add node checks as workflow

.gitea/workflows/node-checks.yml

@@ -0,0 +1,42 @@
+name: Reusable Node Checks
+
+on:
+  workflow_call:
+    inputs:
+      node_version:
+        type: string
+        default: "22"
+      install_command:
+        type: string
+        default: "npm ci"
+      typecheck_command:
+        type: string
+        default: "npm run typecheck"
+      test_command:
+        type: string
+        default: "npm test"
+      build_command:
+        type: string
+        default: "npm run build"
+
+jobs:
+  check:
+    runs-on: docker
+    container:
+      image: node:${{ inputs.node_version }}-alpine
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install dependencies
+        run: ${{ inputs.install_command }}
+
+      - name: Typecheck
+        run: ${{ inputs.typecheck_command }}
+
+      - name: Run tests
+        run: ${{ inputs.test_command }}
+
+      - name: Build
+        run: ${{ inputs.build_command }}

.gitea/workflows/notifications.yml

@@ -17,7 +17,7 @@ on:
       NTFY_TOPIC: { required: true }
       NTFY_TOKEN: { required: true }
       NTFY_SERVER: { required: true }
-      GITEA_TOKEN: { required: true }
+      API_GITEA_TOKEN: { required: true }
 
 jobs:
   notify:
@@ -27,7 +27,7 @@ jobs:
         id: previous
         shell: bash
         env:
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          API_GITEA_TOKEN: ${{ secrets.API_GITEA_TOKEN }}
         run: |
           set -euo pipefail
 
@@ -41,7 +41,7 @@ jobs:
           current_run_number = int("${{ gitea.run_number }}")
           current_branch = "${{ gitea.ref_name }}"
           current_event = "${{ gitea.event_name }}"
-          token = os.environ["GITEA_TOKEN"]
+          token = os.environ["API_GITEA_TOKEN"]
 
           url = (
               f"{server}/api/v1/repos/{repo}/actions/runs"

.gitea/workflows/python-checks.yml

@@ -45,11 +45,18 @@ jobs:
           pip-audit -r req.txt
           bandit -r app/
 
-      - name: Upload Coverage
+      - name: Upload Coverage HTML
         if: always()
         uses: actions/upload-artifact@v3
         with:
-          name: coverage-report
+          name: coverage-html
-          path: |
+          path: htmlcov/
-            htmlcov/
+          if-no-files-found: warn
-            coverage.xml
+
+      - name: Upload Coverage XML
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: coverage-xml
+          path: coverage.xml
+          if-no-files-found: warn