ci.yml

name: CI

on:
  push:
    branches: [main, main-ts7, ts7-release, 'release-*', 'weswigham/*']
  pull_request:
    branches: [main, main-ts7, ts7-release, 'release-*', 'weswigham/*']
  merge_group:
    branches: [main, main-ts7, ts7-release, 'release-*', 'weswigham/*']

permissions:
  contents: read

defaults:
  run:
    shell: bash

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: npx hereby build
      - run: npx hereby build:api

  release-build:
    if: ${{ github.repository == 'microsoft/TypeScript' && github.event_name != 'merge_group' }}
    runs-on: TypeScript-1ES-GitHub-TypeScript-1
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: npx hereby typescript:release --forRelease --setPrerelease dev.0.0
      - run: npx hereby vscode-typescript:release --forRelease --vscodeTypescriptRelease

  extension:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - run: npm ci
      - run: npm run extension:build

  package-feed-proxy:
    runs-on: ubuntu-slim
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
          package-manager-cache: false
      - run: npm ci --registry=https://packagefeedproxy.microsoft.io/npm/

  go-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: ./.github/actions/setup-go
      - name: Prepare standalone tsc module
        run: |
          mkdir "$RUNNER_TEMP/go-test-bin"
          ln -s "$(go env GOROOT)/bin/go" "$RUNNER_TEMP/go-test-bin/go"
          cp -R tsc "$RUNNER_TEMP/tsc"
      - name: Tests without Node.js
        run: |
          export PATH="$RUNNER_TEMP/go-test-bin"
          export CGO_ENABLED=0
          ! command -v node
          cd "$RUNNER_TEMP/tsc"
          go test ./...
          go test -run=- -bench=. -benchtime=1x ./...

  go-test-wasm:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: npx hereby test:wasm

  test:
    strategy:
      fail-fast: ${{ github.event_name == 'merge_group' }}
      matrix:
        config:
          - runner: ubuntu-latest
            os: linux
            coverage: true
            main: true
          - runner: windows-latest
            os: windows
            coverage: true
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: ubuntu-26.04-arm
            name: 'linux arm64'
            os: linux
            coverage: true
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: windows-11-arm
            name: 'windows arm64'
            os: windows
            coverage: true
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: macos-latest
            os: macos
            coverage: true
            skip: ${{ github.event_name == 'merge_group' || github.event_name == 'pull_request' }}
          - runner: TypeScript-1ES-GitHub-TypeScript-1
            os: linux
            name: 'race mode'
            race: true
            skip: ${{ github.event_name == 'merge_group' || github.repository != 'microsoft/TypeScript' }}
          - runner: ubuntu-latest
            os: linux
            name: 'noembed'
            noembed: true
          - runner: ubuntu-latest
            os: linux
            name: 'concurrent test programs'
            concurrent-test-programs: true
            coverage: true
            skip: ${{ github.event_name == 'merge_group' }}
        exclude:
          - config:
              skip: true

    name: test (${{ matrix.config.name || matrix.config.runner }})
    runs-on: ${{ matrix.config.runner }}
    permissions:
      id-token: write
      contents: read
    env:
      TSGO_HEREBY_RACE: ${{ (matrix.config.race && 'true') || 'false' }}
      TSGO_HEREBY_NOEMBED: ${{ (matrix.config.noembed && 'true') || 'false' }}
      TSGO_HEREBY_CONCURRENT_TEST_PROGRAMS: ${{ (matrix.config.concurrent-test-programs && 'true') || 'false' }}
      TSGO_HEREBY_COVERAGE: ${{ (matrix.config.coverage && github.event_name != 'merge_group' && 'true') || 'false' }}
    steps:
      - run: git config --system core.longpaths true
        if: ${{ matrix.config.os == 'windows' }}
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - if: ${{ !matrix.config.main }}
        name: Disable PR annotations
        run: |
          echo "::remove-matcher owner=eslint-compact::"
          echo "::remove-matcher owner=eslint-stylish::"
          echo "::remove-matcher owner=tsc::"
          echo "::remove-matcher owner=go::"
      - run: npm ci
      - name: Tests
        id: test
        run: npx hereby test:tsc
        env:
          TMPDIR: ${{ runner.temp }}
      - name: Benchmarks
        run: npx hereby test:benchmarks
        env:
          TMPDIR: ${{ runner.temp }}
      - run: git add .
      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
        if: ${{ always() && matrix.config.coverage && github.event_name != 'merge_group' }}
        with:
          use_oidc: ${{ !(github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork) }}
          name: ${{ matrix.config.name || matrix.config.runner }}
          directory: ./coverage
      - run: git diff --staged --exit-code --stat
      - name: Print baseline diff on failure
        if: ${{ failure() && steps.test.conclusion == 'failure' }}
        run: |
          npx hereby baseline-accept
          git add tsc/testdata/baselines/reference
          git diff --staged --exit-code
      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        if: ${{ failure() && steps.test.conclusion == 'failure' }}
        with:
          name: ${{ matrix.config.name || matrix.config.os }}-new-baselines
          path: tsc/testdata/baselines/local

