validation-native.yaml

name: Quarkus Hilla Native Validation
on:
  workflow_dispatch:
  schedule:
    - cron: '0 1 * * *'
  pull_request_target:
    types: [opened, synchronize, reopened, edited]
permissions:
  contents: read
  issues: read
  checks: write
  pull-requests: write
concurrency:
  group: validation-native-${{ github.head_ref || github.ref_name }}
  cancel-in-progress: true
jobs:
  check-permissions:
    name: Check User Permissions
    runs-on: ubuntu-latest
    steps:
      - run: echo "Concurrency Group = ${{ github.head_ref || github.ref_name }}"
      - uses: actions-cool/check-user-permission@main
        id: checkUser
        with:
          username: ${{github.triggering_actor}}
          require: 'write'
      - name: Fail on workflow triggered by external contributor
        if: ${{ steps.checkUser.outputs.require-result != 'true' && github.actor != 'dependabot[bot]' && github.actor != 'quarkus-hilla-bot[bot]' }}
        run: |
          echo "🚫 **${{ github.actor }}** is an external contributor, a **${{ github.repository }}** team member has to review this changes and re-run this build" \
            | tee -a $GITHUB_STEP_SUMMARY && exit 1
  changes:
    name: Compute changes
    needs: [check-permissions]
    runs-on: ubuntu-latest
    outputs:
      validation-required: ${{ steps.filter.outputs.validate }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            validate:
              - '!(README.md|LICENSE|.gitignore|etc/**)'
  compute-matrix:
    needs: [changes]
    if: ${{ needs.changes.outputs.validation-required == 'true' }}
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Compute matrix
        id: compute-matrix
        run: |
          test_modules=$(find integration-tests -maxdepth 1 -mindepth 1 -type d -name "*-tests")
          test_modules=$(while IFS= read -r mod; do grep -q "%test-security." $mod/src/main/resources/application.properties; echo "{\"path\": \"$mod\", \"security\": $? }"; done <<< "${test_modules}" | jq -s -c '.')
          echo "modules=${test_modules}" >> "$GITHUB_OUTPUT"
  build-and-test-native:
    name: Native tests
    needs: [compute-matrix]
    if: ${{ needs.changes.outputs.validation-required == 'true' }}
    strategy:
      fail-fast: false
      matrix:
        module: ${{fromJson(needs.compute-matrix.outputs.modules)}}
    timeout-minutes: 30
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          java-version: 23
          distribution: 'graalvm'
          cache: maven
      - uses: browser-actions/setup-chrome@latest
        id: setup-chrome
        if: ${{ !vars.QH_DISABLE_CHROME_INSTALL }}
        with:
          chrome-version: stable
      - name: Build
        run: |
          set -x -e -o pipefail
          mvn -V -e -B -ntp -DskipTests -Dmaven.javadoc.skip=false install
      - name: Native Test
        run: |
          set -x -e -o pipefail
          mvn -V -e -B -ntp verify -am -DtrimStackTrace=false -Dselenide.browserBinary=${{ steps.setup-chrome.outputs.chrome-path }} -Pit-tests,production -Dnative -pl ${{ matrix.module.path }}
      - name: Native Security Test
        if: ${{ matrix.module.security == 1 }}
        run: |
          set -x -e -o pipefail
          mvn -V -e -B -ntp verify -am -DtrimStackTrace=false -Dselenide.browserBinary=${{ steps.setup-chrome.outputs.chrome-path }} -Pit-tests,production -Dnative -Dquarkus.profile=test-security -pl ${{ matrix.module.path }}
      - name: Package test output files
        if: ${{ failure() || success() }}
        run: find . -name surefire-reports -o -name failsafe-reports -o -name selenide-reports -o -name quarkus.log | tar -czf tests-report-native.tgz -T -
      - uses: actions/upload-artifact@v4
        if: ${{ failure() || success() }}
        with:
          name: tests-output-it-native-${{ matrix.module }}
          path: tests-report-*.tgz