🔥 feat: Harden proxy middleware #8290
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - "**/*.md" | |
| pull_request: | |
| paths-ignore: | |
| - "**/*.md" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} | |
| cancel-in-progress: ${{ github.event_name == 'pull_request' }} | |
| permissions: | |
| # deployments permission to deploy GitHub pages website | |
| deployments: write | |
| # contents permission to update benchmark contents in gh-pages branch | |
| contents: write | |
| # allow posting comments to pull request | |
| pull-requests: write | |
| name: Benchmark | |
| jobs: | |
| Compare: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| steps: | |
| - name: Fetch Repository | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| fetch-depth: 0 # to be able to retrieve the last commit in main | |
| - name: Install Go | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| # NOTE: Keep this in sync with the version from go.mod | |
| go-version: "1.25.x" | |
| - name: Run Benchmark | |
| run: set -o pipefail; go test ./... -benchmem -run=^$ -bench . | tee output.txt | |
| - name: Remove _Parallel Benchmarks | |
| run: | | |
| awk '!/^Benchmark.*_Parallel/' output.txt > output_filtered.txt | |
| mv output_filtered.txt output.txt | |
| # NOTE: Benchmarks could change with different CPU types | |
| - name: Get GitHub Runner System Information | |
| uses: kenchan0130/actions-system-info@59699597e84e80085a750998045983daa49274c4 # v1.4.0 | |
| id: system-info | |
| - name: Get Main branch SHA | |
| id: get-main-branch-sha | |
| run: | | |
| SHA=$(git rev-parse origin/main) | |
| echo "sha=$SHA" >> $GITHUB_OUTPUT | |
| - name: Get Benchmark Results from main branch | |
| id: cache | |
| uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| with: | |
| path: ./cache | |
| key: ${{ steps.get-main-branch-sha.outputs.sha }}-${{ runner.os }}-${{ steps.system-info.outputs.cpu-model }}-benchmark | |
| # This will only run if we have Benchmark Results from main branch | |
| - name: Compare PR Benchmark Results with main branch | |
| uses: benchmark-action/github-action-benchmark@52576c92bccf6ac60c8223ec7eb2565637cae9ba # v1.22.1 | |
| if: steps.cache.outputs.cache-hit == 'true' | |
| with: | |
| tool: 'go' | |
| output-file-path: output.txt | |
| external-data-json-path: ./cache/benchmark-data.json | |
| # Do not save the data (This allows comparing benchmarks) | |
| save-data-file: false | |
| fail-on-alert: true | |
| # Comment on the PR if the branch is not a fork | |
| comment-on-alert: ${{ github.event.pull_request.head.repo.fork == false }} | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| summary-always: true | |
| alert-threshold: "150%" | |
| go-force-package-suffix: true | |
| - name: Store Benchmark Results for main branch | |
| uses: benchmark-action/github-action-benchmark@52576c92bccf6ac60c8223ec7eb2565637cae9ba # v1.22.1 | |
| if: ${{ github.ref_name == 'main' }} | |
| with: | |
| tool: 'go' | |
| output-file-path: output.txt | |
| external-data-json-path: ./cache/benchmark-data.json | |
| # Save the data to external file (cache) | |
| save-data-file: true | |
| fail-on-alert: false | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| summary-always: true | |
| alert-threshold: "150%" | |
| go-force-package-suffix: true | |
| - name: Publish Benchmark Results to GitHub Pages | |
| uses: benchmark-action/github-action-benchmark@52576c92bccf6ac60c8223ec7eb2565637cae9ba # v1.22.1 | |
| if: ${{ github.ref_name == 'main' }} | |
| with: | |
| tool: 'go' | |
| output-file-path: output.txt | |
| benchmark-data-dir-path: "benchmarks" | |
| fail-on-alert: false | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| comment-on-alert: true | |
| summary-always: true | |
| # Save the data to external file (GitHub Pages) | |
| save-data-file: true | |
| # Cap history kept in benchmarks/data.js so the file stays below GitHub's | |
| # 100 MB per-file push limit (the action never prunes by default). | |
| # 185 runs ~= the last 3 months of main pushes (count-based, not time-based). | |
| max-items-in-chart: 185 | |
| alert-threshold: "150%" | |
| auto-push: ${{ github.event_name == 'push' || github.event_name == 'workflow_dispatch' }} | |
| go-force-package-suffix: true | |
| - name: Update Benchmark Results cache | |
| uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| if: ${{ github.ref_name == 'main' }} | |
| with: | |
| path: ./cache | |
| key: ${{ steps.get-main-branch-sha.outputs.sha }}-${{ runner.os }}-${{ steps.system-info.outputs.cpu-model }}-benchmark |