Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/bench.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
GH_PAGES_BRANCH: benchmark-pages

steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v6

- uses: cachix/install-nix-action@v31
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/gh-pages.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ jobs:
url: ${{ steps.deployment.outputs.page_url }}

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Install Haskell
uses: input-output-hk/setup-haskell@v1
Expand Down
66 changes: 32 additions & 34 deletions .github/workflows/haskell.yml
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@
shell: bash

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Free up disk space
run: |
Expand Down Expand Up @@ -126,7 +126,7 @@
| tee dependencies.txt

- name: Restore cache
uses: actions/cache/restore@v4
uses: actions/cache/restore@v5
id: restore-cabal-cache
env:
cache-name: cache-cabal-build
Expand Down Expand Up @@ -158,7 +158,7 @@
# Save the cache of built dependencies early, so that it is available for
# the next GHA run if the Build step fails.
- name: Save cache
uses: actions/cache/save@v4
uses: actions/cache/save@v5
id: save-cabal-cache
# Note: cache-hit will be set to true only when cache hit occurs for the
# exact key match. For a partial key match via restore-keys or a cache
Expand All @@ -177,9 +177,7 @@
# default format uses a one-second resolution for timestamps
run: tar --use-compress-program zstdmt --format posix --exclude-vcs -cf /var/tmp/state.tzst . && mv /var/tmp/state.tzst .
- name: Upload working directory archive
# upload-artifact is pinned to avoid a bug in download-artifact
# See https://github.com/actions/download-artifact/issues/328
uses: actions/upload-artifact@v4.2.0
uses: actions/upload-artifact@v7
with:
name: state-${{ matrix.ghc }}-${{ matrix.os }}
path: state.tzst
Expand Down Expand Up @@ -296,7 +294,7 @@

# Retrieve working directory from build jobs
- name: Download working directory archive
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
name: state-${{ matrix.ghc }}-${{ matrix.os }}

Expand All @@ -314,7 +312,7 @@
./scripts/file-not-null.sh dependencies.txt

- name: Restore cache
uses: actions/cache/restore@v4
uses: actions/cache/restore@v5
id: restore-cabal-cache
env:
cache-name: cache-cabal-build
Expand Down Expand Up @@ -367,7 +365,7 @@
fail-fast: false

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Install fourmolu
run: |
Expand All @@ -385,7 +383,7 @@
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Install shellcheck
run: |
Expand Down Expand Up @@ -421,7 +419,7 @@
shell: bash

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Free up disk space
run: |
Expand Down Expand Up @@ -456,7 +454,7 @@

# Retrieve working directory from build jobs
- name: Download working directory archive
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
name: state-${{ env.ghc-version }}-${{ env.os }}

Expand All @@ -474,7 +472,7 @@
./scripts/file-not-null.sh dependencies.txt

- name: Restore cache
uses: actions/cache/restore@v4
uses: actions/cache/restore@v5
id: restore-cabal-cache
env:
cache-name: cache-cabal-build
Expand All @@ -501,57 +499,57 @@
fail-fast: false

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- uses: tfausak/cabal-gild-setup-action@v2
with:
version: 1.5.0.1
- name: Format all cabal files
run: ./scripts/cabal-format.sh check

gen-hie:
name: Generate HIE files
runs-on: ubuntu-latest

defaults:
run:
shell: bash

strategy:
fail-fast: false

steps:
- name: Set up installation directory
run: |
BINDIR=$HOME/.local/bin
echo "bindir=$BINDIR" >> "$GITHUB_ENV"
echo "$BINDIR" >> "$GITHUB_PATH"

- name: Cache implicit-hie executable (gen-hie)
id: cache-gen-hie
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: |
~/.cabal/bin/gen-hie
path: ${{ env.bindir }}/gen-hie
key: ${{ runner.os }}-cache-gen-hie

- name: Install Haskell
if: steps.cache-gen-hie.outputs.cache-hit != 'true'
id: install-haskell
uses: input-output-hk/actions/haskell@latest
with:
ghc-version: 9.10.1
cabal-version: 3.16

- name: Install gen-hie if not cached
- name: Install gen-hie
if: steps.cache-gen-hie.outputs.cache-hit != 'true'
run: cabal update && cabal install implicit-hie --install-method=copy --overwrite-policy=always

- name: Add cabal-bin to PATH
run: echo "$HOME/.cabal/bin" >> $GITHUB_PATH
run: |
cabal update
cabal install implicit-hie \
--installdir=${{ env.bindir }} --install-method=copy --overwrite-policy=always

- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Regenerate hie.yaml and confirm that it is in sync
run: ./scripts/gen-hie.sh

branch-history:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
name: Check branch history
runs-on: ubuntu-latest
if: ${{ github.base_ref != '' && github.ref != '' }} # Only true for PRs
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Ensure the branch doesn't contain any merges
run: |
PR_TARGET=${{ github.base_ref }}
Expand Down Expand Up @@ -599,7 +597,7 @@
shell: bash

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Check formal-ledger-specifications SRP commit hash
run: |
TAG=$(sed -ne \
Expand All @@ -622,7 +620,7 @@
if: ${{ github.base_ref != '' && github.ref != '' }} # Only true for PRs

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Check for `undefined`s in the diffs
run: |
PR_TARGET=${{ github.base_ref }}
Expand All @@ -641,7 +639,7 @@
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Install changelog linter
run: |
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/push-specs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
contents: write

steps:
- uses: actions/checkout@v3
- uses: actions/checkout@v6
- uses: cachix/install-nix-action@v18
with:
nix_path: nixpkgs=channel:nixos-unstable
Expand Down