@@ -188,7 +188,7 @@ jobs:
188188
189189# Check for any typos
190190 -name :Check for typos
191- uses :crate-ci/typos@b74202f74b4346efdbce7801d187ec57b266bac8 # v1.27 .3
191+ uses :crate-ci/typos@d1c850b2b5d502763520c25fb4a6a1128ad99bd9 # v1.28 .3
192192with :
193193config :.github/workflows/typos.toml
194194
@@ -540,7 +540,7 @@ jobs:
540540timeout-minutes :25
541541steps :
542542 -name :Harden Runner
543- uses :step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
543+ uses :step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
544544with :
545545egress-policy :audit
546546
@@ -630,11 +630,8 @@ jobs:
630630working-directory :site
631631
632632test-e2e :
633- # test-e2e fails on 2-core 8GB runners, so we use the 4-core 16GB runner
634633runs-on :${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-4' || 'ubuntu-latest' }}
635634needs :changes
636- if :needs.changes.outputs.go == 'true' || needs.changes.outputs.ts == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
637- timeout-minutes :20
638635strategy :
639636fail-fast :false
640637matrix :
@@ -643,6 +640,9 @@ jobs:
643640name :test-e2e
644641 -premium :true
645642name :test-e2e-premium
643+ # Skip test-e2e on forks as they don't have access to CI secrets
644+ if :(needs.changes.outputs.go == 'true' || needs.changes.outputs.ts == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main') && !(github.event.pull_request.head.repo.fork)
645+ timeout-minutes :20
646646name :${{ matrix.variant.name }}
647647steps :
648648 -name :Harden Runner
@@ -666,6 +666,8 @@ jobs:
666666name :make gen
667667
668668 -run :pnpm build
669+ env :
670+ NODE_OPTIONS :${{ github.repository_owner == 'coder' && '--max_old_space_size=8192' || '' }}
669671working-directory :site
670672
671673 -run :pnpm playwright:install
@@ -747,7 +749,7 @@ jobs:
747749# Prevent excessive build runs on minor version changes
748750skip :" @(renovate/**|dependabot/**)"
749751# Run TurboSnap to trace file dependencies to related stories
750- # and tell chromatic to only take snapshots ofrelevent stories
752+ # and tell chromatic to only take snapshots ofrelevant stories
751753onlyChanged :true
752754# Avoid uploading single files, because that's very slow
753755zip :true
@@ -774,7 +776,7 @@ jobs:
774776workingDir :" ./site"
775777storybookBaseDir :" ./site"
776778# Run TurboSnap to trace file dependencies to related stories
777- # and tell chromatic to only take snapshots ofrelevent stories
779+ # and tell chromatic to only take snapshots ofrelevant stories
778780onlyChanged :true
779781# Avoid uploading single files, because that's very slow
780782zip :true
@@ -893,7 +895,7 @@ jobs:
893895needs :changes
894896# We always build the dylibs on Go changes to verify we're not merging unbuildable code,
895897# but they need only be signed and uploaded on coder/coder main.
896- if :needs.changes.outputs.docs-only == 'false ' || github.ref == 'refs/heads/main'
898+ if :needs.changes.outputs.go == 'true' || needs.changes.outputs.ci == 'true ' || github.ref == 'refs/heads/main'
897899runs-on :${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest' }}
898900steps :
899901 -name :Harden Runner
@@ -974,7 +976,7 @@ jobs:
974976 -changes
975977 -build-dylib
976978if :github.ref == 'refs/heads/main' && needs.changes.outputs.docs-only == 'false' && !github.event.pull_request.head.repo.fork
977- runs-on :${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest ' }}
979+ runs-on :${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-22.04 ' }}
978980permissions :
979981packages :write # Needed to push images to ghcr.io
980982env :
@@ -1144,7 +1146,7 @@ jobs:
11441146version :" 2.2.1"
11451147
11461148 -name :Get Cluster Credentials
1147- uses :google-github-actions/get-gke-credentials@206d64b64b0eba0a6e2f25113d044c31776ca8d6 # v2.2.2
1149+ uses :google-github-actions/get-gke-credentials@9025e8f90f2d8e0c3dafc3128cc705a26d992a6a # v2.3.0
11481150with :
11491151cluster_name :dogfood-v2
11501152location :us-central1-a