ci: use Maven Wrapper #575
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions | |
| name: Build | |
| on: | |
| push: | |
| branches-ignore: # build all branches except: | |
| - 'dependabot/**' # prevent GHA triggered twice (once for commit to the branch and once for opening/syncing the PR) | |
| tags-ignore: # don't build tags | |
| - '**' | |
| paths-ignore: | |
| - '**/*.adoc' | |
| - '**/*.md' | |
| - '.editorconfig' | |
| - '.git*' | |
| - '.github/*.yml' | |
| - '.github/workflows/stale.yml' | |
| pull_request: | |
| paths-ignore: | |
| - '**/*.adoc' | |
| - '**/*.md' | |
| - '.editorconfig' | |
| - '.git*' | |
| - '.github/*.yml' | |
| repository_dispatch: | |
| types: [new-haxe4e-release] | |
| workflow_dispatch: | |
| # https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/ | |
| inputs: | |
| additional_maven_args: | |
| description: 'Additional Maven Args' | |
| required: false | |
| default: '' | |
| defaults: | |
| run: | |
| shell: bash | |
| env: | |
| JAVA_VERSION: 17 | |
| jobs: | |
| ########################################################### | |
| maven-build: | |
| ########################################################### | |
| runs-on: windows-latest | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: ${{ github.event_name == 'repository_dispatch' }} | |
| steps: | |
| - name: "Show: GitHub context" | |
| env: | |
| GITHUB_CONTEXT: ${{ toJSON(github) }} | |
| run: echo $GITHUB_CONTEXT | |
| - name: "Show: environment variables" | |
| run: env | sort | |
| - name: Git Checkout | |
| uses: actions/checkout@v4 # https://github.com/actions/checkout | |
| - name: "Install: JDK ${{ env.JAVA_VERSION }} ☕" | |
| uses: actions/setup-java@v4 # https://github.com/actions/setup-java | |
| with: | |
| distribution: temurin | |
| java-version: ${{ env.JAVA_VERSION }} | |
| - name: "Cache: Local Maven Repository" | |
| uses: actions/cache@v4 | |
| with: | |
| # Excluded sub directory not working https://github.com/actions/toolkit/issues/713 | |
| path: | | |
| ~/.m2/repository/* | |
| !~/.m2/repository/com/vegardit/no-npe | |
| !~/.m2/repository/.cache/tycho | |
| !~/.m2/repository/.meta/p2-artifacts.properties | |
| !~/.m2/repository/p2 | |
| !~/.m2/repository/*SNAPSHOT* | |
| key: ${{ runner.os }}-repo-mvn-${{ hashFiles('**/pom.xml') }} | |
| - name: "Cache: Local Tycho Repository" | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.m2/repository/.cache/tycho | |
| ~/.m2/repository/.meta/p2-artifacts.properties | |
| ~/.m2/repository/p2 | |
| key: ${{ runner.os }}-repo-tycho-${{ hashFiles('build.target') }} | |
| - name: "Build with Maven 🔨" | |
| id: maven-build | |
| env: | |
| GITHUB_USER: ${{ github.actor }} | |
| GITHUB_API_KEY: ${{ github.token }} | |
| run: | | |
| set -eu | |
| # | |
| # ensure mnvw is executable | |
| # | |
| chmod u+x ./mvnw | |
| # https://github.community/t/github-actions-bot-email-address/17204 | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| MAVEN_OPTS="${MAVEN_OPTS:-}" | |
| MAVEN_OPTS+=" -Djava.security.egd=file:/dev/./urandom" # https://stackoverflow.com/questions/58991966/what-java-security-egd-option-is-for/59097932#59097932 | |
| MAVEN_OPTS+=" -Dorg.slf4j.simpleLogger.showDateTime=true -Dorg.slf4j.simpleLogger.dateTimeFormat=HH:mm:ss,SSS" # https://stackoverflow.com/questions/5120470/how-to-time-the-different-stages-of-maven-execution/49494561#49494561 | |
| MAVEN_OPTS+=" -Xmx1024m -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true -Dhttps.protocols=TLSv1.3,TLSv1.2" | |
| export MAVEN_OPTS | |
| echo "MAVEN_OPTS: $MAVEN_OPTS" | |
| ./mvnw \ | |
| --errors \ | |
| --update-snapshots \ | |
| --batch-mode \ | |
| --show-version \ | |
| --no-transfer-progress \ | |
| -s .ci/maven-settings.xml \ | |
| -t .ci/maven-toolchains.xml \ | |
| -Dtycho.disableP2Mirrors=true \ | |
| ${{ github.event.inputs.additional_maven_args }} \ | |
| clean verify | |
| python product/fix_exec_flag_in_archives.py | |
| mv product/target/products/org.haxe4e.studio-win32.win32.x86_64.zip \ | |
| product/target/products/org.haxe4e.studio-win.x86_64.zip | |
| - name: Generate PortableApps archive | |
| run: | | |
| bash product/build-paf.sh | |
| - name: "Determine release name" | |
| id: release | |
| if: ${{ !env.ACT }} | |
| run: | | |
| case "$GITHUB_REF_NAME" in | |
