test-formula.yml

name: Test Formula

on:
  pull_request:
    paths:
      - 'Formula/*.rb'
      - '.github/workflows/test-formula.yml'
  workflow_dispatch:

jobs:
  test:
    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, ubuntu-latest]
        formula: [denvig, denvig-alpha]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4

      - name: Set up Homebrew
        uses: Homebrew/actions/setup-homebrew@master

      # Homebrew 6.0 sandboxes Linux source builds with Bubblewrap and aborts when a
      # rootless `bwrap` cannot run. The ubuntu-latest image doesn't ship bwrap, and
      # Ubuntu 24.04 also blocks unprivileged user namespaces via AppArmor — both must
      # be addressed before `brew install`. Install the system package, then relax the
      # namespace restrictions so rootless Bubblewrap can create its sandbox.
      - name: Enable Bubblewrap sandbox (Linux)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update && sudo apt-get install -y bubblewrap
          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 || true
          sudo sysctl -w kernel.unprivileged_userns_clone=1 || true

      - name: Audit formula
        run: brew audit --strict ${{ matrix.formula }}

      - name: Install formula
        run: brew install --build-from-source ${{ matrix.formula }}

      - name: Test formula
        run: brew test ${{ matrix.formula }}

      - name: Verify installed binary
        run: |
          # denvig-alpha is keg-only, so resolve the binary via its opt prefix
          # rather than relying on it being symlinked onto PATH.
          BIN="$(brew --prefix ${{ matrix.formula }})/bin/denvig"
          EXPECTED=$(sed -nE 's#.*/denvig-([^"/]+)\.tgz".*#\1#p' "Formula/${{ matrix.formula }}.rb" | head -1)
          echo "Expecting version: $EXPECTED"
          ACTUAL="$("$BIN" --version)"
          echo "denvig --version -> $ACTUAL"
          echo "$ACTUAL" | grep -qF "$EXPECTED"