Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
229 changes: 25 additions & 204 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
@@ -1,252 +1,73 @@
name: Base Minerals 1.12 CI
name: Base Minerals 1.13.2 CI

on:
push:
branches:
- master-1.12
- 'feature/**'
branches: [master-1.13.2, 'feature/**']
pull_request:
branches:
- master-1.12
branches: [master-1.13.2]

permissions:
contents: read

concurrency:
group: baseminerals-1.12-${{ github.workflow }}-${{ github.ref }}
group: baseminerals-113-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

jobs:
cold-forge-bootstrap:
name: Cold Forge bootstrap
runs-on: ubuntu-latest
timeout-minutes: 75

steps:
- name: Check out source
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Install pinned Java 25 ForgeGradle Mavenizer runtime
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
with:
distribution: temurin
java-version: '25.0.3+9.0.LTS'

- name: Install pinned Java 8 compilation toolchain
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
with:
distribution: temurin
java-version: '8.0.502+7'

- name: Install pinned Java 17 Gradle runtime
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
with:
distribution: temurin
java-version: '17.0.1+12'

- name: Stage checksum-verified legacy dependencies
id: dependencies
shell: bash
run: |
set -euo pipefail
mirror="$RUNNER_TEMP/legacy-dependency-mirror"
bash gradle/stage-legacy-dependencies.sh "$mirror"
echo "repository=$mirror" >> "$GITHUB_OUTPUT"

- name: Bootstrap Forge from an empty cache
shell: bash
env:
GRADLE_USER_HOME: ${{ runner.temp }}/baseminerals-cold-gradle
run: |
set -euo pipefail
test ! -e .gradle
test ! -e "$GRADLE_USER_HOME"
mkdir -p "$GRADLE_USER_HOME"
chmod +x ./gradlew
gradle_args=(
classes verifyReleaseDependencies
-PlegacyDependencyVerificationRepository="${{ steps.dependencies.outputs.repository }}"
--no-daemon --no-build-cache --stacktrace --max-workers=2
-Dorg.gradle.java.installations.paths="$JAVA_HOME,$JAVA_HOME_8_X64,$JAVA_HOME_25_X64"
-Dorg.gradle.java.installations.auto-detect=false
-Dorg.gradle.java.installations.auto-download=false
)
./gradlew "${gradle_args[@]}"

- name: Verify same-cache bootstrap offline
shell: bash
env:
GRADLE_USER_HOME: ${{ runner.temp }}/baseminerals-cold-gradle
run: |
set -euo pipefail
gradle_args=(
classes verifyReleaseDependencies
-PlegacyDependencyVerificationRepository="${{ steps.dependencies.outputs.repository }}"
--rerun-tasks --offline --no-daemon --no-build-cache --stacktrace --max-workers=2
-Dorg.gradle.java.installations.paths="$JAVA_HOME,$JAVA_HOME_8_X64,$JAVA_HOME_25_X64"
-Dorg.gradle.java.installations.auto-detect=false
-Dorg.gradle.java.installations.auto-download=false
)
./gradlew "${gradle_args[@]}"

build:
name: Build, test, and audit
runs-on: ubuntu-latest
timeout-minutes: 90

timeout-minutes: 35
steps:
- name: Check out source
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Install pinned Java 25 ForgeGradle Mavenizer runtime
- name: Validate the Gradle wrapper
uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6
- name: Install Java 25 for Mavenizer
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
with:
distribution: temurin
java-version: '25.0.3+9.0.LTS'

- name: Install pinned Java 8 compilation and runtime toolchain
- name: Install Java 8 for compilation
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
with:
distribution: temurin
java-version: '8.0.502+7'

- name: Install pinned Java 17 Gradle runtime
- name: Install Java 17 for Gradle
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
with:
distribution: temurin
java-version: '17.0.1+12'

- name: Set up Gradle
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6

- name: Stage checksum-verified dependencies
id: dependencies
shell: bash
run: |
set -euo pipefail
mirror="$RUNNER_TEMP/legacy-dependency-mirror"
bash gradle/stage-legacy-dependencies.sh "$mirror"
echo "repository=$mirror" >> "$GITHUB_OUTPUT"

- name: Prepare clean packaged Forge runtime
id: forge
shell: bash
run: |
set -euo pipefail
runtime="$RUNNER_TEMP/forge-1.12.2-2588-runtime"
bash gradle/prepare-packaged-forge-runtime.sh "$runtime" "$JAVA_HOME_8_X64/bin/java"
echo "runtime=$runtime" >> "$GITHUB_OUTPUT"

- name: Install world-audit tools
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
with:
python-version: '3.12'

- name: Install pinned schema and workflow validators
run: python -m pip install -r tools/validation/requirements.txt

- name: Build, test, audit, qualify runtimes, and generate Eclipse launches
shell: bash
run: |
set -euo pipefail
chmod +x ./gradlew
gradle_args=(
clean check build javadoc verifyReleaseDependencies verifyReleaseArtifacts
writeReleaseChecksums prepareEclipse verifyProjectResources packagedForgeRuntimeTest packagedSourcePolicyTest
-PpythonExecutable=python3
-PpackagedForgeRuntimeOutput="$RUNNER_TEMP/baseminerals-packaged-checks"
-PpackagedSourcePolicyOutput="$RUNNER_TEMP/baseminerals-policy-checks"
-PreleaseBuild=true
-PlegacyDependencyVerificationRepository="${{ steps.dependencies.outputs.repository }}"
-PpackagedForgeRuntimeRoot="${{ steps.forge.outputs.runtime }}"
--no-daemon --stacktrace --max-workers=2
-Dorg.gradle.java.installations.paths="$JAVA_HOME,$JAVA_HOME_8_X64,$JAVA_HOME_25_X64"
-Dorg.gradle.java.installations.auto-detect=false
-Dorg.gradle.java.installations.auto-download=false
)
./gradlew "${gradle_args[@]}"
cp build/release/SHA256SUMS "$RUNNER_TEMP/first-SHA256SUMS"