| main) | |
| echo "name=preview" >>"$GITHUB_OUTPUT" | |
| echo "updatesite_branch=updatesite-preview" >>"$GITHUB_OUTPUT" | |
| ;; | |
| release) | |
| echo "name=stable" >>"$GITHUB_OUTPUT" | |
| echo "updatesite_branch=updatesite" >>"$GITHUB_OUTPUT" | |
| ;; | |
| esac | |
| - name: "Delete previous '${{ steps.release.outputs.name }}' release" | |
| if: ${{ steps.release.outputs.name != '' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| RELEASE_NAME: ${{ steps.release.outputs.name }} | |
| # https://cli.github.com/manual/gh_release_delete | |
| run: | | |
| GH_DEBUG=1 gh release delete "$RELEASE_NAME" --yes --cleanup-tag || true | |
| - name: "Create '${{ steps.release.outputs.name }}' release" | |
| if: ${{ steps.release.outputs.name != '' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| RELEASE_NAME: ${{ steps.release.outputs.name }} | |
| COMMIT_MSG: ${{ github.event.head_commit.message }} # https://stackoverflow.com/a/78420438/5116073 | |
| # https://cli.github.com/manual/gh_release_create | |
| run: | | |
| GH_DEBUG=1 gh release create "$RELEASE_NAME" \ | |
| --title "$RELEASE_NAME" \ | |
| ${{ steps.release.outputs.name == 'stable' && '--latest' || '' }} \ | |
| ${{ steps.release.outputs.name == 'preview' && '--prerelease' || '' }} \ | |
| --notes "$COMMIT_MSG" \ | |
| --target "${{ github.sha }}" \ | |
| product/target/products/org.haxe4e.studio-linux.gtk.x86_64.tar.gz \ | |
| product/target/products/org.haxe4e.studio-macosx.cocoa.x86_64.tar.gz \ | |
| product/target/products/org.haxe4e.studio-win.x86_64.zip \ | |
| product/target/HaxeStudioPortable.paf.exe | |
| - name: Deploy p2 update site | |
| if: ${{ steps.release.outputs.name != '' }} | |
| env: | |
| BRANCH_NAME: ${{ steps.release.outputs.updatesite_branch }} | |
| run: | | |
| set -eux | |
| last_commit_message=$(git log --pretty=format:"%s (%h)" -1) | |
| cd /tmp | |
| github_repo_url="https://${{ github.actor }}:${{ github.token }}@github.com/${{ github.repository }}" | |
| if curl --output /dev/null --silent --head --fail "$github_repo_url/tree/$BRANCH_NAME"; then | |
| git clone $github_repo_url --single-branch --branch "$BRANCH_NAME" updatesite | |
| cd updatesite | |
| # https://github.community/t/github-actions-bot-email-address/17204 | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git reset --hard HEAD^ | |
| else | |
| git clone $github_repo_url updatesite | |
| cd updatesite | |
| git checkout --orphan "$BRANCH_NAME" | |
| git rm -rf . | |
| cat <<EOF > index.html | |
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <title>${{ github.repository }} - Update Site</title> | |
| </head> | |
| <body> | |
| <h1>${{ github.repository }} - Update Site</h1> | |
| </body> | |
| </html> | |
| EOF | |
| git add index.html | |
| # https://github.community/t/github-actions-bot-email-address/17204 | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git commit -am "Initialize Update Site" | |
| fi | |
| mv $(cygpath $GITHUB_WORKSPACE)/product/target/repository/* . | |
| git add --all | |
| git commit -am "$last_commit_message" | |
| git push origin "$BRANCH_NAME" --force | |
| ########################################################### | |
| dependabot-pr-auto-merge: | |
| ########################################################### | |
| needs: maven-build | |
| if: ${{ github.event_name == 'pull_request' && github.actor == 'dependabot[bot]' }} | |
| runs-on: ubuntu-latest | |
| concurrency: dependabot-pr-auto-merge | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Dependabot metadata | |
| id: metadata | |
| uses: dependabot/fetch-metadata@v2 # https://github.com/dependabot/fetch-metadata/ | |
| with: | |
| github-token: "${{ secrets.GITHUB_TOKEN }}" | |
| - name: Enable auto-merge for Dependabot PRs | |
| if: | | |
| ${{ | |
| ( | |
| steps.dependabot-metadata.outputs.package-ecosystem == 'github-actions' && | |
| steps.metadata.outputs.update-type == 'version-update:semver-major' | |
| ) || ( | |
| steps.dependabot-metadata.outputs.package-ecosystem == 'maven' && | |
| steps.metadata.outputs.update-type == 'version-update:semver-minor' | |
| ) | |
| }} | |
| run: | | |
| gh pr merge --auto --rebase "$PR_URL" | |
| env: | |
| PR_URL: ${{github.event.pull_request.html_url}} | |
| GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} |