HHH-18563 Add foreign key target tables to affected tables #761

Workflow file for this run

	name: GH Actions CI

	on:
	push:
	branches:
	- 'main'
	pull_request:
	branches:
	- 'main'

	permissions: { } # none

	# See https://github.com/hibernate/hibernate-orm/pull/4615 for a description of the behavior we're getting.
	concurrency:
	# Consider that two builds are in the same concurrency group (cannot run concurrently)
	# if they use the same workflow and are about the same branch ("ref") or pull request.
	group: "workflow = ${{ github.workflow }}, ref = ${{ github.event.ref }}, pr = ${{ github.event.pull_request.id }}"
	# Cancel previous builds in the same concurrency group even if they are in progress
	# for pull requests or pushes to forks (not the upstream repository).
	cancel-in-progress: ${{ github.event_name == 'pull_request' \|\| github.repository != 'hibernate/hibernate-orm' }}

	jobs:

	# Main job for h2/docker DBs.
	build:
	permissions:
	contents: read
	name: OpenJDK 17 - ${{matrix.rdbms}}
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	matrix:
	include:
	- rdbms: h2
	- rdbms: hsqldb
	- rdbms: mysql
	- rdbms: mariadb
	- rdbms: postgresql
	- rdbms: edb
	- rdbms: oracle
	- rdbms: db2
	- rdbms: mssql
	- rdbms: sybase
	# Running with CockroachDB requires at least 2-4 vCPUs, which we don't have on GH Actions runners
	# - rdbms: cockroachdb
	# Running with HANA requires at least 8GB memory just for the database, which we don't have on GH Actions runners
	# - rdbms: hana
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- name: Reclaim Disk Space
	run: .github/ci-prerequisites.sh
	- name: Start database
	env:
	RDBMS: ${{ matrix.rdbms }}
	run: ci/database-start.sh
	- name: Set up Java 17
	uses: actions/setup-java@v4
	with:
	distribution: 'temurin'
	java-version: '17'

	- name: Generate cache key
	id: cache-key
	run: \|
	CURRENT_BRANCH="${{ github.repository != 'hibernate/hibernate-orm' && 'fork' \|\| github.base_ref \|\| github.ref_name }}"
	CURRENT_MONTH=$(/bin/date -u "+%Y-%m")
	CURRENT_DAY=$(/bin/date -u "+%d")
	ROOT_CACHE_KEY="buildtool-cache"
	echo "buildtool-monthly-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}" >> $GITHUB_OUTPUT
	echo "buildtool-monthly-branch-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}" >> $GITHUB_OUTPUT
	echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
	- name: Cache Maven/Gradle Dependency/Dist Caches
	id: cache-maven
	uses: actions/cache@v4
	# if it's not a pull request, we restore and save the cache
	if: github.event_name != 'pull_request'
	with:
	path: \|
	~/.m2/repository/
	~/.m2/wrapper/
	~/.gradle/caches/modules-2
	~/.gradle/wrapper/
	# A new cache will be stored daily. After that first store of the day, cache save actions will fail because the cache is immutable but it's not a problem.
	# The whole cache is dropped monthly to prevent unlimited growth.
	# The cache is per branch but in case we don't find a branch for a given branch, we will get a cache from another branch.
	key: ${{ steps.cache-key.outputs.buildtool-cache-key }}
	restore-keys: \|
	${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
	${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
	- name: Restore Maven/Gradle Dependency/Dist Caches
	uses: actions/cache/restore@v4
	# if it a pull request, we restore the cache but we don't save it
	if: github.event_name == 'pull_request'
	with:
	path: \|
	~/.m2/repository/
	~/.m2/wrapper/
	~/.gradle/caches/modules-2
	~/.gradle/wrapper/
	key: ${{ steps.cache-key.outputs.buildtool-cache-key }}
	restore-keys: \|
	${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
	${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-

	- name: Run build script
	run: ./ci/build-github.sh
	shell: bash
	env:
	RDBMS: ${{ matrix.rdbms }}
	# For jobs running on 'push', publish build scan and cache immediately.
	# This won't work for pull requests, since they don't have access to secrets.
	POPULATE_REMOTE_GRADLE_CACHE: ${{ github.event_name == 'push' && github.repository == 'hibernate/hibernate-orm' && 'true' \|\| 'false' }}
	DEVELOCITY_ACCESS_KEY: "${{ secrets.DEVELOCITY_ACCESS_KEY }}"