- name: Verify the prepared release bundle
shell: bash
- name: Stage checksum-verified published dependencies
run: python3 gradle/stage-legacy-dependencies.py .gradle/legacy-dependencies
- name: Build, audit and generate Eclipse launches
run: |
set -euo pipefail
bundle="$RUNNER_TEMP/release-input"
mkdir -p "$bundle"
cp build/libs/BaseMinerals-2.5.1.112021{,-sources,-javadoc}.jar "$bundle/"
cp build/release/SHA256SUMS CHANGELOG.txt "$bundle/"
./gradlew verifyPreparedReleaseArtifacts verifyMavenCoordinates \
-PpreparedReleaseDir="$bundle" \
-PlegacyDependencyVerificationRepository="${{ steps.dependencies.outputs.repository }}" \
-Dorg.gradle.java.installations.paths="$JAVA_HOME,$JAVA_HOME_8_X64,$JAVA_HOME_25_X64" \
bash ./gradlew clean check build javadoc verify113ReleaseArtifacts write113ReleaseChecksums genEclipseRuns eclipse \
-PreleaseBuild=true -PlegacyDependencyVerificationRepository="$PWD/.gradle/legacy-dependencies" \
--no-daemon --stacktrace --max-workers=2 \
"-Dorg.gradle.java.installations.paths=$JAVA_HOME,$JAVA_HOME_8_X64,$JAVA_HOME_25_X64" \
-Dorg.gradle.java.installations.auto-detect=false \
-Dorg.gradle.java.installations.auto-download=false \
--offline --no-daemon --stacktrace --max-workers=2

- name: Verify reproducible release archives
shell: bash
run: |
set -euo pipefail
gradle_args=(
clean build javadoc verifyReleaseArtifacts writeReleaseChecksums
-PreleaseBuild=true
-PlegacyDependencyVerificationRepository="${{ steps.dependencies.outputs.repository }}"
--offline --no-daemon --no-build-cache --stacktrace --max-workers=2
-Dorg.gradle.java.installations.paths="$JAVA_HOME,$JAVA_HOME_8_X64,$JAVA_HOME_25_X64"
-Dorg.gradle.java.installations.auto-detect=false
-Dorg.gradle.java.installations.auto-download=false
)
./gradlew "${gradle_args[@]}"
cmp "$RUNNER_TEMP/first-SHA256SUMS" build/release/SHA256SUMS

- name: Stage the flat release bundle
run: |
mkdir -p build/release-bundle
cp build/libs/*.jar build/release/SHA256SUMS CHANGELOG.txt build/release-bundle/
- name: Upload audited release candidate
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: BaseMinerals-1.12.2-${{ github.sha }}
name: BaseMinerals-1.13.2-${{ github.sha }}
if-no-files-found: error
retention-days: 30
path: |
build/libs/BaseMinerals-2.5.1.112021.jar
build/libs/BaseMinerals-2.5.1.112021-sources.jar
build/libs/BaseMinerals-2.5.1.112021-javadoc.jar
build/release/SHA256SUMS
CHANGELOG.txt

- name: Upload bounded diagnostics on failure
path: build/release-bundle/
- name: Retain failure diagnostics
if: failure()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: BaseMinerals-1.12.2-diagnostics-${{ github.sha }}
name: BaseMinerals-1.13.2-diagnostics-${{ github.sha }}
if-no-files-found: ignore
retention-days: 14
path: |
build/test-results/**
build/reports/**
${{ runner.temp }}/baseminerals-packaged-checks/**/*-console.log
${{ runner.temp }}/baseminerals-packaged-checks/**/logs/*.log
${{ runner.temp }}/baseminerals-packaged-checks/**/crash-reports/*.txt
${{ runner.temp }}/baseminerals-packaged-checks/**/*-minerals.json
${{ runner.temp }}/baseminerals-packaged-checks/**/*-review.json
${{ runner.temp }}/baseminerals-packaged-checks/**/*-launch.json
${{ runner.temp }}/baseminerals-policy-checks/**/*-console.log
${{ runner.temp }}/baseminerals-policy-checks/**/*-minerals.json
${{ runner.temp }}/baseminerals-policy-checks/**/crash-reports/*.txt
build/problems/**

- name: Upload generation qualification evidence
if: always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: BaseMinerals-1.12.2-worldgen-${{ github.sha }}
if-no-files-found: ignore
retention-days: 30
path: |
${{ runner.temp }}/baseminerals-packaged-checks/results.json
${{ runner.temp }}/baseminerals-packaged-checks/timings.json
${{ runner.temp }}/baseminerals-packaged-checks/source-fixtures.json
${{ runner.temp }}/baseminerals-packaged-checks/**/input-jars.json
${{ runner.temp }}/baseminerals-packaged-checks/**/*-minerals.json
${{ runner.temp }}/baseminerals-packaged-checks/**/*-console.log
${{ runner.temp }}/baseminerals-policy-checks/results.json
${{ runner.temp }}/baseminerals-policy-checks/**/*-minerals.json
${{ runner.temp }}/baseminerals-policy-checks/**/*-console.log
6 changes: 3 additions & 3 deletions .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,11 +3,11 @@ name: CodeQL
on:
push:
branches:
- master-1.12
- 'feature/**'
- master-1.13.2
- feature/baseminerals-1.13.2
pull_request:
branches:
- master-1.12
- master-1.13.2
schedule:
- cron: '47 7 * * 4'

Expand Down
Loading
Loading