dd-trace-rb/.github/workflows/lock-dependency.yml at master · jruby/dd-trace-rb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
name: Lock Dependencies

on: # yamllint disable-line rule:truthy
  pull_request:
    branches:
      - master

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

# Default permissions for all jobs
permissions: {}

jobs:
  dependency:
    name: Dependency changes
    runs-on: ubuntu-24.04
    outputs:
      changes: ${{ steps.changes.outputs.dependencies }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
        id: changes
        with:
          filters: .github/dependency_filters.yml

  lock:
    runs-on: ubuntu-24.04
    needs: dependency
    if: ${{ needs.dependency.outputs.changes == 'true' }}
    strategy:
      fail-fast: false
      matrix:
        engine:
          # ADD NEW RUBIES HERE
          - name: ruby
            version: "4.0"
          - name: ruby
            version: "3.4"
          - name: ruby
            version: "3.3"
          - name: ruby
            version: "3.2"
          - name: ruby
            version: "3.1"
          - name: ruby
            version: "3.0"
          - name: ruby
            version: "2.7"
          - name: ruby
            version: "2.6"
          - name: ruby
            version: "2.5"
    container:
      image: ghcr.io/datadog/images-rb/engines/${{ matrix.engine.name }}:${{ matrix.engine.version }}-gnu-gcc-g47f47df86aeb379fb8b31dc6ad91a91bb3c97516
      env:
        BUNDLE_GEMFILE: gemfiles/${{ matrix.engine.name }}-${{ matrix.engine.version }}.gemfile
        BUNDLE_WITHOUT: check
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          ref: ${{ github.event.pull_request.head.sha }}
          persist-credentials: false
      - run: |
          ruby -v
          gem -v
          bundler -v
      - id: checksum
        run: |
          echo "eligible=$(ruby -r./tasks/security_capabilities -e 'print SecurityCapabilities.for_version(RUBY_VERSION)[:checksum]')" >> "$GITHUB_OUTPUT"
      - run: bundle lock --add-platform x86_64-linux aarch64-linux arm64-darwin x86_64-darwin${{ steps.checksum.outputs.eligible == 'true' && ' --add-checksums' || '' }}
      - run: bundle install
      - run: bundle exec rake dependency:all
      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: lock-dependency-${{ github.run_id }}-${{ matrix.engine.name }}-${{ matrix.engine.version }}
          path: |
            gemfiles/${{ matrix.engine.name }}-${{ matrix.engine.version }}.gemfile.lock
            gemfiles/${{ matrix.engine.name }}_${{ matrix.engine.version }}*
          retention-days: 1

  complete:
    name: Lock Dependencies (complete)
    runs-on: ubuntu-24.04
    needs:
      - lock
    steps:
      - run: echo "DONE!"