Repository navigation
Update dependency mise to 2026.11.5 #317
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - branch-* | |
| - dogfood-* | |
| pull_request: | |
| merge_group: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: '10 1 * * 1-5' # Run the build and SonarQube analysis Monday-Friday (UTC). | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event_name == 'schedule' && 'schedule' || github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| qa-matrix: | |
| name: Select QA matrix | |
| runs-on: sonar-s | |
| permissions: {} | |
| outputs: | |
| matrix: ${{ steps.matrix.outputs.matrix }} | |
| cache-month: ${{ steps.matrix.outputs.cache-month }} | |
| steps: | |
| - name: Select SonarQube versions | |
| id: matrix | |
| env: | |
| EVENT_NAME: ${{ github.event_name }} | |
| NIGHTLY_MATRIX: | | |
| { | |
| "include": [ | |
| { | |
| "sq_version": "DEV", | |
| "java_version": "21" | |
| } | |
| ] | |
| } | |
| RELEASE_MATRIX: | | |
| { | |
| "include": [ | |
| { | |
| "sq_version": "LATEST_RELEASE[2025.4]", | |
| "java_version": "17", | |
| "maven_args": "-Dsonar.buildVersion=25.12.0.117093 -Dmaven.compiler.release=17" | |
| }, | |
| { | |
| "sq_version": "LATEST_RELEASE[2026.1]", | |
| "java_version": "21" | |
| }, | |
| { | |
| "sq_version": "LATEST_RELEASE", | |
| "java_version": "21" | |
| } | |
| ] | |
| } | |
| # Keep the Java 17 compatibility leg on a Java 17-compatible WS client. | |
| run: | | |
| if [[ "$EVENT_NAME" == "schedule" ]]; then | |
| matrix=$(jq --compact-output . <<< "$NIGHTLY_MATRIX") | |
| else | |
| matrix=$(jq --compact-output . <<< "$RELEASE_MATRIX") | |
| fi | |
| echo "matrix=$matrix" >> "$GITHUB_OUTPUT" | |
| echo "cache-month=$(date -u +%Y-%m)" >> "$GITHUB_OUTPUT" | |
| build: | |
| runs-on: sonar-s | |
| name: Build | |
| permissions: | |
| id-token: write | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| fetch-depth: 0 | |
| - uses: jdx/mise-action@b44d12e7d0d8ee7461bb893e1b1993500433185b # v5.2.7 | |
| with: | |
| version: 2026.11.4 | |
| tool_versions: | | |
| java temurin-21 | |
| maven 3.9 | |
| node 18.17.0 | |
| - uses: SonarSource/ci-github-actions/build-maven@v2 | |
| with: | |
| deploy-pull-request: true | |
| maven-args: -Pdist-linux-x64,dist-linux-aarch64,dist-windows-x64,dist-macosx-x64,dist-macosx-aarch64 | |
| artifactory-reader-role: private-reader | |
| artifactory-deployer-role: qa-deployer | |
| linux-qa: | |
| needs: | |
| - build | |
| - qa-matrix | |
| runs-on: sonar-m | |
| name: Linux QA - SQ ${{ matrix.sq_version }} | |
| permissions: | |
| id-token: write | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: ${{ fromJSON(needs.qa-matrix.outputs.matrix) }} | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - uses: jdx/mise-action@b44d12e7d0d8ee7461bb893e1b1993500433185b # v5.2.7 | |
| with: | |
| version: 2026.11.4 | |
| tool_versions: | | |
| java temurin-${{ matrix.java_version }} | |
| maven 3.9 | |
| - name: Install Java 11 for CLI compatibility test | |
| if: matrix.sq_version == 'LATEST_RELEASE' | |
| run: | | |
| mise install java@temurin-11 | |
| echo "CLI_JAVA_11_HOME=$(mise where java@temurin-11)" >> "$GITHUB_ENV" | |
| - name: Vault | |
| id: secrets | |
| uses: SonarSource/vault-action-wrapper@v3 | |
| with: | |
