Amaliy loyiha - to'liq quvur

loyiha/
├── .github/
│   ├── workflows/
│   │   ├── tekshiruv.yml
│   │   ├── obraz.yml
│   │   ├── reliz.yml
│   │   └── deploy.yml
│   ├── dependabot.yml
│   └── CODEOWNERS
├── src/
├── Dockerfile
├── compose.yml
├── package.json
└── package-lock.json

name: Tekshiruv

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read

concurrency:
  group: tekshiruv-${{ github.ref }}
  cancel-in-progress: true

jobs:
  linter:
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: npm
      - run: npm ci
      - run: npx eslint .
      - run: npx prettier --check .

  test:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        node: [20, 22]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node }}
          cache: npm
      - run: npm ci
      - run: npm test

      - name: Natijani saqlash
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: test-natija-node${{ matrix.node }}
          path: natijalar/
          if-no-files-found: ignore

  hammasi-tayyor:
    if: always()
    needs: [linter, test]
    runs-on: ubuntu-latest
    steps:
      - name: Yig'ma natija
        run: |
          echo "linter: ${{ needs.linter.result }}"
          echo "test:   ${{ needs.test.result }}"
          if [ "${{ needs.linter.result }}" != "success" ] || [ "${{ needs.test.result }}" != "success" ]; then
            exit 1
          fi
          echo "Barcha tekshiruvlar o'tdi"

name: Obraz

on:
  push:
    branches: [main]

permissions:
  contents: read
  packages: write

jobs:
  obraz:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v4
      - uses: docker/setup-buildx-action@v3

      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - id: meta
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}
          tags: |
            type=sha,format=short
            type=raw,value=latest,enable={{is_default_branch}}

      - uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Hisobot
        run: |
          {
            echo "## Obraz tayyor"
            echo ""
            echo '```'
            echo "${{ steps.meta.outputs.tags }}"
            echo '```'
          } >> "$GITHUB_STEP_SUMMARY"

name: Reliz

on:
  push:
    tags: ['v*']

permissions:
  contents: write
  packages: write

jobs:
  reliz:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - id: versiya
        run: |
          teg="${GITHUB_REF#refs/tags/}"
          echo "teg=$teg" >> "$GITHUB_OUTPUT"
          echo "raqam=${teg#v}" >> "$GITHUB_OUTPUT"

      - name: Versiya mosligini tekshirish
        run: |
          faylda=$(node -p "require('./package.json').version")
          if [ "$faylda" != "${{ steps.versiya.outputs.raqam }}" ]; then
            echo "package.json ($faylda) va teg (${{ steps.versiya.outputs.raqam }}) mos emas"
            exit 1
          fi

      - id: ozgarishlar
        run: |
          oldingi=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
          if [ -z "$oldingi" ]; then
            royxat=$(git log --pretty=format:'- %s')
          else
            royxat=$(git log "$oldingi..HEAD" --pretty=format:'- %s')
          fi
          {
            echo 'matn<<ROYXAT'
            echo "$royxat"
            echo 'ROYXAT'
          } >> "$GITHUB_OUTPUT"

      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: |
            ghcr.io/${{ github.repository }}:${{ steps.versiya.outputs.raqam }}
            ghcr.io/${{ github.repository }}:barqaror

      - uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ steps.versiya.outputs.teg }}
          name: ${{ steps.versiya.outputs.teg }}
          body: |
            ## O'zgarishlar

            ${{ steps.ozgarishlar.outputs.matn }}

name: Deploy

on:
  workflow_dispatch:
    inputs:
      versiya:
        description: 'Qaysi versiya (masalan 1.4.2)'
        required: true
        type: string

permissions:
  contents: read

concurrency:
  group: deploy-ishlab-chiqarish
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment:
      name: ishlab-chiqarish
      url: https://misol.uz
    steps:
      - name: Serverda yangilash
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USER }}
          key: ${{ secrets.SSH_KALIT }}
          script: /home/deploy/deploy.sh ${{ inputs.versiya }}

      - name: Salomatlikni kutish
        run: |
          for i in $(seq 1 30); do
            if curl -sSf https://misol.uz/salomatlik > /dev/null; then
              echo "Xizmat javob bermoqda"
              exit 0
            fi
            sleep 2
          done
          exit 1

      - name: Xato bo'lsa xabar berish
        if: failure()
        env:
          TOKEN: ${{ secrets.TELEGRAM_TOKEN }}
          CHAT: ${{ secrets.TELEGRAM_CHAT_ID }}
        run: |
          havola="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
          curl -sS -X POST "https://api.telegram.org/bot${TOKEN}/sendMessage" \
            -d "chat_id=${CHAT}" \
            -d "text=Deploy yiqildi - ${{ inputs.versiya }} - ${havola}"

version: 2
updates:
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly

  - package-ecosystem: npm
    directory: /
    schedule:
      interval: weekly
    open-pull-requests-limit: 5

*                     @siz
/.github/workflows/   @siz
/Dockerfile           @siz