FROM node:hydrogen-alpine3.18 as build
 
 # node-modules-builder stage installs/compiles the node_modules folder
 # Python version must be specified starting in alpine3.12
@@ -60,7 +60,7 @@ RUN --mount=type=secret,id=dd_api_key \
 RUN npm prune --production --legacy-peer-deps
 
 # This stage builds the final container
-FROM node:hydrogen-alpine3.16
+FROM node:hydrogen-alpine3.18
 LABEL maintainer=FormSG<[email protected]>
 WORKDIR /opt/formsg
 
@@ -81,7 +81,7 @@ RUN mv /opt/formsg/dist/backend/shared /opt/formsg/
 # https://www.npmjs.com/package/puppeteer-core?activeTab=versions for corresponding versions
 
 RUN apk add --no-cache \
-    chromium=102.0.5005.182-r0 \
+    chromium=115.0.5790.170-r0 \
     nss \
     freetype \
     freetype-dev \