Not needed as checked for being a jar. #1865
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: | |
push: | |
branches: | |
- master | |
pull_request: | |
branches: | |
- master | |
schedule: | |
- cron: "0 0 * * 1" | |
permissions: read-all | |
jobs: | |
hotspot-ea: | |
name: HotSpot (EA) | |
runs-on: ubuntu-24.04 | |
needs: [ extended ] | |
continue-on-error: true | |
steps: | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: 24-ea | |
distribution: temurin | |
cache: maven | |
- name: Build project | |
run: ./mvnw verify -Pjava24 | |
continue-on-error: false | |
hotspot-supported: | |
name: Any (supported) | |
strategy: | |
fail-fast: false | |
matrix: | |
os: [ ubuntu-24.04, macos-14, windows-2022 ] | |
java: [ 8, 11, 17, 21 ] | |
runs-on: ${{ matrix.os }} | |
needs: [ extended ] | |
steps: | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: ${{ matrix.java }} | |
distribution: temurin | |
architecture: x64 | |
cache: maven | |
- name: Build project | |
run: ./mvnw verify -Pintegration -Pjava${{ matrix.java }} | |
j9-supported: | |
name: Any (supported) | |
strategy: | |
fail-fast: false | |
matrix: | |
os: [ ubuntu-24.04, macos-14, windows-2022 ] | |
java: [ 8, 11 ] | |
runs-on: ${{ matrix.os }} | |
needs: [ extended ] | |
steps: | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: ${{ matrix.java }} | |
distribution: adopt-openj9 | |
architecture: x64 | |
cache: maven | |
- name: Build project | |
run: ./mvnw verify -Pintegration -Pjava${{ matrix.java }} | |
hotspot-unsupported: | |
name: HotSpot (unsupported) | |
strategy: | |
fail-fast: false | |
matrix: | |
java: [ 9, 10, 12, 13, 14, 15, 16, 18, 19, 20, 22, 23 ] | |
runs-on: ubuntu-24.04 | |
needs: [ extended ] | |
steps: | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: ${{ matrix.java }} | |
distribution: zulu | |
architecture: x64 | |
cache: maven | |
- name: Build project | |
run: ./mvnw verify -Pintegration -Pjava${{ matrix.java }} | |
hotspot-32: | |
name: HotSpot (32 bit) | |
strategy: | |
fail-fast: false | |
matrix: | |
os: [ ubuntu-24.04, windows-2022 ] | |
java: [ 8 ] | |
runs-on: ${{ matrix.os }} | |
needs: [ extended ] | |
steps: | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: ${{ matrix.java }} | |
distribution: zulu | |
architecture: x86 | |
cache: maven | |
- name: Build project | |
run: ./mvnw verify -Pintegration -Pjava${{ matrix.java }} | |
hotspot-legacy: | |
name: HotSpot (legacy) | |
strategy: | |
fail-fast: false | |
matrix: | |
java: [ 6, 7 ] | |
runs-on: ubuntu-24.04 | |
needs: [ extended ] | |
steps: | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 | |
with: | |
path: ~/.m2/repository | |
key: ${{ runner.os }}-legacy-maven-${{ hashFiles('**/pom.xml') }} | |
restore-keys: ${{ runner.os }}-legacy-maven- | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: ${{ matrix.java }} | |
distribution: zulu | |
architecture: x64 | |
- name: Build project | |
run: ./mvnw -s .mvn/nossl.settings.xml verify -Pintegration -Pjava${{ matrix.java }} | |
extended: | |
name: Extended build | |
runs-on: ubuntu-24.04 | |
if: github.event_name == 'push' | |
steps: | |
- uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # V2.8.1 | |
with: | |
egress-policy: block | |
disable-telemetry: true | |
allowed-endpoints: > | |
coveralls.io:443 | |
dl.google.com:443 | |
docs.gradle.org:443 | |
docs.oracle.com:443 | |
github.com:443 | |
javadoc.io:443 | |
jcenter.bintray.com:443 | |
objects.githubusercontent.com:443 | |
plugins-artifacts.gradle.org:443 | |
plugins.gradle.org:443 | |
raw.githubusercontent.com:443 | |
repo.gradle.org:443 | |
repo.maven.apache.org:443 | |
repository.sonatype.org:443 | |
services.gradle.org:443 | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: 8 | |
distribution: temurin | |
architecture: x64 | |
cache: maven | |
- name: Build project | |
run: ./mvnw jacoco:prepare-agent verify jacoco:report coveralls:report -DrepoToken=${{ secrets.coveralls }} -Pextras -Pchecks -Panalysis -Pintegration -Pmulti-release -Pchecksum-enforce | |
release: | |
name: Release new version | |
runs-on: ubuntu-24.04 | |
needs: [ extended, hotspot-ea, hotspot-supported, j9-supported, hotspot-unsupported, hotspot-32, hotspot-legacy ] | |
if: github.event_name == 'push' && startsWith(github.event.head_commit.message, '[release]') | |
permissions: | |
contents: write | |
steps: | |
- uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # V2.8.1 | |
with: | |
egress-policy: audit # servers have changed, must be adjusted after next release | |
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3 | |
- uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2 | |
with: | |
java-version: 8 | |
distribution: temurin | |
architecture: x64 | |
gpg-private-key: ${{ secrets.gpg_secret }} | |
- name: Publish new version | |
run: | | |
git config user.name "${{ github.event.head_commit.committer.name }}" | |
git config user.email "${{ github.event.head_commit.committer.email }}" | |
./mvnw -B -s .mvn/release.settings.xml release:prepare release:perform -Drepository.url=https://${{ github.actor }}:${{ secrets.github_token }}@github.com/${{ github.repository }}.git -Dcentral.username=${{ secrets.central_user }} -Dcentral.password=${{ secrets.central_password }} -Dgpg.passphrase=${{ secrets.gpg_passphrase }} -Dgpg.keyname=B4AC8CDC141AF0AE468D16921DA784CCB5C46DD5 -Dgradle.key=${{ secrets.gradle_key }} -Dgradle.secret=${{ secrets.gradle_secret }} -Pchecksum-enforce |