Repository navigation
Guard against crash when sk_CRYPTO_BUFFER_new_null() returns NULL (#1… #793
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy project | |
| on: | |
| push: | |
| branches: [ main ] | |
| schedule: | |
| - cron: '30 3 * * 1' # At 03:30 on Monday, every Monday. | |
| # Allows you to run this workflow manually from the Actions tab | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| env: | |
| MAVEN_OPTS: -Dhttp.keepAlive=false -Dmaven.wagon.http.pool=false -Dmaven.wagon.http.retryhandler.count=5 -Dmaven.wagon.httpconnectionManager.ttlSeconds=240 | |
| # Cancel running jobs when a new push happens to the same branch as otherwise it will | |
| # tie up too many resources without providing much value. | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| stage-snapshot: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| include: | |
| - setup: centos6-x86_64 | |
| docker-compose-build: "-f docker/docker-compose.centos-6.yaml -f docker/docker-compose.centos-6.18.yaml build" | |
| docker-compose-run: "-f docker/docker-compose.centos-6.yaml -f docker/docker-compose.centos-6.18.yaml run stage-snapshot" | |
| - setup: debian7-x86_64 | |
| docker-compose-build: "-f docker/docker-compose.debian.yaml -f docker/docker-compose.debian-7.18.yaml build" | |
| docker-compose-run: "-f docker/docker-compose.debian.yaml -f docker/docker-compose.debian-7.18.yaml run stage-snapshot" | |
| - setup: centos7-aarch64 | |
| docker-compose-build: "-f docker/docker-compose.centos-7.yaml build" | |
| docker-compose-run: "-f docker/docker-compose.centos-7.yaml run cross-compile-aarch64-stage-snapshot" | |
| name: stage-snapshot-${{ matrix.setup }} | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 | |
| # Cache .m2/repository | |
| - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | |
| continue-on-error: true | |
| with: | |
| path: ~/.m2/repository | |
| key: stage-snapshot-${{ matrix.setup }}-m2-repository-cache-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| stage-snapshot-${{ matrix.setup }}-m2-repository-cache- | |
| - name: Create local staging directory | |
| run: mkdir -p ~/local-staging | |
| - name: Build docker image | |
| run: docker compose ${{ matrix.docker-compose-build }} | |
| - name: Stage snapshots to local staging directory | |
| run: docker compose ${{ matrix.docker-compose-run }} | |
| - name: Upload local staging directory | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | |
| with: | |
| name: ${{ matrix.setup }}-local-staging | |
| path: ~/local-staging | |
| if-no-files-found: error | |
| include-hidden-files: true | |
| stage-snapshot-macos: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - setup: macos-x86_64 | |
| os: macos-15-intel | |
| - setup: macos-aarch64 | |
| os: macos-15 | |
| runs-on: ${{ matrix.os }} | |
| name: ${{ matrix.setup }} build | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 | |
| - name: Set up JDK 8 | |
| uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 | |
| with: | |
| distribution: 'zulu' | |
| java-version: '8' | |
| # Cache .m2/repository | |
| # Caching of maven dependencies | |
| - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | |
| continue-on-error: true | |
| with: | |
| path: ~/.m2/repository | |
| key: pr-${{ matrix.setup }}-maven-cache-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| pr-${{ matrix.setup }}-maven-cache- | |
| - name: Install tools via brew | |
| run: brew bundle | |
| - name: Create local staging directory | |
| run: mkdir -p ~/local-staging | |
| - name: Stage snapshots to local staging directory | |
| run: ./mvnw -B -ntp -am -pl openssl-dynamic,boringssl-static clean package org.sonatype.plugins:nexus-staging-maven-plugin:deploy -DaltStagingDirectory=$HOME/local-staging -DskipTests=true | |
| - name: Upload local staging directory | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | |
| with: | |
| name: ${{ matrix.setup }}-local-staging | |
| path: ~/local-staging | |
| if-no-files-found: error | |
| include-hidden-files: true | |
| stage-snapshot-windows: | |
| runs-on: windows-2022 | |
| name: stage-snapshot-windows-x86_64 | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 | |
| - name: Create local staging directory | |
| run: mkdir local-staging | |
| - name: Set up JDK 8 | |
| uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 | |
| with: | |
| java-version: 8 | |
| distribution: zulu | |
| - name: Add msbuild to PATH | |
| uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2.0.0 | |
| - name: Configuring Developer Command Prompt | |
| uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 | |