	# For jobs running on 'pull_request', upload build scan data.
	# The actual publishing must be done in a separate job (see ci-report.yml).
	# We don't write to the remote cache as that would be unsafe.
	- name: Upload GitHub Actions artifact for the Develocity build scan
	uses: actions/upload-artifact@v4
	if: "${{ github.event_name == 'pull_request' && !cancelled() }}"
	with:
	name: build-scan-data-${{ matrix.rdbms }}
	path: ~/.gradle/build-scan-data

	- name: Upload test reports (if Gradle failed)
	uses: actions/upload-artifact@v4
	if: failure()
	with:
	name: test-reports-java11-${{ matrix.rdbms }}
	path: \|
	./**/target/reports/tests/
	- name: Omit produced artifacts from build cache
	run: ./ci/before-cache.sh

	# Job for builds on Atlas (Oracle) infrastructure.
	# This is untrusted, even for pushes, see below.
	atlas:
	permissions:
	contents: read
	name: GraalVM 21 - ${{matrix.rdbms}}
	# runs-on: ubuntu-latest
	runs-on: [ self-hosted, Linux, X64, OCI ]
	strategy:
	fail-fast: false
	matrix:
	include:
	- rdbms: oracle_atps
	- rdbms: oracle_db19c
	- rdbms: oracle_db21c
	- rdbms: oracle_db23c
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- name: Reclaim disk space and sanitize user home
	run: .github/ci-prerequisites-atlas.sh
	- name: Start database
	env:
	RDBMS: ${{ matrix.rdbms }}
	RUNID: ${{ github.run_number }}
	run: ci/database-start.sh
	- name: Set up Java 21
	uses: graalvm/setup-graalvm@v1
	with:
	distribution: 'graalvm'
	java-version: '21'

	- name: Generate cache key
	id: cache-key
	run: \|
	CURRENT_BRANCH="${{ github.repository != 'hibernate/hibernate-orm' && 'fork' \|\| github.base_ref \|\| github.ref_name }}"
	CURRENT_MONTH=$(/bin/date -u "+%Y-%m")
	CURRENT_DAY=$(/bin/date -u "+%d")
	ROOT_CACHE_KEY="buildtool-cache-atlas"
	echo "buildtool-monthly-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}" >> $GITHUB_OUTPUT
	echo "buildtool-monthly-branch-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}" >> $GITHUB_OUTPUT
	echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
	- name: Cache Maven/Gradle Dependency/Dist Caches
	id: cache-maven
	uses: actions/cache@v4
	# if it's not a pull request, we restore and save the cache
	if: github.event_name != 'pull_request'
	with:
	path: \|
	~/.m2/repository/
	~/.m2/wrapper/
	~/.gradle/caches/modules-2
	~/.gradle/wrapper/
	# A new cache will be stored daily. After that first store of the day, cache save actions will fail because the cache is immutable but it's not a problem.
	# The whole cache is dropped monthly to prevent unlimited growth.
	# The cache is per branch but in case we don't find a branch for a given branch, we will get a cache from another branch.
	key: ${{ steps.cache-key.outputs.buildtool-cache-key }}
	restore-keys: \|
	${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
	${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
	- name: Restore Maven/Gradle Dependency/Dist Caches
	uses: actions/cache/restore@v4
	# if it a pull request, we restore the cache but we don't save it
	if: github.event_name == 'pull_request'
	with:
	path: \|
	~/.m2/repository/
	~/.m2/wrapper/
	~/.gradle/caches/modules-2
	~/.gradle/wrapper/
	key: ${{ steps.cache-key.outputs.buildtool-cache-key }}
	restore-keys: \|
	${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
	${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-

	- name: Run build script
	env:
	RDBMS: ${{ matrix.rdbms }}
	RUNID: ${{ github.run_number }}
	# These runners have no HOME variable set by default, we need to explicitly set it to make the build work
	HOME: /root
	run: ./ci/build-github.sh
	shell: bash
	# Upload build scan data.
	# The actual publishing must be done in a separate job (see ci-report.yml).
	# We don't write to the remote cache as that would be unsafe.
	# That's even on push, because we do not trust Atlas runners to hold secrets: they are shared infrastructure.
	- name: Upload GitHub Actions artifact for the Develocity build scan
	uses: actions/upload-artifact@v4
	if: "${{ !cancelled() }}"
	with:
	name: build-scan-data-${{ matrix.rdbms }}
	path: ~/.gradle/build-scan-data
	- name: Upload test reports (if Gradle failed)
	uses: actions/upload-artifact@v4
	if: failure()
	with:
	name: test-reports-java11-${{ matrix.rdbms }}
	path: \|
	./**/target/reports/tests/
	- name: Omit produced artifacts from build cache
	run: ./ci/before-cache.sh

