internal improvements #531
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions | |
| name: Build | |
| on: | |
| push: | |
| branches-ignore: # build all branches except: | |
| - 'dependabot/**' # prevent GHA triggered twice (once for commit to the branch and once for opening/syncing the PR) | |
| tags-ignore: # don't build tags | |
| - '**' | |
| paths-ignore: | |
| - '**/*.adoc' | |
| - '**/*.md' | |
| - '.editorconfig' | |
| - '.git*' | |
| - '.github/*.yml' | |
| - '.github/workflows/stale.yml' | |
| pull_request: | |
| paths-ignore: | |
| - '**/*.adoc' | |
| - '**/*.md' | |
| - '.editorconfig' | |
| - '.git*' | |
| - '.github/*.yml' | |
| workflow_dispatch: | |
| # https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/ | |
| inputs: | |
| additional_maven_args: | |
| description: 'Additional Maven Args' | |
| required: false | |
| default: '' | |
| debug-with-ssh: | |
| description: "Start an SSH session for debugging purposes at the end of the build:" | |
| default: never | |
| type: choice | |
| options: [ always, on_failure, on_failure_or_cancelled, never ] | |
| debug-with-ssh-only-for-actor: | |
| description: "Limit access to the SSH session to the GitHub user that triggered the job." | |
| default: true | |
| type: boolean | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| ########################################################### | |
| build: | |
| ########################################################### | |
| runs-on: ubuntu-latest | |
| concurrency: ci-${{ github.ref }}-${{ matrix.target-platform }} | |
| env: | |
| JAVA_VERSION: ${{ matrix.java-version }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - target-platform: oldest | |
| java-version: 17 | |
| - target-platform: latest | |
| java-version: 21 | |
| - target-platform: unstable | |
| java-version: 21 | |
| steps: | |
| - name: Show environment variables | |
| run: env | sort | |
| - name: Git Checkout | |
| uses: actions/checkout@v4 # https://github.com/actions/checkout | |
| - name: Configure fast APT repository mirror | |
| uses: vegardit/fast-apt-mirror.sh@v1 | |
| - name: "Install: xvfb" | |
| run: sudo apt-get install -y xvfb | |
| - name: "Install: JDK ${{ env.JAVA_VERSION }}" | |
| uses: actions/setup-java@v4 # https://github.com/actions/setup-java | |
| with: | |
| distribution: temurin | |
| java-version: ${{ env.JAVA_VERSION }} | |
| - name: "Cache: Local Maven Repository" | |
| uses: actions/cache@v4 | |
| with: | |
| # Excluded sub directory not working https://github.com/actions/cache/issues/494#issuecomment-948783891 | |
| path: | | |
| ~/.m2/repository/* | |
| !~/.m2/repository/.cache/tycho | |
| !~/.m2/repository/.meta/p2-artifacts.properties | |
| !~/.m2/repository/p2 | |
| !~/.m2/repository/*SNAPSHOT* | |
| key: ${{ runner.os }}-repo-mvn-${{ hashFiles('**/pom.xml') }} | |
| - name: "Cache: Local Tycho Repository" | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.m2/repository/.cache/tycho | |
| ~/.m2/repository/.meta/p2-artifacts.properties | |
| ~/.m2/repository/p2 | |
| key: ${{ runner.os }}-repo-tycho-${{ hashFiles(format('target-platforms/{0}.target', matrix.target-platform)) }} | |
| - name: "Install: Maven" | |
| uses: stCarolas/setup-maven@v5 # https://github.com/stCarolas/setup-maven | |
| with: | |
| maven-version: 3.9.6 | |
| - name: Build with Maven | |
| continue-on-error: ${{ matrix.target-platform == 'unstable' }} | |
| id: maven-build | |
| env: | |
| GITHUB_USER: ${{ github.actor }} | |
| GITHUB_API_KEY: ${{ github.token }} | |
| run: | | |
| set -eu | |
