okapi/.github/workflows/ci.yml at main · softwaremill/okapi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
name: CI
on:
  pull_request:
    branches: [ main ]
  push:
    branches: [ main ]
    tags: [ v* ]

permissions:
  contents: write       # auto-merge requirement
  pull-requests: write  # auto-merge requirement

jobs:
  build:
    name: Build & Test (core modules)
    runs-on: ubuntu-24.04
    strategy:
      fail-fast: false
      matrix:
        java: [ "21", "25" ]
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Set up JDK ${{ matrix.java }}
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: ${{ matrix.java }}

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0

      - name: Check formatting
        run: ./gradlew ktlintCheck

      - name: Build and test core modules
        run: ./gradlew build -x :okapi-spring-boot:test -x :okapi-kafka:test -x ktlintCheck

      - name: Upload test results
        uses: actions/upload-artifact@v7
        if: success() || failure()
        with:
          name: test-results-java-${{ matrix.java }}
          path: '**/build/test-results/test/TEST-*.xml'

      - name: Prepare release notes
        if: github.event_name == 'push' && !startsWith(github.ref, 'refs/tags/')
        uses: release-drafter/release-drafter@v7
        with:
          config-name: release-drafter.yml
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  spring-compat:
    name: "Spring Boot ${{ matrix.spring-boot }}"
    runs-on: ubuntu-24.04
    needs: build
    strategy:
      matrix:
        include:
          - spring-boot: "3.5.12"
            spring: "6.2.17"
          - spring-boot: "4.0.4"
            spring: "7.0.6"
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 21
      - uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0

      - name: Test okapi-spring-boot
        run: >-
          ./gradlew :okapi-spring-boot:test
          -PspringBootVersion=${{ matrix.spring-boot }}
          -PspringVersion=${{ matrix.spring }}

  kafka-compat:
    name: "Kafka ${{ matrix.kafka }}"
    runs-on: ubuntu-24.04
    needs: build
    strategy:
      matrix:
        kafka: ["3.9.0", "4.0.2"]
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 21
      - uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0

      - name: Test okapi-kafka
        run: ./gradlew :okapi-kafka:test -PkafkaVersion=${{ matrix.kafka }}

  publish:
    name: Publish to Maven Central
    needs: [build, spring-compat, kafka-compat]
    runs-on: ubuntu-24.04
    environment: maven-central
    if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v'))
    steps:
      - name: Checkout
        uses: actions/checkout@v6

      - name: Set up JDK 21
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: 21

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0

      - name: Publish to Maven Central
        run: |
          DECODED_KEY=$(echo "$PGP_SECRET_BASE64" | base64 -d)
          while IFS= read -r line; do
            [ -n "$line" ] && echo "::add-mask::$line"
          done <<< "$DECODED_KEY"
          export ORG_GRADLE_PROJECT_signingInMemoryKey="$DECODED_KEY"
          ./gradlew publishAndReleaseToMavenCentral
        env:
          PGP_SECRET_BASE64: ${{ secrets.PGP_SECRET }}
          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_USERNAME }}
          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_PASSWORD }}
          ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.PGP_PASSPHRASE }}

      - name: Extract version from tag
        run: |
          version=${GITHUB_REF/refs\/tags\/v/}
          echo "VERSION=$version" >> $GITHUB_ENV

      - name: Publish release notes
        uses: release-drafter/release-drafter@v7
        with:
          config-name: release-drafter.yml
          publish: true
          name: "v${{ env.VERSION }}"
          tag: "v${{ env.VERSION }}"
          version: "v${{ env.VERSION }}"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  auto-merge-dependabot:
    # only for PRs by dependabot[bot]
    if: github.event.pull_request.user.login == 'dependabot[bot]'
    needs: [ build ]
    uses: softwaremill/github-actions-workflows/.github/workflows/auto-merge.yml@main
    secrets:
      github-token: ${{ secrets.SOFTWAREMILL_CI_PR_TOKEN }}