fix: avoid following cache cleanup symlinks #386
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| workflow_dispatch: | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }} | |
| cancel-in-progress: true | |
| jobs: | |
| plan: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| test-code: ${{ steps.plan.outputs.test_code }} | |
| check-schema: ${{ steps.plan.outputs.check_schema }} | |
| build-release-binaries: ${{ steps.plan.outputs.build_release_binaries }} | |
| run-checks: ${{ steps.plan.outputs.run_checks }} | |
| test-publish: ${{ steps.plan.outputs.test_publish }} | |
| test-windows-trampoline: ${{ steps.plan.outputs.test_windows_trampoline }} | |
| save-rust-cache: ${{ steps.plan.outputs.save_rust_cache }} | |
| run-bench: ${{ steps.plan.outputs.run_bench }} | |
| test-smoke: ${{ steps.plan.outputs.test_smoke }} | |
| test-ecosystem: ${{ steps.plan.outputs.test_ecosystem }} | |
| test-integration: ${{ steps.plan.outputs.test_integration }} | |
| test-system: ${{ steps.plan.outputs.test_system }} | |
| test-macos: ${{ steps.plan.outputs.test_macos }} | |
| build-docker: ${{ steps.plan.outputs.build_docker }} | |
| push-docker: ${{ steps.plan.outputs.push_docker }} | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: "Plan" | |
| id: plan | |
| shell: bash | |
| env: | |
| GH_REF: ${{ github.ref }} | |
| HAS_SKIP_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'test:skip') }} | |
| HAS_INTEGRATION_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'test:integration') }} | |
| HAS_SYSTEM_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'test:system') }} | |
| HAS_EXTENDED_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'test:extended') }} | |
| HAS_MACOS_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'test:macos') }} | |
| HAS_PUBLISH_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'test:publish') }} | |
| HAS_BUILD_SKIP_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'build:skip') }} | |
| HAS_BUILD_SKIP_DOCKER_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'build:skip-docker') }} | |
| HAS_BUILD_SKIP_RELEASE_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'build:skip-release') }} | |
| HAS_BUILD_RELEASE_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'build:release') }} | |
| HAS_BUILD_PUSH_DOCKER_LABEL: ${{ contains(github.event.pull_request.labels.*.name, 'build:push-docker') }} | |
| BASE_SHA: ${{ github.event.pull_request.base.sha }} | |
| run: | | |
| [[ "$GH_REF" == "refs/heads/main" ]] && on_main_branch=1 | |
| [[ "$HAS_SKIP_LABEL" == "true" ]] && has_skip_label=1 | |
| [[ "$HAS_INTEGRATION_LABEL" == "true" ]] && has_integration_label=1 | |
| [[ "$HAS_SYSTEM_LABEL" == "true" ]] && has_system_label=1 | |
| [[ "$HAS_EXTENDED_LABEL" == "true" ]] && has_extended_label=1 | |
| [[ "$HAS_MACOS_LABEL" == "true" ]] && has_macos_label=1 | |
| [[ "$HAS_PUBLISH_LABEL" == "true" ]] && has_publish_label=1 | |
| [[ "$HAS_BUILD_SKIP_LABEL" == "true" ]] && has_build_skip_label=1 | |
| [[ "$HAS_BUILD_SKIP_DOCKER_LABEL" == "true" ]] && has_build_skip_docker_label=1 | |
| [[ "$HAS_BUILD_SKIP_RELEASE_LABEL" == "true" ]] && has_build_skip_release_label=1 | |
| [[ "$HAS_BUILD_RELEASE_LABEL" == "true" ]] && has_build_release_label=1 | |
| [[ "$HAS_BUILD_PUSH_DOCKER_LABEL" == "true" ]] && has_build_push_docker_label=1 | |
| # Detect changed files | |
| while IFS= read -r file; do | |
| [[ -z "$file" ]] && continue | |
| [[ "$file" =~ \.rs$ ]] && rust_code_changed=1 | |
| [[ "$file" == "Cargo.toml" || "$file" == "Cargo.lock" || "$file" =~ ^crates/.*/Cargo\.toml$ ]] && rust_deps_changed=1 | |
| [[ "$file" == "rust-toolchain.toml" || "$file" =~ ^\.cargo/ ]] && rust_config_changed=1 | |
| [[ "$file" == "pyproject.toml" || "$file" =~ ^crates/.*/pyproject\.toml$ ]] && python_config_changed=1 | |
| [[ "$file" =~ ^\.github/workflows/.*\.yml$ ]] && workflow_changed=1 | |
| [[ "$file" == ".github/workflows/build-release-binaries.yml" ]] && release_workflow_changed=1 | |
| [[ "$file" == "scripts/check_uv_wheel_contents.py" ]] && release_build_changed=1 | |
| [[ "$file" == ".github/workflows/ci.yml" ]] && ci_workflow_changed=1 | |
| [[ "$file" == "fyn.schema.json" ]] && schema_changed=1 | |
| [[ "$file" =~ ^crates/fyn-publish/ || "$file" =~ ^scripts/publish/ || "$file" == "crates/fyn/src/commands/publish.rs" ]] && publish_code_changed=1 | |
| [[ "$file" == ".github/workflows/test-windows-trampolines.yml" ]] && trampoline_workflow_changed=1 | |
| [[ "$file" =~ ^crates/fyn-trampoline/ || "$file" =~ ^crates/fyn-trampoline-builder/ ]] && trampoline_code_changed=1 | |
| [[ "$file" =~ ^crates/fyn-build/ ]] && fyn_build_changed=1 | |
| [[ "$file" == "Dockerfile" ]] && dockerfile_changed=1 | |
| [[ "$file" == ".github/workflows/build-docker.yml" ]] && docker_workflow_changed=1 | |
