ci.yml

name: CI

on:
  # Only run push on main
  push:
    branches:
      - main
    paths-ignore:
      - '**/*.md'
  # Always run on PRs
  pull_request:
    branches: [ main ]
  merge_group:

concurrency:
  group: 'ci-${{ github.event.merge_group.head_ref || github.head_ref }}-${{ github.workflow }}'
  cancel-in-progress: true

jobs:
  build:
    runs-on: ubuntu-latest
    env:
      GRADLE_ENCRYPTION_KEY: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Export JDK version
        shell: bash
        run: |
          JDK_VERSION=$(grep "jdk =" gradle/libs.versions.toml | head -n 1 | cut -d'=' -f2 | tr -d '"' | xargs)
          echo "JDK_VERSION=${JDK_VERSION}" >> $GITHUB_ENV

      - name: Install JDK ${{ env.JDK_VERSION }}
        uses: actions/setup-java@v4
        with:
          distribution: 'zulu'
          java-version: '${{ env.JDK_VERSION }}'

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4
        with:
          # Only save Gradle User Home state for builds on the 'main' branch.
          # Builds on other branches will only read existing entries from the cache.
          cache-read-only: ${{ github.ref != 'refs/heads/main' }}

          # Don't reuse cache entries from any other Job.
          gradle-home-cache-strict-match: true

          cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

          # Limit the size of the cache entry.
          # These directories contain instrumented/transformed dependency jars which can be reconstructed relatively quickly.
          gradle-home-cache-excludes: |
            caches/jars-9
            caches/transforms-3

      - name: Build and run tests
        id: gradle
        timeout-minutes: 10
        run: ./gradlew check

      - name: Print build scan url
        if: always()
        run: echo ${{ steps.gradle.outputs.build-scan-url }}

      - name: (Fail-only) Upload build reports
        if: failure()
        uses: actions/upload-artifact@v4
        with:
          name: reports
          path: |
            **/build/reports/**

  snapshots:
    runs-on: macos-latest
    env:
      GRADLE_ENCRYPTION_KEY: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
    steps:
        - name: Checkout
          uses: actions/checkout@v4
          with:
            lfs: 'true'

        - name: Check LFS files
          uses: actionsdesk/lfs-warning@v3.3

        - name: Export JDK version
          shell: bash
          run: |
            JDK_VERSION=$(grep "jdk =" gradle/libs.versions.toml | head -n 1 | cut -d'=' -f2 | tr -d '"' | xargs)
            echo "JDK_VERSION=${JDK_VERSION}" >> $GITHUB_ENV

        - name: Install JDK ${{ env.JDK_VERSION }}
          uses: actions/setup-java@v4
          with:
            distribution: 'zulu'
            java-version: '${{ env.JDK_VERSION }}'

        - name: Setup Gradle
          uses: gradle/actions/setup-gradle@v4
          with:
            # Only save Gradle User Home state for builds on the 'main' branch.
            # Builds on other branches will only read existing entries from the cache.
            cache-read-only: ${{ github.ref != 'refs/heads/main' }}

            # Don't reuse cache entries from any other Job.
            gradle-home-cache-strict-match: true

            cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

            # Limit the size of the cache entry.
            # These directories contain instrumented/transformed dependency jars which can be reconstructed relatively quickly.
            gradle-home-cache-excludes: |
              caches/jars-9
              caches/transforms-3

        - name: Build and run tests
          id: gradle
          timeout-minutes: 10
          run: ./gradlew verifyRoborazzi

        - name: (Fail-only) Upload build reports
          if: failure()
          uses: actions/upload-artifact@v4
          with:
            name: snapshot-reports
            path: |
              **/build/reports/**
              **/build/outputs/roborazzi/*.png

  publish-snapshot:
    name: 'Publish snapshot (main only)'
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    needs: 'build'
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Export JDK version
        shell: bash
        run: |
          JDK_VERSION=$(grep "jdk =" gradle/libs.versions.toml | head -n 1 | cut -d'=' -f2 | tr -d '"' | xargs)
          echo "JDK_VERSION=${JDK_VERSION}" >> $GITHUB_ENV

      - name: Install JDK ${{ env.JDK_VERSION }}
        uses: actions/setup-java@v4
        with:
          distribution: 'zulu'
          java-version: '${{ env.JDK_VERSION }}'

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4

      - name: Publish snapshot
        if: github.repository == 'slackhq/foundry'
        run: ./gradlew publish -PmavenCentralUsername=${{ secrets.SONATYPEUSERNAME }} -PmavenCentralPassword=${{ secrets.SONATYPEPASSWORD }}