  test-extra:
    strategy:
      fail-fast: ${{ github.event_name == 'merge_group' }}
      matrix:
        config:
          - runner: ubuntu-latest
            os: linux
            coverage: true
            main: true
          - runner: windows-latest
            os: windows
            coverage: true
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: macos-latest
            os: macos
            coverage: true
            skip: ${{ github.event_name == 'merge_group' || github.event_name == 'pull_request' }}
        exclude:
          - config:
              skip: true

    name: test extra (${{ matrix.config.runner }})
    runs-on: ${{ matrix.config.runner }}
    permissions:
      id-token: write
      contents: read
    env:
      TSGO_HEREBY_COVERAGE: ${{ (matrix.config.coverage && github.event_name != 'merge_group' && 'true') || 'false' }}
    steps:
      - run: git config --system core.longpaths true
        if: ${{ matrix.config.os == 'windows' }}
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - if: ${{ !matrix.config.main }}
        name: Disable PR annotations
        run: |
          echo "::remove-matcher owner=eslint-compact::"
          echo "::remove-matcher owner=eslint-stylish::"
          echo "::remove-matcher owner=tsc::"
          echo "::remove-matcher owner=go::"
      - run: npm ci
      - run: npx hereby test:extension
      - run: npx hereby test:tools
      - run: npx hereby test:api
      - run: npx hereby test:api:wasm
      - run: npx hereby test:benchmarks:api
      - run: npx playwright install --with-deps chromium
        if: ${{ matrix.config.main }}
      - run: npx hereby test:api:browser-smoke
        if: ${{ matrix.config.main }}
      - run: git add .
      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
        if: ${{ always() && matrix.config.coverage && github.event_name != 'merge_group' }}
        with:
          use_oidc: ${{ !(github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork) }}
          name: extra-${{ matrix.config.runner }}
          directory: ./coverage
      - run: git diff --staged --exit-code --stat

  lint:
    strategy:
      fail-fast: ${{ github.event_name == 'merge_group' }}
      matrix:
        config:
          - runner: ubuntu-latest
            os: linux
            main: true
          - runner: windows-latest
            os: windows
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: ubuntu-latest
            os: linux
            name: 'noembed'
            noembed: true
            skip: ${{ github.event_name == 'merge_group' }}
          # Cross-lint OSes with build-tagged files we have no runner for.
          - runner: ubuntu-latest
            name: 'darwin'
            goos: darwin
            goarch: arm64
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: ubuntu-latest
            name: 'freebsd'
            goos: freebsd
            goarch: amd64
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: ubuntu-latest
            name: 'dragonfly'
            goos: dragonfly
            goarch: amd64
            skip: ${{ github.event_name == 'merge_group' }}
          - runner: ubuntu-latest
            name: 'solaris'
            goos: solaris
            goarch: amd64
            skip: ${{ github.event_name == 'merge_group' }}
        exclude:
          - config:
              skip: true
    name: lint (${{ matrix.config.name || matrix.config.runner }})
    runs-on: ${{ matrix.config.runner }}
    env:
      TSGO_HEREBY_NOEMBED: ${{ (matrix.config.noembed && 'true') || 'false' }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - if: ${{ !matrix.config.main }}
        name: Disable PR annotations
        run: |
          echo "::remove-matcher owner=eslint-compact::"
          echo "::remove-matcher owner=eslint-stylish::"
          echo "::remove-matcher owner=tsc::"
          echo "::remove-matcher owner=go::"
      - run: npm ci
      - run: npx hereby lint
        env:
          GOOS: ${{ matrix.config.goos }}
          GOARCH: ${{ matrix.config.goarch }}

  format:
    runs-on: ubuntu-slim
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - run: npm ci
      - run: npx hereby check:format

  generate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: '>=22.18.0'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: npx hereby generate
      - run: npx hereby check:scripts
      - run: git add .
      - run: git diff --staged --exit-code --stat

  codegen:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: '>=22.18.0'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: npx hereby test:codegen

  tidy:
    runs-on: ubuntu-slim
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: ./.github/actions/setup-go
      - run: go -C ./tsc mod tidy -diff
      - run: go -C ./tools mod tidy -diff
      - run: go work sync
      - run: git diff --exit-code

  smoke:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: npx hereby build --race
      - run: ./built/local/tsc -p ./tsc/testdata/fixtures/compiler --noEmit --singleThreaded
      - run: ./built/local/tsc -p ./tsc/testdata/fixtures/compiler --noEmit

  misc:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 'lts/*'
      - uses: ./.github/actions/setup-go
      - run: npm ci
      - run: go -C ./tools run ./cmd/checkmodpaths "$PWD"
      - run: npx hereby check:herebyfile
      - run: npx hereby check:vsce-version
      - run: npx hereby check:scripts
      - run: npx hereby typescript:check-platforms

  required:
    runs-on: ubuntu-slim
    if: ${{ always() }}
    needs:
      - build
      - codegen
      - release-build
      - extension
      - format
      - generate
      - go-test
      - go-test-wasm
      - lint
      - misc
      - package-feed-proxy
      - smoke
      - test
      - test-extra
      - tidy
    steps:
      - name: Check required jobs
        env:
          NEEDS: ${{ toJson(needs) }}
        run: |
          ! echo "$NEEDS" | jq -e 'to_entries[] | { job: .key, result: .value.result } | select((.result == "success" or .result == "skipped") | not)'