platform.yml

name: Platform

on:
  pull_request:
  push:
    branches: [master, mq-working-branch-master-*]
  schedule:
    - cron: 0 4 * * *
  workflow_dispatch:
    inputs:
      latest-version:
        description: "Node version to use"
        required: false
        type: string

concurrency:
  group: ${{ github.workflow }}-${{ inputs.latest-version }}-${{ github.ref || github.run_id }}
  cancel-in-progress: true

env:
  MOCHA_OPTIONS: ${{ github.ref == 'refs/heads/master' && '--retries 1' || '' }}
  LATEST_VERSION: ${{ inputs.latest-version }}

# TODO: upstream jobs

jobs:
  package-manager:
    strategy:
      fail-fast: false
      matrix:
        manager:
          - name: npm
            install: npm install
          - name: pnpm
            install: pnpm add
          - name: yarn
            install: yarn add
          - name: yarn-berry
            install: (command -v corepack >/dev/null 2>&1 || npm install -g corepack) && yarn set version stable && yarn config set nodeLinker node-modules && yarn add
          - name: bun
            install: bun add
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/node/active-lts
      - uses: ./.github/actions/install
      - run: FILENAME=$(npm pack --silent --pack-destination /tmp) && mv /tmp/$FILENAME /tmp/dd-trace.tgz
      - run: mkdir -p /tmp/app
      - run: npm i -g pnpm
        if: matrix.manager.name == 'pnpm'
      - run: cd /tmp/app && ${{ matrix.manager.install }} /tmp/dd-trace.tgz
      - run: echo "require('dd-trace').init()" >> /tmp/app/index.js
      - run: node /tmp/app

  bun-pack:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/node/active-lts
      - uses: ./.github/actions/install
      - run: mkdir npm bun
      - run: FILENAME=$(npm pack --silent) && tar -zxf $FILENAME -C npm
      - run: ./node_modules/.bin/bun pm pack --gzip-level 0 --filename bun.tgz && tar -zxf bun.tgz -C bun
      - run: diff -r npm bun

  bun-runtime:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/active-lts
      - uses: ./.github/actions/install
      - run: yarn test:integration:bun
      - uses: DataDog/junit-upload-github-action@24449d01fc01e721fa36ccd2caa3caae6922f0e8  # v3.0.0
        if: always() && github.actor != 'dependabot[bot]'
        with:
          api_key: ${{ steps.dd-sts.outputs.api_key }}
          service: dd-trace-js-tests

  core:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/oldest-maintenance-lts
      - uses: ./.github/actions/install
      - run: yarn test:core:ci
      - uses: ./.github/actions/node/latest
      - run: yarn test:core:ci
      - uses: ./.github/actions/coverage
        with:
          flags: platform-core
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  dd-trace-api:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: dd-trace-api
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/plugins/test

  esbuild:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/oldest-maintenance-lts
      - uses: ./.github/actions/install
      - run: yarn test:esbuild:ci
      - uses: ./.github/actions/node/latest
      - run: yarn test:esbuild:ci
      - uses: ./.github/actions/coverage
        with:
          flags: platform-esbuild
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  webpack:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/oldest-maintenance-lts
      - uses: ./.github/actions/install
      - run: yarn test:webpack:ci
      - uses: ./.github/actions/node/latest
      - run: yarn test:webpack:ci
      - uses: ./.github/actions/coverage
        with:
          flags: platform-webpack
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  instrumentation-bluebird:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: bluebird
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-body-parser:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: body-parser
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-child_process:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: child_process
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-cookie-parser:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: cookie-parser
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-express-mongo-sanitize:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    services:
      mongodb:
        image: circleci/mongo
        ports:
          - 27017:27017
    env:
      PLUGINS: express-mongo-sanitize
      SERVICES: mongo
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-express-session:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: express-session
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-express:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: express
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-fs:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: fs
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-generic-pool:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: generic-pool
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  # TODO: Retries below work around a flaky bug in Node.js http code. Revert to using
  # ./.github/actions/instrumentations/test once fixed upstream.
  instrumentation-http:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: http
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/oldest-maintenance-lts
      - uses: ./.github/actions/install
      - name: Run instrumentation tests (oldest-maintenance, with retries)
        uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0
        with:
          max_attempts: 5
          timeout_minutes: 15
          retry_wait_seconds: 20
          command: yarn test:instrumentations:ci
      - uses: ./.github/actions/node/latest
      - name: Run instrumentation tests (latest, with retries)
        uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0
        with:
          max_attempts: 5
          timeout_minutes: 15
          retry_wait_seconds: 20
          command: yarn test:instrumentations:ci
      - uses: ./.github/actions/coverage
        with:
          flags: instrumentations-${{ github.job }}
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  instrumentation-knex:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: knex
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-mongoose:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    services:
      mongodb:
        image: circleci/mongo
        ports:
          - 27017:27017
    env:
      PLUGINS: mongoose
      SERVICES: mongo
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-multer:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: multer
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-mysql2:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    services:
      mysql:
        image: mariadb:10.4
        env:
          MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
          MYSQL_DATABASE: "db"
        ports:
          - 3306:3306
    env:
      PLUGINS: mysql2
      SERVICES: mysql2
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-passport:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: passport
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-passport-http:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: passport-http
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-passport-local:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: passport-local
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-pg:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    services:
      postgres:
        image: postgres:9.5
        env:
          POSTGRES_PASSWORD: postgres
        ports:
          - 5432:5432
    env:
      PG_TEST_NATIVE: "true"
      PLUGINS: pg
      SERVICES: postgres
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-promise-js:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: promise-js
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-promise:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: promise
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-q:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: q
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-url:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: url
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentation-when:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    env:
      PLUGINS: when
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/instrumentations/test

