rnp update #309
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright (c) 2023 Ribose Inc. | |
| # All rights reserved. | |
| # | |
| # Redistribution and use in source and binary forms, with or without | |
| # modification, are permitted provided that the following conditions | |
| # are met: | |
| # 1. Redistributions of source code must retain the above copyright | |
| # notice, this list of conditions and the following disclaimer. | |
| # 2. Redistributions in binary form must reproduce the above copyright | |
| # notice, this list of conditions and the following disclaimer in the | |
| # documentation and/or other materials provided with the distribution. | |
| # | |
| # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | |
| # ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED | |
| # TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | |
| # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS | |
| # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR | |
| # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF | |
| # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS | |
| # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN | |
| # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | |
| # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE | |
| # POSSIBILITY OF SUCH DAMAGE. | |
| name: test-and-release | |
| on: | |
| pull_request: | |
| push: | |
| branches: [ main ] | |
| tags: [ v* ] | |
| repository_dispatch: | |
| types: [ 'rnp update' ] | |
| workflow_dispatch: | |
| concurrency: | |
| group: '${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.ref_name }}' | |
| cancel-in-progress: true | |
| jobs: | |
| prepare: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| matrix: ${{ steps.matrix.outputs.matrix }} | |
| coverage: ${{ steps.matrix.outputs.coverage }} | |
| steps: | |
| - name: Setup test matrix | |
| id: matrix | |
| run: | | |
| if [ "${{ github.event.client_payload }}" != "" ]; then | |
| echo "matrix=[ '${{ github.event.client_payload.tag }}' ]" >> $GITHUB_OUTPUT | |
| echo "coverage=${{ github.event.client_payload.tag }}" >> $GITHUB_OUTPUT | |
| else | |
| echo "matrix=[ 'v0.17.1', 'v0.18.1', '' ]" >> $GITHUB_OUTPUT | |
| echo "coverage=$(git remote show https://github.com/rnpgp/rnp | grep HEAD | cut -d' ' -f5)" >> $GITHUB_OUTPUT | |
| fi | |
| build-and-test: | |
| needs: prepare | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ 'ubuntu-latest', 'macos-latest' ] | |
| ruby: [ '3.1', '3.2', '3.3', '3.4', 'head' ] | |
| rnp: ${{ fromJson(needs.prepare.outputs.matrix) }} | |
| env: [ { COVERAGE: false } ] | |
| include: | |
| - os: 'ubuntu-latest' | |
| ruby: '3.4' | |
| rnp: ${{ needs.prepare.outputs.coverage }} | |
| env: { COVERAGE: 'true' } | |
| runs-on: ${{ matrix.os }} | |
| env: ${{ matrix.env }} | |
| steps: | |
| - name: Install packages Ubuntu | |
| if: matrix.os == 'ubuntu-latest' | |
| # build-essential is preinstalled on GHA; libbz2-dev/zlib1g-dev are not on ubuntu-24.04 | |
| run: | | |
| sudo apt-get install cmake libbotan-2-dev libjson-c-dev libbz2-dev zlib1g-dev | |
| echo LD_LIBRARY_PATH="/usr/local/lib:$LD_LIBRARY_PATH" >> $GITHUB_ENV | |
| - name: Install packages MacOS | |
| if: matrix.os == 'macos-latest' | |
| # Already installed on GHA: cmake make | |
| run: brew install botan json-c | |
| - name: Checkout rnp | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: rnpgp/rnp | |
| path: rnp | |
| submodules: true | |
| ref: ${{ matrix.rnp }} | |
| - name: Configure rnp | |
| # Homebrew's botan is Botan 3, which requires CRYPTO_BACKEND=botan3 | |
| # (supported by rnp >= 0.17.1). | |
| run: cmake -B rnp/build -DBUILD_TESTING=OFF -DENABLE_DOC=OFF -DBUILD_SHARED_LIBS=ON ${{ matrix.os == 'macos-latest' && '-DCRYPTO_BACKEND=botan3' || '' }} rnp | |
| - name: Build rnp | |
| run: cmake --build rnp/build | |
| - name: Install rnp | |
| run: sudo cmake --install rnp/build | |
| - name: Checkout ruby-rnp | |
| uses: actions/checkout@v4 | |
| - name: Setup Ruby and bundle | |
| uses: ruby/setup-ruby@v1 | |
| with: | |
| ruby-version: ${{ matrix.ruby }} | |
| bundler-cache: true | |
| - name: Test | |
| run: bundle exec rake | |
| - name: Upload coverage to Codecov | |
| if: env.COVERAGE == 'true' | |
| uses: codecov/codecov-action@v5 | |
| with: | |
| files: ./coverage/coverage.json | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| # no CODECOV_TOKEN secret exists yet; don't fail CI until one is added | |
| # (the repo's protected main branch makes uploads require a token) | |
| fail_ci_if_error: false | |
| package-and-release: | |
| runs-on: ubuntu-latest | |
| if: contains(github.ref, 'refs/tags/v') | |
| needs: build-and-test | |
| permissions: | |
| contents: write | |
| id-token: write | |
| steps: | |
| - name: Install packages Ubuntu | |
| # build-essential is preinstalled on GHA; libbz2-dev/zlib1g-dev are not on ubuntu-24.04 | |
| run: sudo apt-get install cmake libbotan-2-dev libjson-c-dev libbz2-dev zlib1g-dev | |
| - name: Checkout rnp | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: rnpgp/rnp | |
| path: rnp | |
| ref: main | |
| submodules: true | |
| - name: Configure rnp | |
| run: cmake -B rnp/build -DBUILD_TESTING=OFF -DENABLE_DOC=OFF -DBUILD_SHARED_LIBS=ON rnp | |
| - name: Build rnp | |
| run: cmake --build rnp/build | |
| - name: Install rnp | |
| run: sudo cmake --install rnp/build | |
| - name: Checkout ruby-rnp | |
| uses: actions/checkout@v4 | |
| - name: Setup Ruby and bundle | |
| uses: ruby/setup-ruby@v1 | |
| with: | |
| ruby-version: '3.4' | |
| bundler-cache: true | |
| - name: Package | |
| run: bundle exec rake build | |
| - name: Create GitHub Release | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: gh release create "$GITHUB_REF_NAME" pkg/*.gem --generate-notes | |
| # Exchange the job's OIDC token (id-token: write) for a short-lived | |
| # RubyGems API key; publishes via the gem's trusted publisher | |
| # (rnpgp/ruby-rnp @ test-and-release.yml) on rubygems.org. | |
| - name: Configure RubyGems credentials (trusted publishing) | |
| uses: rubygems/configure-rubygems-credentials@dc5a8d8553e6ee01fc26761a49e99e733d17954a # v2.1.0 | |
| - name: Publish to rubygems.org | |
| run: | | |
| for gem in pkg/*.gem; do gem push -V $gem; done |