java-cloud-bom-ci.yaml

# Copyright 2022 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Github action job to test core java library features on
# downstream client libraries before they are released.
permissions:
  contents: read

on:
  push:
    branches:
    - main
  pull_request:
name: java-cloud-bom ci
env:
  BUILD_SUBDIR: java-cloud-bom
  MAVEN_OPTS: -Xmx4g
jobs:
  filter:
    runs-on: ubuntu-latest
    outputs:
      library: ${{ steps.filter.outputs.library }}
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3.0.3
      id: filter
      with:
        filters: |
          library:
            - 'java-cloud-bom/**'
            - 'sdk-platform-java/**'
            - 'google-auth-library-java/**'
  dependencies:
    needs: filter
    if: ${{ needs.filter.outputs.library == 'true' }}
    runs-on: ubuntu-latest
    strategy:
      matrix:
        java: [17]
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
      with:
        distribution: temurin
        java-version: ${{matrix.java}}
        cache: 'maven'
    - run: java -version
    - name: Install modules locally
      run: mvn install -B -ntp -Pquick-build -DskipTests=true -T 1C
    - run: .kokoro/dependencies.sh

  bom-content-test:
    needs: filter
    if: ${{ needs.filter.outputs.library == 'true' && github.repository_owner == 'googleapis' }}
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
      with:
        distribution: temurin
        java-version: 11
        cache: maven
    - run: java -version
    - name: Install modules locally
      run: mvn install -B -ntp -Pquick-build -DskipTests=true -T 1C
    - name: Install BOMs
      run: |
        mvn -B -V -ntp install -f java-cloud-bom/pom.xml -DskipTests
    - name: Ensure the members of the Libraries BOM exist in Maven Central
      uses: ./java-cloud-bom/tests/validate-bom
      with:
        bom-path: java-cloud-bom/libraries-bom/pom.xml
    - name: Ensure the BOM has valid content (at releases)
      if: github.head_ref == 'release-please--branches--main'
      run: |
        mvn -B -V -ntp verify -Dtest="BomContentTest#testLibrariesBom"
      working-directory: java-cloud-bom/tests

  bom-assertion-test:
    needs: filter
    if: ${{ needs.filter.outputs.library == 'true' && github.repository_owner == 'googleapis' }}
    name: BomContentAssertionsTest (Test for assertion logic in BomContentTest)
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
      with:
        distribution: zulu
        java-version: 11
        cache: maven
    - run: java -version
    - name: Install modules locally
      run: mvn install -B -ntp -Pquick-build -DskipTests=true -T 1C
    - name: Install BOMs
      run: |
        mvn -B -V -ntp install -f java-cloud-bom/pom.xml -DskipTests
    - run: |
        mvn -B -V -ntp verify -Dtest="BomContentAssertionsTest"
      working-directory: java-cloud-bom/tests

  test-invalid-bom:
    needs: filter
    if: ${{ needs.filter.outputs.library == 'true' }}
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - name: Fetch the bad protobuf-bom version 3.22.1
      shell: bash
      # 3.22.1 had a issue in their pom.xml
      # https://github.com/protocolbuffers/protobuf/issues/12170
      run: |
        mkdir -p bad-protobuf-bom
        curl https://repo1.maven.org/maven2/com/google/protobuf/protobuf-bom/3.22.1/protobuf-bom-3.22.1.pom \
            --output bad-protobuf-bom/pom.xml
    - name: Check the bad BOM
      uses: ./java-cloud-bom/tests/validate-bom
      id: validate-bom
      with:
        bom-path: bad-protobuf-bom/pom.xml
      continue-on-error: true
    - name: Ensure the validate-bom invalidated the bad BOM
      shell: bash
      if: steps.validate-bom.outcome != 'failure'
      run: |
        echo "The validate-bom check should have invalidated the bad BOM"
        exit 1

  dashboard:
    needs: filter
    if: ${{ needs.filter.outputs.library == 'true' }}
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
      with:
        distribution: temurin
        java-version: 11
        cache: maven
    - run: java -version
    - run: .kokoro/dashboard.sh
      env:
        JOB_TYPE: dashboard-units-check

  shared-dependencies-convergence:
    needs: filter
    if: ${{ needs.filter.outputs.library == 'true' && github.repository_owner == 'googleapis' && github.head_ref == 'release-please--branches--main' }}
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      with:
        persist-credentials: false
    - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
      with:
        distribution: temurin
        java-version: 11
        cache: maven
    - run: java -version
    - run: .kokoro/dashboard.sh
      env:
        JOB_TYPE: dependency-convergence-check