Merge pull request #2 from rollup/dependabot/npm_and_yarn/mermaid-10.9.3 #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| env: | |
| DEBUG: napi:* | |
| APP_NAME: rollup | |
| MACOSX_DEPLOYMENT_TARGET: '10.13' | |
| on: | |
| push: | |
| branches: | |
| - master | |
| tags: | |
| - 'v*.*.**' | |
| pull_request: | |
| types: | |
| - synchronize | |
| - opened | |
| - reopened | |
| merge_group: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| lint: | |
| name: Lint and Audit | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: Checkout Commit | |
| uses: actions/checkout@v4 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - name: Cache Node Modules | |
| id: cache-node-modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: node_modules | |
| key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }} | |
| - name: Install dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| run: npm ci --ignore-scripts | |
| - name: Lint | |
| run: npm run ci:lint | |
| - name: Vulnerabilities | |
| run: npm run check-audit | |
| - name: Optional Dependencies | |
| run: npm run test:package | |
| - name: CLI Docs | |
| run: npm run test:options | |
| - name: Generated Code | |
| run: | | |
| npm run build:ast-converters | |
| git diff HEAD --exit-code --ignore-space-at-eol | |
| build: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| settings: | |
| # WASM | |
| - host: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| name: wasm | |
| is-wasm-build: true | |
| build: >- | |
| set -e && | |
| rustup target add wasm32-unknown-unknown && | |
| npm run build:wasm | |
| path: | | |
| wasm/ | |
| .empty | |
| - host: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| name: wasm-node | |
| is-wasm-build: true | |
| build: >- | |
| set -e && | |
| rustup target add wasm32-unknown-unknown && | |
| npm run build:wasm:node | |
| path: | | |
| wasm-node/ | |
| .empty | |
| # Windows | |
| - host: windows-latest | |
| build: RUSTFLAGS="-C target-feature=+crt-static" npm run build:napi -- --release | |
| target: x86_64-pc-windows-msvc | |
| - host: windows-latest | |
| build: >- | |
| set -e && | |
| rustup target add i686-pc-windows-msvc && | |
| npm run build:napi -- --release --target i686-pc-windows-msvc | |
| target: i686-pc-windows-msvc | |
| - host: windows-latest | |
| target: aarch64-pc-windows-msvc | |
| build: npm run build:napi -- --release --target aarch64-pc-windows-msvc | |
| # MacOS | |
| - host: macos-latest | |
| target: x86_64-apple-darwin | |
| build: >- | |
| set -e && | |
| npm run build:napi -- --release --target x86_64-apple-darwin | |
| - host: macos-latest | |
| target: aarch64-apple-darwin | |
| build: >- | |
| set -e && | |
| rustup target add aarch64-apple-darwin && | |
| npm run build:napi -- --release --target aarch64-apple-darwin | |
| # Linux | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian | |
| build: >- | |
| set -e && | |
| rustup target add x86_64-unknown-linux-gnu && | |
| npm run build:napi -- --release --target x86_64-unknown-linux-gnu | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-musl | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine | |
| build: >- | |
| set -e && | |
| npm run build:napi -- --release | |
| - host: ubuntu-latest | |
| target: armv7-unknown-linux-gnueabihf | |
| zig: true | |
| setup: | | |
| sudo apt-get update | |
| sudo apt-get install gcc-arm-linux-gnueabihf -y | |
| build: >- | |
| set -e && | |
| npm run build:napi -- --release --target armv7-unknown-linux-gnueabihf | |
| - host: ubuntu-latest | |
| target: armv7-unknown-linux-musleabihf | |
| zig: true | |
| build: >- | |
| set -e && | |
| npm run build:napi -- --release --target armv7-unknown-linux-musleabihf | |
| - host: ubuntu-latest | |
| target: aarch64-unknown-linux-gnu | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian-aarch64 | |
| build: >- | |
