chore: upgrade kotlin → 1.9.0
, release 0.8.22
#49
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: PR | |
on: | |
pull_request: | |
types: [opened, reopened, synchronize, ready_for_review] | |
branches: [master, main, beta] | |
env: | |
CI: "true" | |
GRADLE_OPTS: -Dorg.gradle.jvmargs="-XX:+UseParallelGC -Xmx3g -XX:MetaspaceSize=512M -XX:MaxMetaspaceSize=512M" | |
GRADLE_CACHE_LOCAL: true | |
GRADLE_CACHE_REMOTE: true | |
GRADLE_CACHE_PUSH: true | |
GRADLE_CACHE_USERNAME: apikey | |
GRADLE_CACHE_PASSWORD: ${{ secrets.BUILDLESS_APIKEY }} | |
CACHE_ENDPOINT: ${{ vars.CACHE_ENDPOINT_GRADLE }} | |
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
TEST_EXCEPTIONS: true | |
jobs: | |
build: | |
name: "Build (${{ matrix.label }})" | |
permissions: | |
contents: "read" | |
id-token: "write" | |
checks: "write" | |
pull-requests: "write" | |
strategy: | |
fail-fast: false | |
matrix: | |
runner: [macOS-latest, windows-latest, ubuntu-latest] | |
include: | |
- runner: macOS-latest | |
flags: "--no-configuration-cache" | |
os: "macos" | |
label: "Darwin" | |
experimental: false | |
coverage: true | |
gvm: ${{ vars.GVM_VERSION }} | |
java: ${{ vars.JVM_VERSION }} | |
- runner: windows-latest | |
flags: "--no-configuration-cache" | |
os: "windows" | |
label: "Windows" | |
experimental: false | |
coverage: true | |
gvm: ${{ vars.GVM_VERSION }} | |
java: ${{ vars.JVM_VERSION }} | |
- runner: ubuntu-latest | |
flags: "--no-configuration-cache -PsonarScan=true" | |
os: "linux" | |
label: "Linux" | |
experimental: false | |
coverage: true | |
gvm: ${{ vars.GVM_VERSION }} | |
java: ${{ vars.JVM_VERSION }} | |
uses: ./.github/workflows/step.build.yml | |
secrets: inherit | |
with: | |
runner: ${{ matrix.runner }} | |
os: ${{ matrix.os }} | |
label: ${{ matrix.label }} | |
flags: ${{ matrix.flags }} | |
experimental: ${{ matrix.experimental }} | |
gvm: ${{ matrix.gvm }} | |
java: ${{ matrix.java }} | |
coverage: ${{ matrix.coverage }} | |
codeql: | |
name: "Analysis: CodeQL" | |
needs: ["build"] | |
uses: ./.github/workflows/codeql.ci.yml | |
secrets: inherit | |
with: {} | |
permissions: | |
actions: read | |
contents: read | |
security-events: write | |
qodana: | |
name: "Analysis: Qodana" | |
needs: ["build"] | |
uses: ./.github/workflows/qodana.ci.yml | |
with: {} | |
secrets: inherit | |
permissions: | |
actions: read | |
contents: read | |
security-events: write | |
review: | |
permissions: write-all | |
runs-on: ubuntu-latest | |
name: "Analysis: Auto-Review" | |
needs: ["build"] | |
continue-on-error: true | |
steps: | |
- name: "Setup: Checkout" | |
uses: actions/checkout@v3 | |
with: | |
ref: ${{ github.event.pull_request.head.sha }} | |
fetch-depth: 2 | |
- name: "Auto PR Review" | |
uses: microsoft/[email protected] | |
continue-on-error: true | |
with: | |
GIT_COMMIT_HASH: ${{ github.event.pull_request.head.sha }} | |
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} | |
OPENAI_ORG_KEY: ${{ secrets.OPENAI_ORG_ID }} | |
PR_NUMBER: ${{ github.event.pull_request.number }} | |
PR_TITLE: ${{ github.event.pull_request.title }} | |
REPOSITORY_NAME: ${{ github.repository }} | |
AZURE_OPENAI_API: ${{ secrets.AZURE_OPENAI_API }} | |
AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY }} | |
publish-sandbox: | |
permissions: write-all | |
name: "Publish: Sandbox" | |
needs: ["build", "codeql", "qodana"] | |
if: contains(github.event.pull_request.labels.*.name, 'ci:publish-snapshot') | |
uses: ./.github/workflows/step.publish.yml | |
secrets: | |
GOOGLE_CREDENTIALS: ${{ secrets.BUILDBOT_SERVICE_ACCOUNT }} | |
SIGNING_KEY: ${{ secrets.SIGNING_KEY }} | |
with: | |
version: 1.0-SNAPSHOT | |
repository: gcs://elide-snapshots/repository/v3 | |
logLevel: info | |
snapshot: true | |
release: false | |
signing: true | |
gcs: true | |
environment: sandbox | |
label: Elide Sandbox | |
publish-live: | |
permissions: write-all | |
name: "Publish: Live" | |
if: contains(github.event.pull_request.labels.*.name, 'ci:publish') && (github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged == true) | |
needs: ["build", "codeql", "qodana", "publish-sandbox"] | |
uses: ./.github/workflows/step.publish.yml | |
secrets: | |
PUBLISH_USER: ${{ secrets.PUBLISH_USER_CENTRAL }} | |
PUBLISH_PASSWORD: ${{ secrets.PUBLISH_TOKEN_CENTRAL }} | |
with: | |
repository: "https://oss.sonatype.org/service/local/staging/deploy/maven2/" | |
logLevel: "info" | |
snapshot: false | |
release: true | |
signing: true | |
gcs: false | |
environment: central | |
label: "Maven Central" |