ci: port more pipelines to gha

.github/workflows/pr.yml

@@ -10,6 +10,26 @@ env:
   NX_PREFER_TS_NODE: true
   NX_VERBOSE_LOGGING: true
 
+  BROWSERSLIST_IGNORE_OLD_DATA: true
+
+  # Deploy host and URL
+  # DEPLOY_BASE_PATH: ''
+  DEPLOY_HOST: fluentuipr.z22.web.core.windows.net
+  DEPLOY_URL: https://fluentuipr.z22.web.core.windows.net/${{ github.event.pull_request.number || github.ref_name }}
+  # DEPLOYHOST: fluentuipr.z22.web.core.windows.net
+  # DEPLOYURL: https://${{ env.DEPLOYHOST }}/
+
+  # GitHub Secrets for Azure access
+  # This service principal ("subscription" is a misleading name) only has access to the fluentuipr storage account
+  AZURE_SUBSCRIPTION: Azure PR deploy - NEW
+  AZURE_STORAGE: fluentuipr
+
+  IS_PR: ${{ github.event_name == 'pull_request' }}
+  TARGET_BRANCH: ${{ github.event.pull_request.base.ref || '' }}
+  DEPLOY_BASE_PATH: pull/${{github.event.pull_request.number}}
+  # DEPLOY_BASE_PATH: ${{ github.event.pull_request.number ? 'pull/' + github.event.pull_request.number : 'heads/' + github.ref_name }}
+  # SKIP_COMPONENT_GOVERNANCE_DETECTION: true
+
 jobs:
   main:
     runs-on: macos-14-xlarge
@@ -68,3 +88,157 @@ jobs:
         run: |
           git status --porcelain
           git diff-index --quiet HEAD -- || exit 1
+
+  e2e-and-deploy:
+    runs-on: macos-14-xlarge
+    permissions:
+      contents: 'read'
+      actions: 'read'
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive appropriate SHAs for base and head for `nx affected` commands
+        uses: nrwl/nx-set-shas@v4
+        with:
+          main-branch-name: 'master'
+
+      - uses: actions/setup-node@v4
+        with:
+          cache: 'yarn'
+          node-version: '20'
+
+      - run: echo number of CPUs "$(getconf _NPROCESSORS_ONLN)"
+
+      - run: yarn install --frozen-lockfile
+
+      - name: Install Playwright dependencies
+        run: yarn playwright install --with-deps
+
+      - name: Verify Cypress install
+        run: yarn cypress verify
+
+      - name: Cypress/Playwright E2E tests
+        if: github.event_name == 'pull_request'
+        run: yarn nx affected -t e2e --nxBail --parallel 1
+
+      - name: Cypress/Playwright E2E tests (non-PR)
+        if: github.event_name != 'pull_request'
+        run: yarn nx run-many -t e2e --nxBail --parallel 1
+
+      - name: Bundle
+        if: github.event_name == 'pull_request'
+        run: yarn nx affected -t bundle --nxBail
+
+      - name: Bundle (non-PR)
+        if: github.event_name != 'pull_request'
+        run: yarn nx run-many -t bundle --nxBail
+
+      - name: Build Storybooks
+        if: github.event_name == 'pull_request'
+        run: yarn nx affected -t build-storybook --nxBail
+
+      - name: Build Storybooks (non-PR)
+        if: github.event_name != 'pull_request'
+        run: yarn nx run-many -t build-storybook --nxBail
+
+      - name: Generate PR Deploy Site
+        if: github.event_name == 'pull_request'
+        run: yarn nx run pr-deploy-site:generate:site
+
+      - name: Upload PR deploy site
+        continue-on-error: true
+        if: github.event_name == 'pull_request'
+        uses: azure/cli@v2
+        with:
+          azcliversion: latest
+          inlineScript: |
+            az storage blob upload-batch \
+              --destination '$web' \
+              --source apps/pr-deploy-site/dist \
+              --account-name ${{ secrets.AZURE_STORAGE }} \
+              --destination-path ${{ env.DEPLOY_BASE_PATH }} \
+              --auth-mode login \
+              --overwrite
+
+      - name: Update PR deploy site GitHub status
+        if: github.event_name == 'pull_request'
+        uses: actions/github-script@v6
+        with:
+          script: |
+            const { context, github } = require('@actions/github');
+            const { owner, repo } = context.repo;
+            const pull_request = context.payload.pull_request;
+
+            await github.repos.createCommitStatus({
+              owner: 'microsoft',
+              repo: 'fluentui',
+              sha: pull_request.head.sha,
+              state: 'success',
+              context: 'Pull request demo site',
+              description: 'Click "Details" to go to the deployed demo site for this pull request',
+              target_url: process.env.DEPLOY_URL + '/'
+            });
+        env:
+          DEPLOY_URL: ${{ env.DEPLOY_URL }}
+
+  bundle-size:
+    runs-on: macos-14-xlarge
+    permissions:
+      pull-requests: write
+      contents: 'read'
+      actions: 'read'
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Derive appropriate SHAs for base and head for `nx affected` commands
+        uses: nrwl/nx-set-shas@v4
+        with:
+          main-branch-name: 'master'
+
+      - uses: actions/setup-node@v4
+        with:
+          cache: 'yarn'
+          node-version: '20'
+
+      - run: echo number of CPUs "$(getconf _NPROCESSORS_ONLN)"
+
+      - run: yarn install --frozen-lockfile
+
+      - name: Build packages & create reports (PR only)
+        if: github.event_name == 'pull_request'
+        run: yarn nx affected -t bundle-size --nxBail
+
+      - name: Compare bundle size with base (PR only)
+        if: github.event_name == 'pull_request'
+        run: npx monosize compare-reports --branch=${{ github.event.pull_request.base.ref }} --output=markdown --quiet > ./monosize-report.md
+
+      - name: Post results to PR (PR only)
+        if: github.event_name == 'pull_request'
+        uses: marocchino/sticky-pull-request-comment@v2
+        with:
+          path: monosize-report.md
+
+      - name: Build all packages & create reports (non-PR)
+        if: github.event_name != 'pull_request'
+        run: yarn nx run-many -t bundle-size --nxBail
+
+      - name: Upload a report (base only)
+        continue-on-error: true
+        if: github.event_name != 'pull_request'
+        uses: azure/cli@v2
+        with:
+          azcliversion: latest
+          inlineScript: |
+            yarn monosize upload-report --branch=${{ github.ref }} --commit-sha ${{ github.sha }}
+        env:
+          AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
+          AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
+          AZURE_SERVICE_CONNECTION_ID: ${{ secrets.AZURE_SERVICE_CONNECTION_ID }}
+          BUNDLESIZE_ACCOUNT_NAME: ${{ secrets.BUNDLESIZE_ACCOUNT_NAME }}
+          SYSTEM_ACCESSTOKEN: ${{ secrets.GITHUB_TOKEN }}