CCM-15633: Add contract tests to workflow

Author: gareth-allan

.github/workflows/stage-2-test.yaml

@@ -128,6 +128,42 @@ jobs:
             src/**/coverage.xml
             utils/**/coverage.xml
             lambdas/**/coverage.xml
+  test-contract:
+    name: "Contract tests"
+    runs-on: ubuntu-latest
+    timeout-minutes: 4
+    permissions:
+      contents: read
+      packages: read
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: ./.github/actions/node-install
+        with:
+          node-version: ${{ inputs.nodejs_version }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: "Install dependencies"
+        run: npm ci --ignore-scripts
+      - name: "Cache generated dependencies"
+        id: schema-cache
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        with:
+          path: |
+            schemas/digital-letters/
+            output/digital-letters/
+            src/digital-letters-events/types/
+            src/digital-letters-events/validators/
+            src/digital-letters-events/digital_letters_events/models/
+            src/digital-letters-events/guard-functions/
+          key: generated-deps-${{ runner.os }}-${{ hashFiles('src/cloudevents/**', 'src/typescript-schema-generator/**', 'src/python-schema-generator/**') }}
+      - name: "Generate dependencies"
+        if: steps.schema-cache.outputs.cache-hit != 'true'
+        run: |
+          npm run generate-dependencies
+      - name: "Run contract test suite"
+        run: |
+          make test-contract
+
   test-lint:
     name: "Linting"
     runs-on: ubuntu-latest

scripts/config/sonar-scanner.properties

@@ -20,6 +20,7 @@ sonar.coverage.exclusions=\
   **/setup.py, \
   scripts/**/*.*, \
   docs/**/*.*, \
+  utils/comms-utils/**, \
   utils/py-mock-mesh/**, \
   lambdas/mesh-acknowledge/src/config.py, \
   lambdas/mesh-download/mesh_download/config.py, \

scripts/tests/contract.sh

@@ -4,4 +4,7 @@ set -euo pipefail
 
 cd "$(git rev-parse --show-toplevel)"
 
+# Ensure we have the latest schema package matching our version specifier
+npm update @nhsdigital/nhs-notify-event-schemas-status-published
+
 npm run test:contract