| [[ "$file" == ".github/workflows/bench.yml" ]] && bench_workflow_changed=1 | |
| [[ "$file" == ".github/workflows/test-integration.yml" || "$file" =~ ^test/integration/ || "$file" == "scripts/check_registry.py" || "$file" == "scripts/check_cache_compat.py" || "$file" == "scripts/registries-test.py" ]] && integration_changed=1 | |
| [[ "$file" == ".github/workflows/test-system.yml" ]] && system_workflow_changed=1 | |
| [[ "$file" == "scripts/check_system_python.py" || "$file" == "scripts/check_embedded_python.py" ]] && system_test_changed=1 | |
| [[ "$file" =~ ^docs/ || "$file" =~ ^mkdocs.*\.yml$ || "$file" =~ \.md$ || "$file" =~ ^bin/ || "$file" =~ ^assets/ ]] && continue | |
| any_code_changed=1 | |
| done <<< "$(git diff --name-only "${BASE_SHA:-origin/main}...HEAD")" | |
| # Derived groups | |
| [[ $rust_code_changed || $rust_deps_changed || $rust_config_changed ]] && any_rust_changed=1 | |
| [[ $python_config_changed || $rust_deps_changed || $rust_config_changed || $fyn_build_changed || $release_workflow_changed ]] && release_build_changed=1 | |
| [[ $publish_code_changed || $ci_workflow_changed ]] && publish_changed=1 | |
| [[ $rust_deps_changed || $rust_config_changed || $workflow_changed ]] && cache_relevant_changed=1 | |
| [[ $python_config_changed || $rust_deps_changed || $rust_config_changed || $dockerfile_changed || $docker_workflow_changed ]] && docker_build_changed=1 | |
| # Decisions | |
| [[ ! $has_skip_label && ($any_code_changed || $on_main_branch) ]] && test_code=1 | |
| [[ $schema_changed ]] && check_schema=1 | |
| [[ ! $has_skip_label && ! $has_build_skip_label && ! $has_build_skip_release_label && ($release_build_changed || $has_build_release_label) ]] && build_release_binaries=1 | |
| [[ ! $has_skip_label ]] && run_checks=1 | |
| [[ $publish_changed || $has_publish_label || $has_extended_label || $on_main_branch ]] && test_publish=1 | |
| [[ ! $has_skip_label && ($trampoline_code_changed || $trampoline_workflow_changed || $rust_deps_changed || $on_main_branch) ]] && test_windows_trampoline=1 | |
| [[ $on_main_branch || $cache_relevant_changed ]] && save_rust_cache=1 | |
| [[ ! $has_skip_label && ($any_rust_changed || $bench_workflow_changed || $on_main_branch) ]] && run_bench=1 | |
| [[ ! $has_skip_label ]] && test_smoke=1 | |
| [[ ! $has_skip_label ]] && test_ecosystem=1 | |
| [[ $has_integration_label || $has_extended_label || $on_main_branch || $integration_changed ]] && test_integration=1 | |
| [[ $has_system_label || $has_extended_label || $on_main_branch || $system_workflow_changed || $system_test_changed ]] && test_system=1 | |
| [[ $has_macos_label || $has_extended_label || $on_main_branch || $build_release_binaries ]] && test_macos=1 | |
| [[ ! $has_build_skip_label && ! $has_build_skip_docker_label && ($docker_build_changed || $has_build_push_docker_label) ]] && build_docker=1 | |
| [[ $has_build_push_docker_label ]] && push_docker=1 | |
| # Output (convert 1/empty to true/false for GHA) | |
| out() { [[ "$2" ]] && echo "$1=true" || echo "$1=false"; } | |
| { | |
| out test_code "$test_code" | |
| out check_schema "$check_schema" | |
| out build_release_binaries "$build_release_binaries" | |
| out run_checks "$run_checks" | |
| out test_publish "$test_publish" | |
| out test_windows_trampoline "$test_windows_trampoline" | |
| out save_rust_cache "$save_rust_cache" | |
| out run_bench "$run_bench" | |
| out test_smoke "$test_smoke" | |
| out test_ecosystem "$test_ecosystem" | |
| out test_integration "$test_integration" | |
| out test_system "$test_system" | |
| out test_macos "$test_macos" | |
| out build_docker "$build_docker" | |
| out push_docker "$push_docker" | |
| } >> "$GITHUB_OUTPUT" | |
| check-fmt: | |
| uses: ./.github/workflows/check-fmt.yml | |
| check-lint: | |
| needs: plan | |
| uses: ./.github/workflows/check-lint.yml | |
| with: | |
| code-changed: ${{ needs.plan.outputs.test-code }} | |
| save-rust-cache: ${{ needs.plan.outputs.save-rust-cache }} | |
| check-docs: | |
| uses: ./.github/workflows/check-docs.yml | |
| check-generated-files: | |
| needs: plan | |
| uses: ./.github/workflows/check-generated-files.yml | |
| with: | |
| schema-changed: ${{ needs.plan.outputs.check-schema }} | |
| save-rust-cache: ${{ needs.plan.outputs.save-rust-cache }} | |
| required-checks-passed: | |
| name: "all required jobs passed" | |
| if: always() | |
| needs: | |
| - check-fmt | |
| - check-lint | |
| - check-docs | |
| - check-generated-files | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "Check required jobs passed" | |
| run: | | |
| failing=$(echo "$NEEDS_JSON" | jq -r 'to_entries[] | select(.value.result != "success" and .value.result != "skipped") | "\(.key): \(.value.result)"') | |
| if [ -n "$failing" ]; then | |
| echo "$failing" | |
| exit 1 | |
| fi | |
| env: | |
| NEEDS_JSON: ${{ toJSON(needs) }} |