feat: Improve @CascadingUpdateShadowVariable logic #1279
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Downstream - Timefold Solver Enterprise Edition | |
| on: | |
| # Enables the workflow to run on PRs from forks. | |
| # CI will only run for trusted users, to prevent stealing of secrets. | |
| pull_request_target: | |
| branches: [main, '*.x'] | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| paths-ignore: | |
| - 'LICENSE*' | |
| - '.gitignore' | |
| - '**.md' | |
| - '**.adoc' | |
| - '*.txt' | |
| jobs: | |
| # Check if the user is a member of the organization; if so, allow the PR to sail through. | |
| known_user: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| is_member_of_org: ${{ steps.auth_check.outputs.authorized }} | |
| steps: | |
| - id: auth_check | |
| env: | |
| GH_TOKEN: ${{ secrets.JRELEASER_GITHUB_TOKEN }} # Release account is a Solver Gatekeeper. | |
| shell: bash | |
| run: | | |
| # -g to allow actors such as dependabot[bot] | |
| ORG_MEMBERSHIP=`curl -g -L -H "Accept: application/vnd.github+json" -H "Authorization: Bearer $GH_TOKEN" "https://api.github.com/orgs/TimefoldAI/memberships/${{ github.actor }}" | jq -r '.state == "active"'` | |
| echo "authorized=$ORG_MEMBERSHIP" >> "$GITHUB_OUTPUT" | |
| - id: validation | |
| shell: bash | |
| run: | | |
| echo "Authorized user: ${{ steps.auth_check.outputs.authorized }}" | |
| # If the user is not a member, require a member to approve the PR. | |
| approval_required: | |
| needs: known_user | |
| environment: | |
| ${{ | |
| github.event_name == 'pull_request_target' && | |
| github.event.pull_request.head.repo.full_name != github.repository && | |
| (needs.known_user.outputs.is_member_of_org != 'true' || github.actor == 'dependabot[bot]') && | |
| 'external' || 'internal' | |
| }} | |
| runs-on: ubuntu-latest | |
| steps: | |
| - run: true | |
| build: | |
| needs: approval_required | |
| runs-on: ubuntu-latest | |
| concurrency: | |
| group: downstream-enterprise-${{ github.event_name }}-${{ github.head_ref }} | |
| cancel-in-progress: true | |
| timeout-minutes: 120 | |
| steps: | |
| # Clone timefold-solver | |
| # No need to check for stale repo, as Github merges the main repo into the fork automatically. | |
| - name: Checkout timefold-solver | |
| uses: actions/checkout@v4 | |
| with: | |
| path: ./timefold-solver | |
| ref: ${{ github.event.pull_request.head.sha }} # The GHA event will pull the main branch by default, and we must specify the PR reference version | |
| # Clone timefold-solver-enterprise | |
| # Need to check for stale repo, since Github is not aware of the build chain and therefore doesn't automate it. | |
| - name: Checkout timefold-solver-enterprise (PR) # Checkout the PR branch first, if it exists | |
| id: checkout-solver-enterprise | |
| uses: actions/checkout@v4 | |
| continue-on-error: true | |
| with: | |
| repository: TimefoldAI/timefold-solver-enterprise | |
| ref: ${{ github.head_ref }} | |
| token: ${{ secrets.JRELEASER_GITHUB_TOKEN }} # Safe; only used to clone the repo and not stored in the fork. | |
| path: ./timefold-solver-enterprise | |
| fetch-depth: 0 # Otherwise merge will fail on account of not having history. | |
| - name: Checkout timefold-solver-enterprise (main) # Checkout the main branch if the PR branch does not exist | |
| if: steps.checkout-solver-enterprise.outcome != 'success' | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: TimefoldAI/timefold-solver-enterprise | |
| ref: main | |
| token: ${{ secrets.JRELEASER_GITHUB_TOKEN }} # Safe; only used to clone the repo and not stored in the fork. | |
| path: ./timefold-solver-enterprise | |
| fetch-depth: 0 # Otherwise merge will fail on account of not having history. | |
| # Build and test | |
| - name: Setup Temurin 17 and Maven | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Quickly build timefold-solver | |
| working-directory: ./timefold-solver | |
| shell: bash | |
| run: mvn -B -Dquickly clean install | |
| - name: Build and test timefold-solver-enterprise | |
| working-directory: ./timefold-solver-enterprise | |
| shell: bash | |
| run: mvn -B clean verify |