chore: upgrade kotlin → 1.9.0, release 0.8.22

.editorconfig

@@ -0,0 +1,2 @@
+[*]
+ktlint_standard_filename=disabled

.github/workflows/pr.yml

@@ -23,15 +23,16 @@ jobs:
     name: "Build (${{ matrix.label }})"
 
     permissions:
-      contents: "read"
+      actions: "read"
+      contents: "write"
       id-token: "write"
       checks: "write"
       pull-requests: "write"
 
     strategy:
       fail-fast: false
       matrix:
-        runner: [macOS-latest, windows-latest-8-cores, ubuntu-latest-4-cores]
+        runner: [macOS-latest, windows-latest, ubuntu-latest]
         include:
           - runner: macOS-latest
             flags: "--no-configuration-cache"
@@ -41,22 +42,25 @@ jobs:
             coverage: true
             gvm: ${{ vars.GVM_VERSION }}
             java: ${{ vars.JVM_VERSION }}
-          - runner: windows-latest-8-cores
+            provenance: false
+          - runner: windows-latest
             flags: "--no-configuration-cache"
             os: "windows"
             label: "Windows"
             experimental: false
             coverage: true
             gvm: ${{ vars.GVM_VERSION }}
             java: ${{ vars.JVM_VERSION }}
-          - runner: ubuntu-latest-4-cores
+            provenance: false
+          - runner: ubuntu-latest
             flags: "--no-configuration-cache -PsonarScan=true"
             os: "linux"
             label: "Linux"
             experimental: false
             coverage: true
             gvm: ${{ vars.GVM_VERSION }}
             java: ${{ vars.JVM_VERSION }}
+            provenance: true
 
     uses: ./.github/workflows/step.build.yml
     secrets: inherit
@@ -66,9 +70,9 @@ jobs:
       label: ${{ matrix.label }}
       flags: ${{ matrix.flags }}
       experimental: ${{ matrix.experimental }}
-      gvm: ${{ matrix.gvm }}
       java: ${{ matrix.java }}
       coverage: ${{ matrix.coverage }}
+      provenance: ${{ matrix.provenance }}
 
   codeql:
     name: "Analysis: CodeQL"

.github/workflows/step.build.yml

@@ -16,18 +16,18 @@ on:
         required: false
         type: string
         default: "--no-configuration-cache"
-      gvm:
-        required: false
-        type: string
-        default: ${{ vars.GVM_VERSION }}
       java:
         required: false
         type: string
-        default: ${{ vars.JVM_VERSION }}
+        default: 20
       coverage:
         required: false
         type: boolean
         default: true
+      provenance:
+        required: false
+        type: boolean
+        default: true
       experimental:
         required: false
         type: boolean
@@ -64,11 +64,14 @@ jobs:
       checks: "write"
       pull-requests: "write"
 
+    outputs:
+      hashes: ${{ steps.hash.outputs.hashes }}
+
     steps:
       - name: "Setup: Checkout"
         uses: actions/checkout@v3
       - name: "Setup: Cache"
-        uses: actions/cache@v3
+        uses: buildjet/cache@v3
         with:
           key: ${{ runner.os }}-gradle-${{ hashFiles('*.gradle.kts') }}-${{ hashFiles('gradle/libs.versions.toml') }}
           restore-keys: |
@@ -77,12 +80,11 @@ jobs:
             ~/.sonar/cache
             ~/.konan
             ~/.gradle/caches
-      - name: "Setup: GraalVM"
-        uses: graalvm/setup-graalvm@v1
+      - name: "Setup: Zulu 20"
+        uses: buildjet/setup-java@v3
         with:
-          version: ${{ inputs.gvm }}
-          java-version: ${{ inputs.java }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          distribution: 'zulu'
+          java-version: '20'
       - name: "Build and Test"
         uses: gradle/gradle-build-action@v2
         id: gradlebuild
@@ -91,6 +93,7 @@ jobs:
           cache-read-only: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/master' && github.ref != 'refs/heads/beta' }}
           gradle-version: wrapper
           gradle-home-cache-cleanup: true
+          dependency-graph: generate
           gradle-home-cache-includes: |
             caches
             notifications
@@ -101,12 +104,18 @@ jobs:
           arguments: |
             preMerge
             -PVERSION=1.0-SNAPSHOT
+            -PsonarScan=true
             --scan
             --no-daemon
             --warning-mode=none
             --dependency-verification=lenient
             -Pci=true
             ${{ inputs.flags }}
+      - name: "Build: Provenance Subject"
+        id: hash
+        if: inputs.provenance
+        run: |
+          echo "hashes=$(sha256sum ./build/libs/* | base64 -w0)" >> "$GITHUB_OUTPUT"
       - name: "Analysis: Build Reports"
         uses: actions/upload-artifact@v3
         if: failure() || success()
@@ -115,7 +124,25 @@ jobs:
           path: |
             build/api/
             build/reports/
+            build/spdx/
             build/test-results/
-      - name: "Analysis: Coverage"
-        if: ${{ inputs.coverage }}
+      - name: "Report: Codecov (Server)"
+        if: inputs.coverage
         uses: codecov/codecov-action@v3
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: ./build/reports/kover/report.xml
+
+  ## Report: Provenance
+  provenance:
+    name: Provenance
+    needs: [build]
+    if: inputs.provenance
+    permissions:
+      actions: read
+      id-token: write
+      contents: write
+    uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
+    with:
+      base64-subjects: "${{ needs.build.outputs.hashes }}"
+      upload-assets: false

