ci.yml

name: CI

on:
  push:
    branches:
      - main
  pull_request:

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository code
        uses: actions/checkout@v7

      - name: Setup Go
        uses: actions/setup-go@v7
        with:
          go-version-file: ./go.mod

      - name: Create fake PHP and .phar files
        run: |
          # These are needed so that the linter does not complain
          mkdir -p internal/legacy/archives
          touch internal/legacy/archives/platform.phar
          touch internal/legacy/archives/commands-upsun.json internal/legacy/archives/commands-platformsh.json internal/legacy/archives/commands-vendor.json
          touch internal/legacy/archives/php_windows_amd64
          touch internal/legacy/archives/php_linux_amd64
          touch internal/legacy/archives/php_linux_arm64
          touch internal/legacy/archives/php_darwin_amd64
          touch internal/legacy/archives/php_darwin_arm64
          touch internal/config/embedded-config.yaml

      - name: Run lint-gomod
        run: make lint-gomod

      - name: Run golangci-lint
        uses: golangci/golangci-lint-action@v9
        with:
          version: v2.14
          args: --timeout=5m

      - name: Run tests
        run: make test

      - name: Check goreleaser config
        run: make goreleaser-check

  # Checks that the embedded lint registry matches upstream.
  # Fails when upstream publishes changes; run `make lint-assets` to refresh.
  # Non-blocking, since upstream changes are unrelated to the pull request.
  lint-assets:
    runs-on: ubuntu-latest
    continue-on-error: true

    steps:
      - name: Check out repository code
        uses: actions/checkout@v7

      - name: Setup Go
        uses: actions/setup-go@v7
        with:
          go-version-file: ./go.mod

      - name: Check embedded lint assets are up to date
        run: make lint-assets-check

  legacy-php:
    runs-on: ubuntu-latest

    defaults:
      run:
        working-directory: legacy

    steps:
      - name: Check out repository code
        uses: actions/checkout@v7

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.4'
          extensions: curl, openssl, phar, zlib
          tools: composer:v2

      - name: Get Composer cache directory
        id: composer-cache
        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

      - name: Cache Composer dependencies
        uses: actions/cache@v6
        with:
          path: ${{ steps.composer-cache.outputs.dir }}
          key: ${{ runner.os }}-composer-${{ hashFiles('legacy/composer.lock') }}
          restore-keys: ${{ runner.os }}-composer-

      - name: Install dependencies
        run: composer install --no-interaction

      - name: Lint PHP (php-cs-fixer)
        run: make lint-php-cs-fixer

      - name: Lint PHP (phpstan)
        run: make lint-phpstan

      - name: Run PHPUnit tests
        run: ./scripts/test/unit.sh

      - name: Build platform.phar
        run: php bin/platform self:build --no-interaction --output=platform.phar

  integration-test:
    runs-on: ubuntu-latest

    steps:
      - name: Check out repository code
        uses: actions/checkout@v7

      - name: Setup Go
        uses: actions/setup-go@v7
        with:
          go-version-file: ./go.mod

      - name: Setup PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.4'
          extensions: curl, openssl, phar, zlib
          tools: composer:v2

      - name: Get Composer cache directory
        id: composer-cache
        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT

      - name: Cache Composer dependencies
        uses: actions/cache@v6
        with:
          path: ${{ steps.composer-cache.outputs.dir }}
          key: ${{ runner.os }}-composer-${{ hashFiles('legacy/composer.lock') }}
          restore-keys: ${{ runner.os }}-composer-

      - name: Install legacy dependencies
        run: cd legacy && composer install --no-interaction

      - name: Download PHP binary
        run: make php

      - name: Build platform.phar
        run: |
          mkdir -p internal/legacy/archives
          cd legacy && php bin/platform self:build --no-interaction --output=../internal/legacy/archives/platform.phar

      - name: Build CLI
        run: make single

      - name: Install shells for completion tests
        run: sudo apt-get update && sudo apt-get install -y bash-completion zsh fish

      - name: Run integration tests
        run: make integration-test

      - name: Run integration tests with Go auth
        run: cd integration-tests && go test -v -count=1 ./...
        env:
          TEST_CLI_GO_AUTH: '1'

  # The only Windows coverage: which certificates the embedded PHP trusts.
  windows-cert-store:
    runs-on: windows-latest

    steps:
      - name: Check out repository code
        uses: actions/checkout@v7

      - name: Setup Go
        uses: actions/setup-go@v7
        with:
          go-version-file: ./go.mod

      - name: Download embedded PHP files
        shell: bash
        run: |
          php_version=$(grep -m1 '^PHP_VERSION' Makefile | cut -d' ' -f3)
          mkdir -p internal/legacy/archives
          curl -fSL "https://github.com/upsun/cli-php-builds/releases/download/php-$php_version/php-$php_version-windows-amd64.exe" \
            -o internal/legacy/archives/php_windows.exe
          curl -fSL https://curl.se/ca/cacert.pem -o internal/legacy/archives/cacert.pem
          # Only needed so that the package builds.
          touch internal/legacy/archives/platform.phar
          touch internal/legacy/archives/commands-upsun.json internal/legacy/archives/commands-platformsh.json

      - name: Run Windows tests
        shell: bash
        env:
          CLI_TEST_MODIFY_CERT_STORE: '1'
        run: go test -v -count=1 -timeout 3m -run TestWindows ./internal/legacy/

      # Reading the certificate store happens before every legacy command.
      - name: Measure building the CA bundle
        if: always()
        shell: bash
        run: go test -run '^$' -bench BenchmarkWindows -benchmem ./internal/legacy/