	# Static code analysis check
	format_checks:
	permissions:
	contents: read
	name: Static code analysis
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- name: Reclaim disk space and sanitize user home
	run: .github/ci-prerequisites-atlas.sh
	- name: Set up Java 17
	uses: actions/setup-java@v4
	with:
	distribution: 'temurin'
	java-version: '17'

	- name: Generate cache key
	id: cache-key
	run: \|
	CURRENT_BRANCH="${{ github.repository != 'hibernate/hibernate-orm' && 'fork' \|\| github.base_ref \|\| github.ref_name }}"
	CURRENT_MONTH=$(/bin/date -u "+%Y-%m")
	CURRENT_DAY=$(/bin/date -u "+%d")
	ROOT_CACHE_KEY="buildtool-cache-atlas"
	echo "buildtool-monthly-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}" >> $GITHUB_OUTPUT
	echo "buildtool-monthly-branch-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}" >> $GITHUB_OUTPUT
	echo "buildtool-cache-key=${ROOT_CACHE_KEY}-${CURRENT_MONTH}-${CURRENT_BRANCH}-${CURRENT_DAY}" >> $GITHUB_OUTPUT
	- name: Cache Maven/Gradle Dependency/Dist Caches
	id: cache-maven
	uses: actions/cache@v4
	# if it's not a pull request, we restore and save the cache
	if: github.event_name != 'pull_request'
	with:
	path: \|
	~/.m2/repository/
	~/.m2/wrapper/
	~/.gradle/caches/modules-2
	~/.gradle/wrapper/
	# A new cache will be stored daily. After that first store of the day, cache save actions will fail because the cache is immutable but it's not a problem.
	# The whole cache is dropped monthly to prevent unlimited growth.
	# The cache is per branch but in case we don't find a branch for a given branch, we will get a cache from another branch.
	key: ${{ steps.cache-key.outputs.buildtool-cache-key }}
	restore-keys: \|
	${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
	${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-
	- name: Restore Maven/Gradle Dependency/Dist Caches
	uses: actions/cache/restore@v4
	# if it a pull request, we restore the cache but we don't save it
	if: github.event_name == 'pull_request'
	with:
	path: \|
	~/.m2/repository/
	~/.m2/wrapper/
	~/.gradle/caches/modules-2
	~/.gradle/wrapper/
	key: ${{ steps.cache-key.outputs.buildtool-cache-key }}
	restore-keys: \|
	${{ steps.cache-key.outputs.buildtool-monthly-branch-cache-key }}-
	${{ steps.cache-key.outputs.buildtool-monthly-cache-key }}-

	- name: Run build script
	run: ./gradlew formatChecks
	env:
	# For jobs running on 'push', publish build scan and cache immediately.
	# This won't work for pull requests, since they don't have access to secrets.
	POPULATE_REMOTE_GRADLE_CACHE: ${{ github.event_name == 'push' && github.repository == 'hibernate/hibernate-orm' && 'true' \|\| 'false' }}
	DEVELOCITY_ACCESS_KEY: "${{ secrets.DEVELOCITY_ACCESS_KEY }}"

	# For jobs running on 'pull_request', upload build scan data.
	# The actual publishing must be done in a separate job (see ci-report.yml).
	# We don't write to the remote cache as that would be unsafe.
	- name: Upload GitHub Actions artifact for the Develocity build scan
	uses: actions/upload-artifact@v4
	if: "${{ github.event_name == 'pull_request' && !cancelled() }}"
	with:
	name: build-scan-data-sca
	path: ~/.gradle/build-scan-data

	- name: Upload test reports (if Gradle failed)
	uses: actions/upload-artifact@v4
	if: failure()
	with:
	name: test-reports-java11-sca
	path: \|
	./**/target/reports/tests/
	- name: Omit produced artifacts from build cache
	run: ./ci/before-cache.sh

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

HHH-18563 Add foreign key target tables to affected tables #761

Workflow file

HHH-18563 Add foreign key target tables to affected tables #761

Jobs

Run details

Workflow file for this run