| set -e && | |
| export JEMALLOC_SYS_WITH_LG_PAGE=16 && | |
| rustup default stable && | |
| rustup target add aarch64-unknown-linux-gnu && | |
| npm run build:napi -- --release --target aarch64-unknown-linux-gnu | |
| - host: ubuntu-latest | |
| target: aarch64-unknown-linux-musl | |
| docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine | |
| build: >- | |
| set -e && | |
| export JEMALLOC_SYS_WITH_LG_PAGE=16 && | |
| rustup default stable && | |
| rustup target add aarch64-unknown-linux-musl && | |
| RUSTFLAGS='-C target-feature=-crt-static -C linker=aarch64-linux-musl-gcc' npm run build:napi -- --release --target aarch64-unknown-linux-musl | |
| - host: ubuntu-latest | |
| target: armv7-linux-androideabi | |
| build: >- | |
| set -e && | |
| npm run build:napi -- --release --target armv7-linux-androideabi | |
| - host: ubuntu-latest | |
| target: aarch64-linux-android | |
| build: >- | |
| set -e && | |
| npm run build:napi -- --release --target aarch64-linux-android | |
| - host: ubuntu-latest | |
| target: riscv64gc-unknown-linux-gnu | |
| setup: | | |
| sudo apt-get update | |
| sudo apt-get install gcc-riscv64-linux-gnu -y | |
| build: >- | |
| set -e && | |
| rustup target add riscv64gc-unknown-linux-gnu && | |
| npm run build:napi -- --release --target riscv64gc-unknown-linux-gnu | |
| - host: ubuntu-latest | |
| target: powerpc64le-unknown-linux-gnu | |
| setup: | | |
| sudo apt-get update | |
| sudo apt-get install gcc-powerpc64le-linux-gnu -y | |
| build: >- | |
| set -e && | |
| export CARGO_TARGET_POWERPC64LE_UNKNOWN_LINUX_GNU_LINKER=powerpc64le-linux-gnu-gcc && rustup target add powerpc64le-unknown-linux-gnu && | |
| npm run build:napi -- --release --target powerpc64le-unknown-linux-gnu | |
| - host: ubuntu-latest | |
| target: s390x-unknown-linux-gnu | |
| setup: | | |
| sudo apt-get update | |
| sudo apt-get install gcc-s390x-linux-gnu -y | |
| build: >- | |
| set -e && | |
| export CARGO_TARGET_S390X_UNKNOWN_LINUX_GNU_LINKER=s390x-linux-gnu-gcc && | |
| rustup target add s390x-unknown-linux-gnu && | |
| npm run build:napi -- --release --target s390x-unknown-linux-gnu | |
| name: Build ${{ matrix.settings.name || matrix.settings.target }} | |
| runs-on: ${{ matrix.settings.host }} | |
| timeout-minutes: 30 | |
| steps: | |
| - name: Checkout Commit | |
| uses: actions/checkout@v4 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| if: ${{ !matrix.settings.docker }} | |
| with: | |
| node-version: 20 | |
| - name: Install Toolchain | |
| uses: dtolnay/rust-toolchain@stable | |
| if: ${{ !matrix.settings.docker }} | |
| with: | |
| toolchain: stable | |
| targets: ${{ matrix.settings.target }} | |
| - name: Cache cargo | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry/index/ | |
| ~/.cargo/registry/cache/ | |
| ~/.cargo/git/db/ | |
| .cargo-cache | |
| rust/target/ | |
| key: ${{ matrix.settings.name || matrix.settings.target }}-cargo-${{ matrix.settings.host }}-${{ hashFiles('rust/Cargo.lock') }} | |
| restore-keys: ${{ matrix.settings.name || matrix.settings.target }}-cargo-${{ matrix.settings.host }} | |
| - uses: goto-bus-stop/setup-zig@v2 | |
| if: ${{ matrix.settings.zig }} | |
| with: | |
| version: 0.10.1 | |
| - name: Setup toolchain | |
| run: ${{ matrix.settings.setup }} | |
| if: ${{ matrix.settings.setup }} | |
| shell: bash | |
| - name: Cache Node Modules | |
| id: cache-node-modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: node_modules | |
| key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }} | |
| - name: Install dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| run: npm ci --ignore-scripts | |
| - name: Build in docker | |
| uses: addnab/docker-run-action@v3 | |
| if: ${{ matrix.settings.docker }} | |
| with: | |
| image: ${{ matrix.settings.docker }} | |