| with: | |
| arch: x86_amd64 | |
| - name: Install tools | |
| uses: crazy-max/ghaction-chocolatey@2526f467ccbd337d307fe179959cabbeca0bc8c0 # v3.4.0 | |
| with: | |
| args: install ninja nasm | |
| # Cache .m2/repository | |
| - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | |
| continue-on-error: true | |
| with: | |
| path: ~/.m2/repository | |
| key: stage-snapshot-windows-m2-repository-cache-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| stage-snapshot-windows-m2-repository-cache- | |
| - name: Build netty-tcnative-boringssl-static | |
| run: ./mvnw.cmd --file pom.xml -am -pl boringssl-static clean package org.sonatype.plugins:nexus-staging-maven-plugin:deploy -DaltStagingDirectory=/local-staging -DskipRemoteStaging=true -DskipTests=true | |
| - name: Upload local staging directory | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | |
| with: | |
| name: windows-x86_64-local-staging | |
| path: /local-staging | |
| if-no-files-found: error | |
| include-hidden-files: true | |
| deploy-staged-snapshots: | |
| runs-on: ubuntu-latest | |
| # Wait until we have staged everything | |
| needs: [stage-snapshot, stage-snapshot-macos, stage-snapshot-windows] | |
| steps: | |
| - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 | |
| - name: Set up JDK 8 | |
| uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 | |
| with: | |
| java-version: 8 | |
| distribution: zulu | |
| # Cache .m2/repository | |
| - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | |
| continue-on-error: true | |
| with: | |
| path: ~/.m2/repository | |
| key: deploy-staged-snapshot-m2-repository-cache-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| deploy-stage-snapshot-m2-repository-cache- | |
| - uses: s4u/maven-settings-action@7802f6aec16c9098b4798ad1f1d8ac75198194bd # v3.0.0 | |
| with: | |
| servers: | | |
| [{ | |
| "id": "central-portal-snapshots", | |
| "username": "${{ secrets.MAVEN_CENTRAL_USERNAME }}", | |
| "password": "${{ secrets.MAVEN_CENTRAL_PASSWORD }}" | |
| }] | |
| # Hardcode the staging artifacts that need to be downloaded. | |
| # These must match the matrix setups and windows build. There is currently no way to pull this out of the config. | |
| - name: Download windows_x86_64 staging directory | |
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 | |
| with: | |
| name: windows-x86_64-local-staging | |
| path: ~/windows-x86_64-local-staging | |
| - name: Download macos-aarch64 staging directory | |
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 | |
| with: | |
| name: macos-aarch64-local-staging | |
| path: ~/macos-aarch64-local-staging | |
| - name: Download macos-x86_64 staging directory | |
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 | |
| with: | |
| name: macos-x86_64-local-staging | |
| path: ~/macos-x86_64-local-staging | |
| - name: Download centos7-aarch64 staging directory | |
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 | |
| with: | |
| name: centos7-aarch64-local-staging | |
| path: ~/centos7-aarch64-local-staging | |
| - name: Download debian7-x86_64 staging directory | |
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 | |
| with: | |
| name: debian7-x86_64-local-staging | |
| path: ~/debian7-x86_64-local-staging | |
| - name: Download centos6-x86_64 staging directory | |
| uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 | |
| with: | |
| name: centos6-x86_64-local-staging | |
| path: ~/centos6-x86_64-local-staging | |
| - name: Copy previous build artifacts to local maven repository | |
| run: bash ./.github/scripts/local_staging_install_snapshot.sh ~/.m2/repository ~/windows-x86_64-local-staging ~/macos-aarch64-local-staging ~/macos-x86_64-local-staging ~/centos7-aarch64-local-staging ~/debian7-x86_64-local-staging ~/centos6-x86_64-local-staging | |
| - name: Generate uber jar and deploy to local staging. | |
| run: | | |
| mkdir -p ~/uber-local-staging | |
| ./mvnw -B --file pom.xml -Puber-snapshot -pl boringssl-static clean package org.sonatype.plugins:nexus-staging-maven-plugin:deploy -DaltStagingDirectory=$HOME/uber-local-staging -DskipTests=true | |
| - name: Merge staging repositories | |
| run: bash ./.github/scripts/local_staging_merge_snapshot.sh ~/local-staging ~/windows-x86_64-local-staging ~/macos-aarch64-local-staging ~/macos-x86_64-local-staging ~/centos7-aarch64-local-staging ~/debian7-x86_64-local-staging ~/centos6-x86_64-local-staging ~/uber-local-staging | |
| - name: Deploy local staged artifacts | |
| run: ./mvnw -B --file pom.xml org.sonatype.plugins:nexus-staging-maven-plugin:deploy-staged -DaltStagingDirectory=$HOME/local-staging |