  instrumentations-misc:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/testagent/start
      - uses: ./.github/actions/node/oldest-maintenance-lts
      - uses: ./.github/actions/install
      - run: yarn test:instrumentations:misc:ci
        shell: bash
      - uses: ./.github/actions/node/newest-maintenance-lts
      - run: yarn test:instrumentations:misc:ci
        shell: bash
      - uses: ./.github/actions/node/active-lts
      - run: yarn test:instrumentations:misc:ci
        shell: bash
      - uses: ./.github/actions/node/latest
      - run: yarn test:instrumentations:misc:ci
        shell: bash
      - uses: ./.github/actions/coverage
        with:
          flags: platform-instrumentations-misc
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
      - if: always()
        uses: ./.github/actions/testagent/logs
        with:
          suffix: test-${{ github.job }}
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  # TODO: Split this up as it runs tests for multiple different teams.
  integration:
    strategy:
      # when one version fails, say 14, all the other versions are stopped
      # setting fail-fast to false in an attempt to prevent this from happening
      fail-fast: false
      matrix:
        version: [oldest, maintenance, active, latest]
    name: ${{ github.workflow }} / integration (node-${{ matrix.version }})
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/testagent/start
      - uses: ./.github/actions/node
        with:
          version: ${{ matrix.version }}
      # Disable core dumps since some integration tests intentionally abort and core dump generation takes around 5-10s
      - uses: ./.github/actions/install
      - run: sudo sysctl -w kernel.core_pattern='|/bin/false'
      - run: yarn test:integration
      - run: yarn test:integration:esbuild
      - run: yarn test:integration:webpack
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  unit-guardrails:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/latest
      - uses: ./.github/actions/install
      - run: yarn test:trace:guardrails:ci
      - uses: ./.github/actions/coverage
        with:
          flags: platform-unit-guardrails
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  # We'll run these separately for earlier (i.e. unsupported) versions
  integration-guardrails:
    strategy:
      fail-fast: false
      matrix:
        version: [16.0.0, 18.0.0, 20.0.0, 22.0.0, 24.0.0, 25]
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/active-lts
      - uses: ./.github/actions/install
      - run: bun add --ignore-scripts mocha@10 # Use older mocha to support old Node.js versions
      - run: bun add --ignore-scripts express@4 # Use older express to support old Node.js versions
      - uses: ./.github/actions/node
        with:
          version: ${{ matrix.version }}
      - run: node node_modules/.bin/mocha --colors --timeout 30000 integration-tests/init.spec.js
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}

  integration-guardrails-unsupported:
    strategy:
      fail-fast: false
      matrix:
        version:
          ["0.8", "0.10", "0.12", "4", "6", "8", "10", "12", "14.0.0", "14"]
    runs-on: ubuntu-latest
    env:
      DD_TRACE_DEBUG: "true" # This exercises more of the guardrails code
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/node
        with:
          version: ${{ matrix.version }}
      - run: node ./init
      - run: node ./init
        env:
          DD_INJECTION_ENABLED: "true"

  shimmer:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: ./.github/actions/dd-sts-api-key
        id: dd-sts
      - uses: ./.github/actions/node/oldest-maintenance-lts
      - uses: ./.github/actions/install
      - run: yarn test:shimmer:ci
      - uses: ./.github/actions/node/latest
      - run: yarn test:shimmer:ci
      - uses: ./.github/actions/coverage
        with:
          flags: platform-shimmer
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
      - uses: ./.github/actions/push_to_test_optimization
        if: "!cancelled()"
        with:
          dd_api_key: ${{ steps.dd-sts.outputs.api_key }}