build.yml

name: Build

env:
  GO_VERSION: "1.25.8"

on:
  push:
    branches:
      - master
  pull_request:

jobs:

  go-tests:
    name: Running Go tests
    runs-on: ubuntu-latest
    services:
      mysql:
        image: mysql:5.7
        env:
          MYSQL_DATABASE: openagent
          MYSQL_ROOT_PASSWORD: 123456
        ports:
          - 3306:3306
        options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: ./go.mod
      - name: Tests
        run: go test -v -vet=asmdecl,assign,atomic,bools,buildtag,cgocall,composites,copylocks,defers,directive,errorsas,framepointer,httpresponse,ifaceassert,loopclosure,lostcancel,nilfunc,shift,sigchanyzer,slog,stdmethods,stringintconv,structtag,testinggoroutine,tests,timeformat,unmarshal,unreachable,unsafeptr,unusedresult $(go list ./...) -tags skipCi

  frontend:
    name: Front-end
    runs-on: ubuntu-latest
    needs: [ go-tests ]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-node@v3
        with:
          node-version: 22
          cache: 'yarn'
          cache-dependency-path: ./web/yarn.lock
      - run: yarn install && CI=false yarn run build
        working-directory: ./web
      - name: Upload build artifacts
        if: github.repository == 'the-open-agent/openagent' && github.event_name == 'push'
        uses: actions/upload-artifact@v4
        with:
          name: frontend-build-${{ github.run_id }}
          path: ./web/build

  backend:
    name: Back-end
    runs-on: ubuntu-latest
    needs: [ go-tests ]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
        with:
          go-version: ${{ env.GO_VERSION }}
          cache-dependency-path: ./go.mod
      - run: go version
      - name: Build
        run: |
          go build -race -ldflags "-extldflags '-static'"
        working-directory: ./

  linter:
    name: Go-Linter
    runs-on: ubuntu-latest
    needs: [ go-tests ]
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-go@v4
        with:
          go-version: ${{ env.GO_VERSION }}
          cache: false

      - name: Sync vendor tree
        run: go mod vendor

      # CI uses the repo's gofumpt-only golangci-lint config (v2.x is built with Go >= 1.25, matching toolchain).
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v9.2.0
        with:
          version: v2.11.4
          args: --config .golangci.yml --max-same-issues=0 --timeout 5m ./...


  tag-release:
    name: Create Tag
    runs-on: ubuntu-latest
    permissions:
      contents: write
      issues: write
    if: github.repository == 'the-open-agent/openagent' && github.event_name == 'push'
    needs: [ frontend, backend, linter ]
    outputs:
      new-release-published: ${{ steps.semantic.outputs.new_release_published }}
      new-release-version: ${{ steps.semantic.outputs.new_release_version }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Create Tag with Semantic Release
        id: semantic
        uses: cycjimmy/semantic-release-action@v4
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  github-release:
    name: GitHub Release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      issues: write
    if: github.repository == 'the-open-agent/openagent' && github.event_name == 'push' && needs.tag-release.outputs.new-release-published == 'true'
    needs: [ tag-release ]
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Free disk space
        uses: jlumbroso/free-disk-space@v1.3.1
        with:
          tool-cache: false
          android: true
          dotnet: true
          haskell: true
          large-packages: true
          swap-storage: true

      - name: Download frontend build artifacts
        uses: actions/download-artifact@v4
        with:
          name: frontend-build-${{ github.run_id }}
          path: ./web/build

      - name: Prepare Go caches
        run: |
          echo "GOMODCACHE=$RUNNER_TEMP/gomod" >> $GITHUB_ENV
          echo "GOCACHE=$RUNNER_TEMP/gocache" >> $GITHUB_ENV
          go clean -cache -modcache -testcache -fuzzcache

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v6
        with:
          distribution: goreleaser
          version: '~> v2'
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  docker-release:
    name: Docker Release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      issues: write
    if: github.repository == 'the-open-agent/openagent' && github.event_name == 'push' && needs.tag-release.outputs.new-release-published == 'true'
    needs: [ tag-release ]
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          fetch-depth: -1

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v2

      - name: Set up buildx
        id: buildx
        uses: docker/setup-buildx-action@v2
        with:
          version: latest

      - name: Log in to Docker Hub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}

      - name: Push to Docker Hub
        uses: docker/build-push-action@v3
        with:
          context: .
          target: STANDARD
          platforms: linux/amd64,linux/arm64
          push: true
          tags: casbin/openagent:${{ needs.tag-release.outputs.new-release-version }},casbin/openagent:latest

      - name: Push All In One Version to Docker Hub
        uses: docker/build-push-action@v3
        with:
          context: .
          target: ALLINONE
          platforms: linux/amd64,linux/arm64
          push: true
          tags: casbin/openagent-all-in-one:${{ needs.tag-release.outputs.new-release-version }},casbin/openagent-all-in-one:latest

      - uses: actions/checkout@v3
        with:
          repository: the-open-agent/openagent-helm
          ref: 'master'
          token: ${{ secrets.GH_BOT_TOKEN }}

      - name: Update Helm Chart
        run: |
          # Set the appVersion and version of the chart to the current tag
          sed -i "s/appVersion: .*/appVersion: ${{ needs.tag-release.outputs.new-release-version }}/g" ./openagent-helm-chart/Chart.yaml
          sed -i "s/version: .*/version: ${{ needs.tag-release.outputs.new-release-version }}/g" ./openagent-helm-chart/Chart.yaml

          REGISTRY=oci://registry-1.docker.io/casbin
          cd openagent-helm-chart
          helm package .
          PKG_NAME=$(ls *.tgz)
          helm repo index . --url $REGISTRY --merge index.yaml
          helm push $PKG_NAME $REGISTRY
          rm $PKG_NAME

          # Commit and push the changes back to the repository
          git config --global user.name "casbin-bot"
          git config --global user.email "bot@casbin.org"
          git add Chart.yaml index.yaml
          git commit -m "chore(helm): bump helm charts appVersion to ${{ needs.tag-release.outputs.new-release-version }}"
          git tag ${{ needs.tag-release.outputs.new-release-version }}
          git push origin HEAD:master --follow-tags