| # https://github.community/t/github-actions-bot-email-address/17204 | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| MAVEN_OPTS="${MAVEN_OPTS:-}" | |
| MAVEN_OPTS="$MAVEN_OPTS -XX:+TieredCompilation -XX:TieredStopAtLevel=1" # https://zeroturnaround.com/rebellabs/your-maven-build-is-slow-speed-it-up/ | |
| MAVEN_OPTS="$MAVEN_OPTS -Djava.security.egd=file:/dev/./urandom" # https://stackoverflow.com/questions/58991966/what-java-security-egd-option-is-for/59097932#59097932 | |
| MAVEN_OPTS="$MAVEN_OPTS -Dorg.slf4j.simpleLogger.showDateTime=true -Dorg.slf4j.simpleLogger.dateTimeFormat=HH:mm:ss,SSS" # https://stackoverflow.com/questions/5120470/how-to-time-the-different-stages-of-maven-execution/49494561#49494561 | |
| MAVEN_OPTS="$MAVEN_OPTS -Xmx1024m -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true -Dhttps.protocols=TLSv1.2" | |
| echo " -> MAVEN_OPTS: $MAVEN_OPTS" | |
| export MAVEN_OPTS | |
| # prevent "org.eclipse.swt.SWTError: No more handles [gtk_init_check() failed]" | |
| xvfb-run mvn \ | |
| --errors \ | |
| --update-snapshots \ | |
| --batch-mode \ | |
| --show-version \ | |
| --no-transfer-progress \ | |
| -s .ci/maven-settings.xml \ | |
| -t .ci/maven-toolchains.xml \ | |
| -Dtycho.disableP2Mirrors=true \ | |
| -Dtycho.target-platform=${{ matrix.target-platform }} \ | |
| -Djava.version=${{ matrix.java-version }} \ | |
| ${{ github.event.inputs.additional_maven_args }} \ | |
| clean verify || cat /home/runner/work/haxe4e/haxe4e/haxe4e-tests/target/work/data/.metadata/.log | |
| mv updatesite/target/org.haxe4e.updatesite-*.zip updatesite/target/org.haxe4e.plugin.updatesite.zip | |
| - name: "Delete previous 'latest' release" | |
| if: ${{ matrix.target-platform == 'oldest' && github.ref_name == 'main' && !env.ACT }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| RELEASE_NAME: latest | |
| # https://cli.github.com/manual/gh_release_delete | |
| run: | | |
| GH_DEBUG=1 gh release delete "$RELEASE_NAME" --yes --cleanup-tag || true | |
| - name: "Create 'latest' release" | |
| if: ${{ matrix.target-platform == 'oldest' && github.ref_name == 'main' && !env.ACT }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| RELEASE_NAME: latest | |
| # https://cli.github.com/manual/gh_release_create | |
| run: | | |
| GH_DEBUG=1 gh release create "$RELEASE_NAME" \ | |
| --title "$RELEASE_NAME" \ | |
| --latest \ | |
| --notes "${{ github.event.head_commit.message }}" \ | |
| --target "${{ github.sha }}" \ | |
| updatesite/target/org.haxe4e.plugin.updatesite.zip | |
| - name: Deploy p2 update site | |
| if: ${{ matrix.target-platform == 'oldest' && github.ref_name == 'main' && !env.ACT }} | |
| run: | | |
| set -eux | |
| last_commit_message=$(git log --pretty=format:"%s (%h)" -1) | |
| cd /tmp | |
| github_repo_url="https://${{ github.actor }}:${{ github.token }}@github.com/${{ github.repository }}" | |
| if curl --output /dev/null --silent --head --fail "$github_repo_url/tree/updatesite"; then | |
| git clone $github_repo_url --single-branch --branch updatesite updatesite | |
| cd updatesite | |
| # https://github.community/t/github-actions-bot-email-address/17204 | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git reset --hard HEAD^ | |
| else | |
| git clone $github_repo_url updatesite | |
| cd updatesite | |
| git checkout --orphan updatesite | |
| git rm -rf . | |
| cat <<EOF > index.html | |
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <title>${{ github.repository }} - Update Site</title> | |
| </head> | |
| <body> | |
| <h1>${{ github.repository }} - Update Site</h1> | |
