fix(deps): update all go dependencies main #1688
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: BPF Checks | |
| # Any change in triggers needs to be reflected in the concurrency group. | |
| on: | |
| pull_request: {} | |
| push: | |
| branches: | |
| - main | |
| - ft/main/** | |
| merge_group: | |
| types: [checks_requested] | |
| permissions: read-all | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.event.after || github.event.merge_group && github.run_id }} | |
| cancel-in-progress: ${{ !github.event.merge_group }} | |
| jobs: | |
| check_changes: | |
| name: Deduce required tests from code changes | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| bpf-tree: ${{ steps.changes.outputs.bpf-tree }} | |
| coccinelle: ${{ steps.changes.outputs.coccinelle }} | |
| bpf-tests-runner: ${{ steps.changes.outputs.bpf-tests-runner }} | |
| workflow-description: ${{ steps.changes.outputs.workflow-description }} | |
| steps: | |
| - name: Checkout code | |
| if: ${{ !github.event.pull_request }} | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Check code changes | |
| uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3 | |
| id: changes | |
| with: | |
| # For `push` events, compare against the `ref` base branch | |
| # For `pull_request` events, this is ignored and will compare against the pull request base branch | |
| base: ${{ github.ref }} | |
| filters: | | |
| bpf-tree: | |
| - '!(**/*.md)bpf/**' | |
| - '!(**/*.md)images/**' | |
| - 'Makefile*' | |
| - 'contrib/scripts/builder.sh' | |
| coccinelle: | |
| - 'contrib/coccinelle/**' | |
| bpf-tests-runner: | |
| - '!(**/*.md)bpf/tests/bpftest/**' | |
| - '!(**/*.md)pkg/bpf/**' | |
| workflow-description: | |
| - '.github/workflows/lint-bpf-checks.yaml' | |
| checkpatch: | |
| name: Check Patch | |
| runs-on: ubuntu-24.04 | |
| if: ${{ github.event_name == 'pull_request' }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Run checkpatch.pl | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| make -C bpf checkpatch || (echo "Run 'make -C bpf checkpatch' locally to investigate reports"; exit 1) | |
| - name: Validate authors | |
| run: | | |
| commits=$(git log ${{ github.event.pull_request.base.sha }}..${{ github.event.pull_request.head.sha }}) | |
| if echo "$commits" \ | |
| | grep -v -e 'renovate\[bot\]' -e 'noreply@cilium.io' \ | |
| | grep 'Signed-off-by:.*noreply.*'; \ | |
| then | |
| echo "Please use a real email address for your Signed-off-by." | |
| exit 1 | |
| fi | |
| if echo "$commits" \ | |
| | grep -v -e 'renovate\[bot\]' -e 'noreply@cilium.io' \ | |
| | grep -i 'author.*noreply.*'; \ | |
| then | |
| echo "Please use a real email address for all authors. Generative AI tools can not author or sign off contributions." | |
| exit 1 | |
| fi | |
| # Runs only if code under bpf/ or contrib/coccinnelle/ is changed. | |
| coccicheck: | |
| needs: check_changes | |
| if: ${{ needs.check_changes.outputs.bpf-tree == 'true' || needs.check_changes.outputs.coccinelle == 'true' || needs.check_changes.outputs.workflow-description == 'true' }} | |
| name: Run coccicheck | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run coccicheck | |
| uses: docker://cilium/coccicheck:2.4@sha256:24abe3fbb8e829fa41a68a3b76cb4df84fd5a87a7d1d6254c1c1fe5effb5bd1b | |
| with: | |
| entrypoint: ./contrib/coccinelle/check-cocci.sh | |
| # Note: Setting COCCINELLE_HOME can be removed, here and in the | |
| # messages in the .cocci files, next time we upgrade coccinelle. | |
| # The issue was fixed, after v1.1.1 that we're using, in | |
| # https://gitlab.inria.fr/coccinelle/coccinelle/-/commit/540888ff426e. | |
| env: | |
| COCCINELLE_HOME: /usr/local/lib/coccinelle | |
| # Runs only if code under bpf/ is changed. | |
| build_all: | |
| needs: [check_changes] | |
| if: ${{ needs.check_changes.outputs.bpf-tree == 'true' || needs.check_changes.outputs.workflow-description == 'true' }} | |
| name: Build Datapath | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Build all BPF datapath permutations | |
| env: | |
| V: 0 | |
| run: | | |
| contrib/scripts/builder.sh make --quiet -C bpf build_all -j "$(nproc)" || (echo "Run 'make -C bpf build_all' locally to investigate build breakages"; exit 1) | |
| bpf_tests: | |
| needs: [check_changes] | |
| if: ${{ needs.check_changes.outputs.bpf-tree == 'true' || needs.check_changes.outputs.bpf-tests-runner == 'true' || needs.check_changes.outputs.workflow-description == 'true' }} | |
| name: BPF unit/integration Tests | |
| env: | |
| # GitHub doesn't provide a way to retrieve the name of a job, so we have | |
| # to repeated it here. | |
| job_name: "bpf_tests" | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: Install Go | |
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 | |
| with: | |
| # renovate: datasource=golang-version depName=go | |
| go-version: 1.26.5 | |
| - name: Install Scapy (trace_diff_pkts.py) | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install --yes --no-install-recommends python3-scapy | |
| - name: Install tparse and go-junit-report | |
| timeout-minutes: 15 | |
| run: | | |
| # renovate: datasource=github-releases depName=mfridman/tparse | |
| go install github.com/mfridman/tparse@baf229e8494613f134bc0e1f4cb9dc9b12f66442 # v0.14.0 | |
| # renovate: datasource=github-releases depName=cilium/go-junit-report/v2/cmd/go-junit-report | |
| go install github.com/cilium/go-junit-report/v2/cmd/go-junit-report@4cdc5c96cb4e406fccf943536b5bfcae7a0fb826 # v2.3.1 | |
| - name: Run BPF tests | |
| id: run-tests | |
| run: | | |
| make run_bpf_tests \ | |
| -j "$(nproc)" \ | |
| LOG_CODEOWNERS=1 \ | |
| JUNIT_PATH="test/${{ env.job_name }}.xml" \ | |
| || (echo "Run 'make run_bpf_tests' locally to investigate failures"; exit 1) | |
| - name: Fetch JUnits | |
| if: ${{ always() && steps.run-tests.outcome != 'skipped' }} | |
| shell: bash | |
| run: | | |
| mkdir -p cilium-junits | |
| cd test/ | |
| # junit_filename needs to be the same as the Job Name presented on the | |
| # GH web UI - In the Summary page of a workflow run, left column | |
| # "Jobs" - so that we can map the junit file to the right job - step | |
| # pair on datastudio. | |
| junit_filename="${{ env.job_name }}.xml" | |
| for filename in *.xml; do cp "${filename}" "../cilium-junits/${junit_filename}"; done; | |
| - name: Upload JUnits [junit] | |
| if: ${{ always() && steps.run-tests.outcome != 'skipped' }} | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: cilium-junits | |
| path: cilium-junits/*.xml | |
| - name: Publish Test Results As GitHub Summary | |
| if: ${{ always() && runner.arch != 'ARM64' }} | |
| uses: aanm/junit2md@332ebf0fddd34e91b03a832cfafaa826306558f9 # v0.0.3 | |
| with: | |
| junit-directory: "cilium-junits" |