ci.yml

name: CI

on:
  merge_group:
  pull_request:
  schedule:
    - cron: "0 3 * * tue"
  workflow_dispatch:

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always

permissions:
  contents: read

jobs:
  check-up-to-dateness:
    outputs:
      is-up-to-date: ${{ steps.main.outputs.is-up-to-date }}

    runs-on: ubuntu-latest

    steps:
      - id: main
        uses: trailofbits/check-up-to-dateness@v2

  test:
    needs: [check-up-to-dateness]

    if: needs.check-up-to-dateness.outputs.is-up-to-date != 'true'

    strategy:
      fail-fast: ${{ github.event_name == 'merge_group' }}
      matrix:
        environment: [ubuntu-latest, macos-latest]
        anchor-version: [0.32.1]

    runs-on: ${{ matrix.environment }}

    defaults:
      run:
        shell: bash

    env:
      GROUP_RUNNER: target.'cfg(all())'.runner = 'group-runner'

    steps:
      - name: Free up space on Ubuntu
        if: ${{ matrix.environment == 'ubuntu-latest' }}
        run: |
          # https://github.com/actions/runner-images/issues/2606#issuecomment-772683150
          # du -sh /usr/*/* 2>/dev/null | sort -h || true
          sudo rm -rfv /usr/lib/google-cloud-sdk | grep . >/dev/null
          sudo rm -rfv /usr/lib/jvm              | grep . >/dev/null
          sudo rm -rfv /usr/local/julia*         | grep . >/dev/null
          sudo rm -rfv /usr/share/az_*           | grep . >/dev/null
          sudo rm -rfv /usr/share/dotnet         | grep . >/dev/null
          sudo rm -rfv /usr/share/miniconda      | grep . >/dev/null
          sudo rm -rfv /usr/share/swift          | grep . >/dev/null

      - name: Free up space on macOS
        if: ${{ matrix.environment == 'macos-latest' }}
        run: |
          # https://github.com/actions/runner-images/issues/2840#issuecomment-2334584217
          # du -sh /*/* 2>/dev/null | sort -h || true
          echo /Applications/Xcode* | sort | head -n1 | xargs rm -rfv | grep . >/dev/null

      - uses: actions/checkout@v7

      - uses: actions/cache@v6
        with:
          key: ${{ runner.os }}-cargo-${{ hashFiles('Cargo.lock') }}
          path: |
            ~/.avm
            ~/.cargo/bin/
            ~/.cargo/registry/index/
            ~/.cargo/registry/cache/
            ~/.cargo/git/db/
            ~/.dylint_drivers/
            ~/.rustup/toolchains/
            target/dylint/

      - name: Rustup
        run: rustup update

      - name: Install Anchor prerequisites on Ubuntu
        if: ${{ matrix.environment == 'ubuntu-latest' }}
        run: |
          sudo apt update
          sudo apt install libudev-dev

      - name: Install Anchor prerequisites on macOS
        if: ${{ matrix.environment == 'macos-latest' }}
        run: |
          brew install coreutils llvm protobuf
          # smoelius: ~/lib is one of the directories `librocksdb-sys`'s build script checks
          # for libclang.dylib.
          mkdir ~/lib
          ln -s /opt/homebrew/opt/llvm/lib/libclang.dylib ~/lib/libclang.dylib

      # smoelius: https://www.anchor-lang.com/docs/installation
      - name: Install Anchor
        run: |
          mkdir ~/.config/solana
          cp etc/rfc8032_test_vector.json ~/.config/solana/id.json
          if [[ "$(anchor --version)" != 'anchor-cli ${{ matrix.anchor-version }}' ]]; then
            cargo install --git https://github.com/coral-xyz/anchor --tag v${{ matrix.anchor-version }} anchor-cli --force
          fi

      - uses: taiki-e/install-action@v2
        with:
          tool: cargo-hack, cargo-udeps

      - name: Install CI tools
        run: |
          rustup +nightly component add clippy rustfmt
          cargo install cargo-dylint dylint-link || true
          cargo install group-runner             || true

      - name: Build
        run: cargo build

      - name: Sanity test fixtures
        run: scripts/anchor_test_fixtures.sh

      - name: Test
        run: |
          cargo test --config "$GROUP_RUNNER"

  all-checks:
    needs: [test]

    # smoelius: From "Defining prerequisite jobs"
    # (https://docs.github.com/en/actions/using-jobs/using-jobs-in-a-workflow#defining-prerequisite-jobs):
    # > If you would like a job to run even if a job it is dependent on did not succeed, use the
    # > `always()` conditional expression in `jobs.<job_id>.if`.
    if: ${{ always() }}

    runs-on: ubuntu-latest

    steps:
      - name: Check results
        if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}
        run: exit 1