ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  schedule:
    - cron: "30 2 * * *"

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

env:
  GOWORK: "off"

jobs:
  changes:
    runs-on: ubuntu-latest
    outputs:
      quality_ci: ${{ steps.filter.outputs.quality_ci }}
      docker_ci: ${{ steps.filter.outputs.docker_ci }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Detect changed paths
        id: filter
        uses: dorny/paths-filter@v4
        with:
          filters: |
            quality_ci:
              - '**/*.go'
              - 'go.mod'
              - 'go.sum'
              - '.golangci.yml'
              - '.mise.toml'
              - 'README.md'
              - 'CONTEXT.md'
              - 'docs/**'
              - 'examples/**'
              - 'e2e/**'
              - 'internal/service/scaffold/templates/**'
              - '.github/workflows/**'
              - '.github/scripts/**'
            docker_ci:
              - 'Dockerfile'
              - '.dockerignore'

  linux:
    name: quality (Linux)
    needs: changes
    if: needs.changes.outputs.quality_ci == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
          cache: true
          cache-dependency-path: |
            go.sum
            examples/orders-api/go.sum
      - name: Set up project tools
        uses: jdx/mise-action@v4
        with:
          cache: true
          install: true
          github_token: ${{ github.token }}
      - name: Run check
        run: MISE_JOBS=1 mise run check:core

  lint:
    name: lint (Linux)
    needs: changes
    if: needs.changes.outputs.quality_ci == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
          cache: true
          cache-dependency-path: |
            go.sum
            examples/orders-api/go.sum
      - name: Set up project tools
        uses: jdx/mise-action@v4
        with:
          cache: true
          install: true
          github_token: ${{ github.token }}
      - name: Cache golangci-lint analysis
        uses: actions/cache@v5
        with:
          path: ~/.cache/golangci-lint
          key: golangci-lint-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('.mise.toml', '.golangci.yml', 'go.mod', 'go.sum') }}
          restore-keys: |
            golangci-lint-${{ runner.os }}-${{ runner.arch }}-
      - name: Run lint
        run: mise run lint

  e2e:
    name: e2e (Linux)
    needs: changes
    if: needs.changes.outputs.quality_ci == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
          cache: true
          cache-dependency-path: |
            go.sum
            examples/orders-api/go.sum
      - name: Set up project tools
        uses: jdx/mise-action@v4
        with:
          cache: true
          install: true
          github_token: ${{ github.token }}
      - name: Run e2e
        run: mise run e2e

  race:
    name: race (Linux)
    if: github.event_name == 'schedule' || (github.event_name == 'push' && github.ref == 'refs/heads/main')
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
          cache: true
          cache-dependency-path: |
            go.sum
            examples/orders-api/go.sum
      - name: Run race tests
        run: GOWORK=off go test -race ./...

  docker:
    name: docker (linux/amd64)
    needs: changes
    if: needs.changes.outputs.docker_ci == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4
      - name: Build Docker image
        uses: docker/build-push-action@v7
        with:
          context: .
          platforms: linux/amd64
          load: true
          push: false
          tags: devctl:ci
          build-args: |
            VERSION=ci
            COMMIT=${{ github.sha }}
          cache-from: type=gha,scope=docker-amd64
          cache-to: type=gha,scope=docker-amd64,mode=max
          provenance: false
      - name: Verify image metadata
        env:
          EXPECTED_COMMIT: ${{ github.sha }}
        run: |
          set -euo pipefail
          version_output="$(docker run --rm --platform linux/amd64 devctl:ci --version)"
          grep -Fqx "devctl version ci" <<< "${version_output}"
          grep -Fqx "commit: ${EXPECTED_COMMIT}" <<< "${version_output}"
      - name: Verify project runner tools
        run: |
          set -euo pipefail
          docker run --rm --platform linux/amd64 --entrypoint sh devctl:ci -ceu '
            test -x /devctl
            command -v devctl
            go version
            git --version
            node --version | grep -E "^v24\\."
            quicktype --version
          '

  release-helper:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set up Python
        uses: actions/setup-python@v6
        with:
          python-version: "3.11"
      - name: Run release helper tests
        run: python3 -B -m unittest discover -s .github/scripts/tests -t .github/scripts