Bump csaf from 395fbfe to b01a0a7
#413
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - v*.** | |
| pull_request: | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| submodules: 'true' | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| - name: Determine Version | |
| run: | | |
| # determine version from tag | |
| export VERSION=$(echo "${GITHUB_REF}" | cut -d "/" -f3) | |
| if [[ $VERSION != v* ]] | |
| then | |
| export VERSION="" | |
| echo "Building version-less (main or feature branch)" | |
| else | |
| # make version more Java-friendly by dropping the 'v' | |
| export VERSION=${VERSION:1:${#VERSION}} | |
| echo "Building as ${VERSION}" | |
| fi | |
| # store version in GitHub environment file | |
| echo "version=$VERSION" >> $GITHUB_ENV | |
| # Configure Gradle for optimal use in GitHub Actions, including caching of downloaded dependencies. | |
| # See: https://github.com/gradle/actions/blob/main/setup-gradle/README.md | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@v4 | |
| - name: Linting | |
| run: ./gradlew spotlessCheck -x spotlessApply | |
| - name: Build ${{ env.version }} | |
| run: | | |
| ./gradlew build koverXmlReport | |
| env: | |
| VERSION: ${{ env.version }} | |
| - name: Prepare report.xml for Codecov | |
| run: | | |
| # this is needed because codecov incorrectly reports lines that have no coverage information (good or bad) as a miss | |
| # See https://github.com/codecov/feedback/issues/564 and https://github.com/Kotlin/kotlinx-kover/issues/699. | |
| # Actually these lines should just not exist in the coverage XML file, since they are only structural elements, such | |
| # as brackets. | |
| cat build/reports/kover/report.xml | grep -v 'mi="0" ci="0" mb="0" cb="0"' > build/reports/kover/report-codecov.xml | |
| rm build/reports/kover/report.xml | |
| - name: Upload Code Coverage | |
| uses: codecov/codecov-action@v4 | |
| with: | |
| fail_ci_if_error: true | |
| files: ./build/reports/kover/report-codecov.xml | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| verbose: true | |
| - name: Publish to Maven Central | |
| if: startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, 'beta') && !contains(github.ref, 'alpha') | |
| run: | | |
| ./gradlew -Pversion=$VERSION publishToMavenCentral | |
| env: | |
| VERSION: ${{ env.version }} | |
| ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.GPG_PRIVATE_KEY }} | |
| ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.GPG_PASSWORD }} | |
| ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }} | |
| ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }} | |
| dependency-submission: | |
| if: github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| # Generates and submits a dependency graph, enabling Dependabot Alerts for all project dependencies. | |
| # See: https://github.com/gradle/actions/blob/main/dependency-submission/README.md | |
| - name: Generate and submit dependency graph | |
| uses: gradle/actions/dependency-submission@v4 |