ci.yml

name: Continuous Integration
on:
  pull_request:
  push:
    branches:
      - main
      - master

permissions:
  contents: read
  actions: read

jobs:
  unit-test:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-intel, macos-arm, windows-latest]
        go-version: ["oldstable", "stable"]
        include:
          - os: macos-intel
            runsOn: macos-15-intel
          - os: macos-arm
            runsOn: macos-14
    permissions:
      contents: read
      checks: write
      statuses: write
    runs-on: ${{ matrix.runsOn || matrix.os }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          submodules: recursive

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version: ${{ matrix.go-version }}

      - name: Check
        run: go run . check
        working-directory: ./internal/cmd/build

      - name: Unit test
        run: go run . unit-test
        working-directory: ./internal/cmd/build

  integration-test-no-cache:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-intel, macos-arm, windows-latest]
        go-version: ["oldstable", "stable"]
        include:
          - os: macos-intel
            runsOn: macos-15-intel
          - os: macos-arm
            runsOn: macos-14
    permissions:
      contents: read
      checks: write
      statuses: write
    runs-on: ${{ matrix.runsOn || matrix.os }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          submodules: recursive

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version: ${{ matrix.go-version }}

      - name: Integration tests (without cache)
        run: go run . integration-test -dev-server
        working-directory: ./internal/cmd/build
        env:
          WORKFLOW_CACHE_SIZE: "0"

  integration-test-with-cache:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-intel, macos-arm, windows-latest]
        go-version: ["oldstable", "stable"]
        include:
          - os: macos-intel
            runsOn: macos-15-intel
          - os: macos-arm
            runsOn: macos-14
    permissions:
      contents: read
      checks: write
      statuses: write
    runs-on: ${{ matrix.runsOn || matrix.os }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          submodules: recursive

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version: ${{ matrix.go-version }}

      - name: Integration tests (with cache)
        run: go run . integration-test -dev-server
        working-directory: ./internal/cmd/build

  docker-compose-test:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      checks: write
      statuses: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          submodules: recursive

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version: stable

      - name: Docker compose - checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          repository: temporalio/samples-server
          path: ./samples-server

      - name: Docker compose - start
        run: |
          cp ./.github/workflows/docker/docker-compose.override.yaml ./samples-server/compose/docker-compose.override.yaml
          cp ./.github/workflows/docker/dynamic-config-custom.yaml ./samples-server/compose/dynamicconfig/dynamic-config-custom.yaml
          docker compose --project-directory ./samples-server/compose up &
          go run ./.github/workflows/wait_for_server.go

      - name: Docker compose - integration tests
        run: go run . integration-test
        env:
          # TODO(antlai-temporal): Remove this flag once server 1.27 released.
          DISABLE_SERVER_1_27_TESTS: "1"
          DISABLE_PRIORITY_TESTS: "1"
          DISABLE_STANDALONE_ACTIVITY_TESTS: "1"
          DISABLE_NEXUS_CALLER_TIMEOUT_TESTS: "1"
          DISABLE_NEW_NEXUS_ERROR_FORMAT_TESTS: "1"
        working-directory: ./internal/cmd/build

  cloud-test:
    strategy:
      matrix:
        go-version: ["oldstable", "stable"]
        fips: [true, false]
      # Try to avoid running tests in parallel to avoid workflow ID conflict
      max-parallel: 1
    # Only supported in non-fork runs, since secrets are not available in forks.
    if: ${{ github.event.pull_request.head.repo.full_name == '' || github.event.pull_request.head.repo.full_name == 'temporalio/sdk-go' }}
    runs-on: ubuntu-latest
    env:
      SERVICE_ADDR: sdk-ci.a2dd6.tmprl.cloud:7233
      TEMPORAL_NAMESPACE: sdk-ci.a2dd6
      TEMPORAL_CLIENT_CERT: ${{ secrets.TEMPORAL_CLIENT_CERT }}
      TEMPORAL_CLIENT_KEY: ${{ secrets.TEMPORAL_CLIENT_KEY }}
      GODEBUG: ${{ matrix.fips && 'fips140=on' || '' }}

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          submodules: recursive
      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version: ${{ matrix.go-version }}
      - name: Single integration test against cloud
        run: 'go test -v --count 1 -p 1 . -run "TestIntegrationSuite/TestBasic$"'
        working-directory: test

  features-test:
    uses: temporalio/features/.github/workflows/go.yaml@main
    with:
      go-repo-path: ${{github.event.pull_request.head.repo.full_name}}
      version: ${{github.event.pull_request.head.ref}}
      version-is-repo-ref: true