| </body> | |
| </html> | |
| EOF | |
| git add index.html | |
| # https://github.community/t/github-actions-bot-email-address/17204 | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git commit -am "Initialize Update Site" | |
| fi | |
| mv $GITHUB_WORKSPACE/updatesite/target/repository/* . | |
| git add --all | |
| git commit -am "$last_commit_message" | |
| git push origin updatesite --force | |
| - name: Generate GitHub Access Token | |
| uses: tibdex/github-app-token@v2 # https://github.com/tibdex/github-app-token | |
| if: ${{ matrix.target-platform == 'oldest' && github.ref_name == 'main' && !env.ACT }} | |
| id: generate_token | |
| # see https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#authenticating-with-github-app-generated-tokens | |
| with: | |
| # see https://github.com/organizations/haxe4e/settings/apps/haxe4e-tu | |
| app_id: ${{ secrets.HAXE4E_TU_APP_ID }} | |
| private_key: ${{ secrets.HAXE4E_TU_PRIVATE_KEY }} | |
| - name: Trigger Haxe Studio Build | |
| if: ${{ matrix.target-platform == 'oldest' && github.ref_name == 'main' && !env.ACT }} | |
| run: | | |
| curl --fail \ | |
| -H"Authorization: Bearer ${{ steps.generate_token.outputs.token }}" \ | |
| -H "Accept: application/vnd.github.everest-preview+json" \ | |
| -H "Content-Type: application/json" \ | |
| -XPOST \ | |
| https://api.github.com/repos/haxe4e/haxe-studio/dispatches \ | |
| --data '{"event_type": "new-haxe4e-release"}' | |
| ################################################## | |
| # Setup SSH debug session | |
| ################################################## | |
| - name: "SSH session for debugging: check" | |
| id: DEBUG_SSH_SESSSION_CHECK | |
| if: always() | |
| run: | | |
| set -eu | |
| when="${{ inputs.debug-with-ssh }}" | |
| if [[ $when == "always" ]] || case "${{ job.status }}" in | |
| success) [[ $when == "always" ]] ;; | |
| cancelled) [[ $when == "on_failure_or_cancelled" ]] ;; | |
| failure) [[ $when == "on_failure"* ]] ;; | |
| esac; then | |
| echo "start_ssh_session=true" | tee -a "$GITHUB_OUTPUT" | |
| fi | |
| - name: "SSH session for debugging: start" | |
| uses: mxschmitt/action-tmate@v3 # https://github.com/mxschmitt/action-tmate | |
| if: always() && steps.DEBUG_SSH_SESSSION_CHECK.outputs.start_ssh_session | |
| with: | |
| limit-access-to-actor: ${{ inputs.debug-with-ssh-only-for-actor }} | |
| ########################################################### | |
| dependabot-pr-auto-merge: | |
| ########################################################### | |
| needs: build | |
| if: ${{ github.event_name == 'pull_request' && github.actor == 'dependabot[bot]' }} | |
| runs-on: ubuntu-latest | |
| concurrency: dependabot-pr-auto-merge | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Dependabot metadata | |
| id: metadata | |
| uses: dependabot/fetch-metadata@v2 # https://github.com/dependabot/fetch-metadata/ | |
| with: | |
| github-token: "${{ secrets.GITHUB_TOKEN }}" | |
| - name: Enable auto-merge for Dependabot PRs | |
| if: | | |
| ${{ | |
| ( | |
| steps.dependabot-metadata.outputs.package-ecosystem == 'github-actions' && | |
| steps.metadata.outputs.update-type == 'version-update:semver-major' | |
| ) || ( | |
| steps.dependabot-metadata.outputs.package-ecosystem == 'maven' && | |
| steps.metadata.outputs.update-type == 'version-update:semver-minor' | |
| ) | |
| }} | |
| run: | | |
| gh pr merge --auto --rebase "$PR_URL" | |
| env: | |
| PR_URL: ${{github.event.pull_request.html_url}} | |
| GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} |