| options: '--user 0:0 -v ${{ github.workspace }}/.cargo-cache/git/db:/usr/local/cargo/git/db -v ${{ github.workspace }}/.cargo/registry/cache:/usr/local/cargo/registry/cache -v ${{ github.workspace }}/.cargo/registry/index:/usr/local/cargo/registry/index -v ${{ github.workspace }}:/build -w /build' | |
| run: ${{ matrix.settings.build }} | |
| - name: Build | |
| run: ${{ matrix.settings.build }} | |
| if: ${{ !matrix.settings.docker }} | |
| shell: bash | |
| - name: Upload wasm artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: bindings-${{ matrix.settings.name }} | |
| path: ${{ matrix.settings.path }} | |
| if-no-files-found: error | |
| if: ${{ matrix.settings.is-wasm-build }} | |
| - name: Upload napi artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: bindings-${{ matrix.settings.target }} | |
| path: ${{ env.APP_NAME }}.*.node | |
| if-no-files-found: error | |
| if: ${{ !matrix.settings.is-wasm-build }} | |
| # smoke test for some architectures that do not receive the full test suite | |
| smoke-test: | |
| permissions: | |
| packages: write # for caching container images | |
| name: Smoke Test ${{ matrix.settings.target }} | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| settings: | |
| - arch: aarch64 | |
| distro: ubuntu_latest | |
| target: aarch64-unknown-linux-gnu | |
| - arch: aarch64 | |
| distro: alpine_latest | |
| target: aarch64-unknown-linux-musl | |
| - arch: armv7 | |
| distro: ubuntu_latest | |
| target: armv7-unknown-linux-gnueabihf | |
| # There is a bug that hangs the build when running npm | |
| # - arch: armv7 | |
| # distro: alpine_latest | |
| # target: armv7-unknown-linux-musleabihf | |
| - arch: ppc64le | |
| distro: ubuntu_latest | |
| target: powerpc64le-unknown-linux-gnu | |
| use-nvm: true | |
| - arch: s390x | |
| distro: ubuntu_latest | |
| target: s390x-unknown-linux-gnu | |
| use-nvm: true | |
| # I could not find a way to install Node without compiling from source | |
| # - arch: riscv64 | |
| # distro: ubuntu_latest | |
| # target: riscv64gc-unknown-linux-gnu | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 120 | |
| steps: | |
| - name: Checkout Commit | |
| uses: actions/checkout@v4 | |
| - name: Cache Node Modules | |
| id: cache-node-modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: node_modules | |
| key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }} | |
| - name: Install dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| run: npm ci --ignore-scripts | |
| - name: Build JS | |
| run: npm run build:cjs | |
| - name: Download napi artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: bindings-${{ matrix.settings.target }} | |
| path: dist/ | |
| - name: Run Smoke Test | |
| uses: uraimo/run-on-arch-action@v2 | |
| with: | |
| arch: ${{ matrix.settings.arch }} | |
| distro: ${{ matrix.settings.distro }} | |
| githubToken: ${{ github.token }} | |
| install: | | |
| case "${{ matrix.settings.distro }}" in | |
| ubuntu*) | |
| apt-get update -y | |
| apt-get install -y curl git | |
| if [[ -z "${{ matrix.settings.use-nvm }}" ]]; then | |
| curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - | |
| apt-get install -y nodejs | |
| fi | |
| ;; | |
| alpine*) | |
| apk add nodejs npm git | |
| ;; | |
| esac | |
| run: | | |
| set -e | |
| if [[ -n "${{ matrix.settings.use-nvm }}" ]]; then | |
| curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.1/install.sh | bash | |
| source ~/.nvm/nvm.sh | |
| nvm install --lts | |
| fi | |
| echo "Node: $(node -v)" | |
| echo "npm: $(npm -v)" | |
| git config --global --add safe.directory /home/runner/work/rollup/rollup | |
| chmod +x dist/bin/rollup | |
| dist/bin/rollup --version | grep -E 'rollup v[0-9]+\.[0-9]+\.[0-9]+' | |
| mv dist dist-build | |
| node dist-build/bin/rollup --config rollup.config.ts --configPlugin typescript --configTest --forceExit | |
| cp dist-build/rollup.*.node dist/ | |
| dist/bin/rollup --version | grep -E 'rollup v[0-9]+\.[0-9]+\.[0-9]+' | |
