CI/CD-Pipelines, die nicht im Weg stehen

# GitHub Actions — aggressive dependency caching
- name: Cache node_modules
  uses: actions/cache@v4
  with:
    path: |
      ~/.npm
      node_modules
      .next/cache
    key: ${{ runner.os }}-node-${{ hashFiles('package-lock.json') }}
    restore-keys: |
      ${{ runner.os }}-node-
 
# Docker layer caching
- name: Build image
  uses: docker/build-push-action@v5
  with:
    context: .
    cache-from: type=gha
    cache-to: type=gha,mode=max

jobs:
  lint:
    runs-on: ubuntu-latest
    steps: [checkout, setup-node, run-lint]
 
  type-check:
    runs-on: ubuntu-latest
    steps: [checkout, setup-node, run-tsc]
 
  unit-tests:
    runs-on: ubuntu-latest
    steps: [checkout, setup-node, run-jest]
 
  # Only run after all checks pass
  deploy:
    needs: [lint, type-check, unit-tests]
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps: [deploy-to-staging]

# Pin exact tool versions everywhere
- uses: actions/setup-node@v4
  with:
    node-version-file: ".nvmrc" # Read from project file, not hardcoded
 
- uses: actions/setup-python@v5
  with:
    python-version-file: ".python-version"

# Development and CI use the same base image
FROM node:22.11.0-alpine AS base
 
# Deterministic installs
RUN npm ci --frozen-lockfile
 
# Match production exactly
ENV NODE_ENV=production

jobs:
  quick-checks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      # These run in seconds and catch 80% of failures
      - name: Check formatting
        run: npx prettier --check .
 
      - name: Type check
        run: npx tsc --noEmit
 
      - name: Lint
        run: npx eslint . --max-warnings 0
 
  # Run the slow tests only after quick checks pass
  integration-tests:
    needs: quick-checks
    runs-on: ubuntu-latest
    steps:
      - name: Run integration tests
        run: npm run test:integration

#!/bin/bash
# Deploy to inactive slot, then swap
CURRENT=$(get_active_slot)  # "blue" or "green"
NEXT=$([ "$CURRENT" = "blue" ] && echo "green" || echo "blue")
 
# Deploy new version to inactive slot
deploy_to_slot $NEXT $IMAGE_TAG
 
# Run smoke tests against new slot
run_smoke_tests $NEXT
 
# Swap traffic
swap_traffic $CURRENT $NEXT
 
# Keep old slot warm for rollback
echo "Old slot ($CURRENT) ready for rollback"

// Deploy code to production before enabling it
import { createClient } from "@vercel/edge-config";
 
const config = createClient(process.env.EDGE_CONFIG);
 
export async function getFeatureFlag(
  flag: string,
  userId: string,
): Promise<boolean> {
  const flags =
    await config.get<Record<string, { enabled: boolean; rollout: number }>>(
      "features",
    );
  const feature = flags?.[flag];
 
  if (!feature?.enabled) return false;
 
  // Gradual rollout — deterministic per userId
  const hash = parseInt(userId.slice(-2), 16);
  return (hash / 255) * 100 < feature.rollout;
}

- name: Upload test results
  if: always() # Upload even if tests fail
  uses: actions/upload-artifact@v4
  with:
    name: test-results
    path: |
      coverage/
      test-results.xml
 
- name: Annotate PR with test failures
  if: failure()
  uses: actions/github-script@v7
  with:
    script: |
      const results = require('./test-results.json');
      const failures = results.testResults
        .flatMap(r => r.testResults.filter(t => t.status === 'failed'))
        .map(t => `- ${t.ancestorTitles.join(' > ')} > ${t.title}`)
        .join('\n');
      github.rest.issues.createComment({
        issue_number: context.issue.number,
        owner: context.repo.owner,
        repo: context.repo.repo,
        body: `## Test Failures\n${failures}`,
      });