Skip to content

Bump github/codeql-action/analyze from 4.38.0 to 4.38.1 #339

Bump github/codeql-action/analyze from 4.38.0 to 4.38.1

Bump github/codeql-action/analyze from 4.38.0 to 4.38.1 #339

Workflow file for this run

name: CI
on:
push:
branches: [ "main", "master" ]
# Documentation and images cannot break a script, manifest or config:
# a change made only of these files skips validation entirely.
paths-ignore:
- '**.md'
- '**.mdx'
- '**.rst'
- '**.adoc'
- '**.pdf'
- '**.doc'
- '**.docx'
- '**.odt'
- '**.rtf'
- '**.ppt'
- '**.pptx'
- '**.odp'
- '**.png'
- '**.jpg'
- '**.jpeg'
- '**.gif'
- '**.webp'
- '**.avif'
- '**.bmp'
- '**.tif'
- '**.tiff'
- '**.ico'
- '**.svg'
pull_request:
branches: [ "main", "master" ]
# Documentation and images cannot break a script, manifest or config:
# a change made only of these files skips validation entirely.
paths-ignore:
- '**.md'
- '**.mdx'
- '**.rst'
- '**.adoc'
- '**.pdf'
- '**.doc'
- '**.docx'
- '**.odt'
- '**.rtf'
- '**.ppt'
- '**.pptx'
- '**.odp'
- '**.png'
- '**.jpg'
- '**.jpeg'
- '**.gif'
- '**.webp'
- '**.avif'
- '**.bmp'
- '**.tif'
- '**.tiff'
- '**.ico'
- '**.svg'
permissions:
contents: read
jobs:
offline-gate:
name: Offline gate (Windows, JDK 21)
runs-on: windows-latest
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up JDK
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: temurin
java-version: 21
cache: maven
- name: Prime the exact Maven test runtime
run: mvn -B -ntp "-Dtest=quality.SmokeMethodTestHarnessTest" test --file pom.xml
- name: Run the strict offline test gate
shell: pwsh
run: .\scripts\run-offline-gate.ps1 -Goal test -StrictDependencies
category-tests:
name: Test (${{ matrix.category }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- category: smoke
groups: smoke
- category: integration
groups: integration
- category: property
groups: property
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up JDK
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: temurin
java-version: 21
cache: maven
- name: Run categorized tests
run: mvn -B test --file pom.xml -Dgroups='${{ matrix.groups }}'
verify:
name: Maven Verify (JDK ${{ matrix.java }})
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
java: [ '17', '21' ]
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up JDK
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: temurin
java-version: ${{ matrix.java }}
cache: maven
- name: Build and test
run: mvn -B verify --file pom.xml
- name: Upload Surefire reports
if: matrix.java == '21'
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: surefire-reports-${{ matrix.java }}
path: target/surefire-reports
retention-days: 7
- name: Upload JaCoCo report
if: matrix.java == '21'
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: jacoco-report-${{ matrix.java }}
path: target/site/jacoco
if-no-files-found: warn
retention-days: 7
codecov:
name: Upload coverage to Codecov
if: github.event_name == 'push'
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up JDK
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
with:
distribution: temurin
java-version: 21
cache: maven
- name: Build trusted coverage report
run: mvn -B verify --file pom.xml
- name: Upload coverage to Codecov
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
with:
files: target/site/jacoco/jacoco.xml
use_oidc: true
fail_ci_if_error: true
verbose: true