| test: | |
| name: Test${{ matrix.additionalName || '' }} Node ${{ matrix.node }} (${{ matrix.settings.target }}) | |
| needs: | |
| - build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| settings: | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| - host: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| - host: macos-latest | |
| target: aarch64-apple-darwin | |
| node: | |
| - '18.0.0' | |
| - '20' | |
| include: | |
| - settings: | |
| host: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| node: '20' | |
| command: 'ci:coverage' | |
| additionalName: ' with Coverage' | |
| coverage: true | |
| - settings: | |
| host: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| node: '18.0.0' | |
| command: 'ci:test:all' | |
| additionalName: ' with Additional Tests' | |
| runs-on: ${{ matrix.settings.host }} | |
| timeout-minutes: 15 | |
| steps: | |
| - name: Checkout Commit | |
| uses: actions/checkout@v4 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| check-latest: true | |
| - name: Cache Node Modules | |
| id: cache-node-modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: node_modules | |
| key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }} | |
| - name: Install dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| run: npm ci --ignore-scripts | |
| - name: Download napi artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: bindings-${{ matrix.settings.target }} | |
| path: . | |
| - name: Download wasm artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: bindings-wasm | |
| - name: Build and test Rollup | |
| run: npm run ${{ matrix.command || 'ci:test:only' }} | |
| env: | |
| CI: true | |
| - name: Upload coverage | |
| uses: codecov/codecov-action@v4 | |
| if: matrix.coverage | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| commit_parent: ${{ github.event.pull_request.head.sha }} | |
| publish: | |
| permissions: | |
| pull-requests: write # for writing comments | |
| issues: write # for writing comments | |
| contents: write # for creating a release | |
| name: Publish | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| needs: | |
| - lint | |
| - test | |
| - smoke-test | |
| # This needs to be adapted for Rollup 5 | |
| if: startsWith(github.ref_name, 'v4') | |
| steps: | |
| - name: Checkout Commit | |
| uses: actions/checkout@v4 | |
| with: | |
| # Necessary to find the commits included in the release | |
| fetch-depth: 0 | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| check-latest: true | |
| - name: Cache Node Modules | |
| id: cache-node-modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: node_modules | |
| key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }} | |
| - name: Install dependencies | |
| if: steps.cache-node-modules.outputs.cache-hit != 'true' | |
| run: npm ci --ignore-scripts | |
| - name: Download all artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| path: artifacts | |
| - name: Copy wasm files | |
| run: cp -R artifacts/bindings-wasm/wasm . | |
| - name: Build JavaScript | |
| run: npm run build:cjs && cp artifacts/*/*.node dist/ && npm run build:bootstrap | |
| - name: Move artifacts | |
| run: npm run ci:artifacts | |
| - name: Publish | |
| run: | | |
| if git --no-pager log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$"; | |
| then | |
| echo "Publishing regular release" | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| npm publish --access public | |
| elif git --no-pager log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+-[0-9]\+$"; | |
| then | |
| echo "Publishing beta release" | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| npm publish --tag beta --access public | |
| else | |
| echo "Not a release, skipping publish" | |
| fi | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| ROLLUP_RELEASE: 'releasing' |