| secrets: | | |
| development/github/token/licenses-ro token | GITHUB_TOKEN; | |
| - uses: SonarSource/ci-github-actions/config-maven@v2 | |
| with: | |
| artifactory-reader-role: private-reader | |
| cache-paths: | | |
| ~/.m2/repository | |
| # Orchestrator downloads server distributions outside the Maven repository. | |
| # Renew snapshots within the current UTC month; start fresh each month. | |
| - uses: SonarSource/gh-action_cache@v1 | |
| name: Cache Orchestrator downloads | |
| with: | |
| path: ~/.sonar/orchestrator/cache | |
| key: orchestrator-v1-${{ needs.qa-matrix.outputs.cache-month }}-${{ runner.os }}-${{ matrix.sq_version }}-${{ github.run_id }} | |
| restore-keys: orchestrator-v1-${{ needs.qa-matrix.outputs.cache-month }}-${{ runner.os }}-${{ matrix.sq_version }}- | |
| - name: Run Integration Tests | |
| env: | |
| MAVEN_ARGS: ${{ matrix.maven_args }} | |
| SQ_VERSION: ${{ matrix.sq_version }} | |
| GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }} | |
| run: | | |
| cd it | |
| mvn -B -e -Dorchestrator.artifactory.url="${ARTIFACTORY_URL}" -Dsonar.runtimeVersion="${SQ_VERSION}" -Dmaven.test.redirectTestOutputToFile=false verify | |
| windows-qa: | |
| needs: | |
| - build | |
| - qa-matrix | |
| runs-on: github-windows-latest-s | |
| name: Windows QA - SQ ${{ matrix.sq_version }} | |
| permissions: | |
| id-token: write | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: ${{ fromJSON(needs.qa-matrix.outputs.matrix) }} | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| - uses: jdx/mise-action@b44d12e7d0d8ee7461bb893e1b1993500433185b # v5.2.7 | |
| with: | |
| version: 2026.11.4 | |
| tool_versions: | | |
| java ${{ matrix.java_version }} | |
| maven 3.9 | |
| - name: Vault | |
| id: secrets | |
| uses: SonarSource/vault-action-wrapper@v3 | |
| with: | |
| secrets: | | |
| development/github/token/licenses-ro token | GITHUB_TOKEN; | |
| - uses: SonarSource/ci-github-actions/config-maven@v2 | |
| with: | |
| artifactory-reader-role: private-reader | |
| cache-paths: | | |
| ~/.m2/repository | |
| - uses: SonarSource/gh-action_cache@v1 | |
| name: Cache Orchestrator downloads | |
| with: | |
| path: ~/.sonar/orchestrator/cache | |
| key: orchestrator-v1-${{ needs.qa-matrix.outputs.cache-month }}-${{ runner.os }}-${{ matrix.sq_version }}-${{ github.run_id }} | |
| restore-keys: orchestrator-v1-${{ needs.qa-matrix.outputs.cache-month }}-${{ runner.os }}-${{ matrix.sq_version }}- | |
| - name: Run Integration Tests | |
| shell: bash | |
| env: | |
| MAVEN_ARGS: ${{ matrix.maven_args }} | |
| SQ_VERSION: ${{ matrix.sq_version }} | |
| GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }} | |
| run: | | |
| cd it | |
| mvn -B -e -Dorchestrator.artifactory.url="${ARTIFACTORY_URL}" -Dsonar.runtimeVersion="${SQ_VERSION}" -Dmaven.test.redirectTestOutputToFile=false verify | |
| promote: | |
| # Nightly DEV-only builds must not be promoted without released-server QA. | |
| if: github.event_name != 'schedule' | |
| needs: | |
| - linux-qa | |
| - windows-qa | |
| runs-on: github-ubuntu-latest-s | |
| name: Promote | |
| permissions: | |
| id-token: write | |
| contents: write | |
| steps: | |
| - uses: SonarSource/ci-github-actions/promote@v2 | |
| with: | |
| promote-pull-request: true |