.github/workflows/step.publish.yml

@@ -111,10 +111,17 @@ jobs:
     name: Publish
     runs-on: ${{ matrix.runner }}
 
+    permissions:
+      id-token: write
+      contents: read
+
+    outputs:
+      hashes: ${{ steps.hash.outputs.hashes }}
+
     strategy:
       fail-fast: false
       matrix:
-        runner: [macOS-latest, windows-latest-8-cores, ubuntu-latest-4-cores]
+        runner: [macOS-latest, windows-latest, ubuntu-latest]
         include:
           - runner: macOS-latest
             flags: "--no-configuration-cache"
@@ -123,14 +130,14 @@ jobs:
             gvm: ${{ vars.GVM_VERSION }}
             java: ${{ vars.JVM_VERSION }}
             target: publishMac
-          - runner: windows-latest-8-cores
+          - runner: windows-latest
             flags: "--no-configuration-cache"
             os: "windows"
             label: "Windows"
             gvm: ${{ vars.GVM_VERSION }}
             java: ${{ vars.JVM_VERSION }}
             target: publishWindows
-          - runner: ubuntu-latest-4-cores
+          - runner: ubuntu-latest
             flags: "--no-configuration-cache"
             os: "linux"
             label: "Linux"
@@ -142,7 +149,7 @@ jobs:
       - name: "Setup: Checkout"
         uses: actions/checkout@v3
       - name: "Setup: Cache"
-        uses: actions/cache@v3
+        uses: buildjet/cache@v3
         with:
           key: ${{ runner.os }}-gradle-${{ hashFiles('*.gradle.kts') }}-${{ hashFiles('gradle/libs.versions.toml') }}
           restore-keys: |
@@ -162,19 +169,19 @@ jobs:
         uses: 'google-github-actions/setup-gcloud@v1'
         with:
           version: '${{ vars.GCLOUD_VERSION }}'
-      - name: "Setup: GraalVM"
-        uses: graalvm/setup-graalvm@v1
+      - name: "Setup: Zulu 20"
+        uses: buildjet/setup-java@v3
         with:
-          version: ${{ matrix.gvm }}
-          java-version: ${{ matrix.java }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          distribution: 'zulu'
+          java-version: '20'
       - name: "Publish (${{ matrix.label }})"
         uses: gradle/gradle-build-action@v2
         id: publish
         with:
           cache-read-only: true
           gradle-version: wrapper
           gradle-home-cache-cleanup: true
+          dependency-graph: generate-and-submit
           gradle-home-cache-includes: |
             caches
             notifications
@@ -194,10 +201,35 @@ jobs:
             --${{ inputs.logLevel }}
             ${{ inputs.flags }}
             ${{ matrix.flags }}
+      - name: "Build: Provenance Subject"
+        id: hash
+        run: |
+          echo "hashes=$(sha256sum ./build/libs/* | base64 -w0)" >> "$GITHUB_OUTPUT"
       - name: "Artifacts: Libraries"
         uses: actions/upload-artifact@v3
         if: failure() || success()
         with:
-          name: reports
+          name: libraries
           path: |
             build/libs/
+            build/spdx/
+      - name: "Artifacts: Reports"
+        uses: actions/upload-artifact@v3
+        if: failure() || success()
+        with:
+          name: reports
+          path: |
+            build/reports/
+
+  ## Report: Provenance
+  provenance:
+    name: Provenance
+    needs: [publish]
+    permissions:
+      actions: read
+      id-token: write
+      contents: write
+    uses: slsa-framework/slsa-github-generator/.github/workflows/[email protected]
+    with:
+      base64-subjects: "${{ needs.build.outputs.hashes }}"
+      upload-assets: true

README.md

@@ -1,7 +1,7 @@
 # A Kotlin Multiplatform UUID
 
 [![Maven Central](https://img.shields.io/maven-central/v/dev.elide/uuid.svg?label=mavenCentral%28%29)](https://search.maven.org/artifact/dev.elide/uuid)
-[![Build Status](https://github.com/benasher44/uuid/workflows/master/badge.svg)](https://github.com/benasher44/uuid/actions?query=workflow%3Amaster)
+[![Build](https://github.com/elide-dev/uuid/actions/workflows/step.build.yml/badge.svg)](https://github.com/elide-dev/uuid/actions/workflows/step.build.yml)
 [![Contributor Covenant](https://img.shields.io/badge/Contributor%20Covenant-v1.4%20adopted-ff69b4.svg)](CODE_OF_CONDUCT.md)
 
 K/N doesn't have a UUID yet. This brings a UUID that matches UUIDs on various platforms:

api/uuid.api

@@ -13,7 +13,7 @@ public abstract interface class dev/elide/uuid/UuidHasher {
 	public abstract fun update ([B)V
 }
 
-public final class dev/elide/uuid/UuidJvm {
+public final class dev/elide/uuid/UuidKt {
 	public static final fun getBytes (Ljava/util/UUID;)[B
 	public static final fun getVariant (Ljava/util/UUID;)I
 	public static final fun getVersion (Ljava/util/UUID;)I