build-and-tests.yml

name: CI
env:
  DEBUG: napi:*
  APP_NAME: rollup
  MACOSX_DEPLOYMENT_TARGET: '10.13'

on:
  push:
    branches:
      - master
    tags:
      - 'v*.*.**'
  pull_request:
    types:
      - synchronize
      - opened
      - reopened
  merge_group:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  lint:
    name: Lint and Audit
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Checkout Commit
        uses: actions/checkout@v4
      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 20
      - name: Cache Node Modules
        id: cache-node-modules
        uses: actions/cache@v4
        with:
          path: node_modules
          key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        if: steps.cache-node-modules.outputs.cache-hit != 'true'
        run: npm ci --ignore-scripts
      - name: Lint
        run: npm run ci:lint
      - name: Vulnerabilities
        run: npm run check-audit
      - name: Optional Dependencies
        run: npm run test:package
      - name: CLI Docs
        run: npm run test:options
      - name: Generated Code
        run: |
          npm run build:ast-converters
          git diff HEAD --exit-code --ignore-space-at-eol

  build:
    strategy:
      fail-fast: false
      matrix:
        settings:
          # WASM
          - host: windows-latest
            target: x86_64-pc-windows-msvc
            name: wasm
            is-wasm-build: true
            build: >-
              set -e &&
              rustup target add wasm32-unknown-unknown &&
              npm run build:wasm
            path: |
              wasm/
              .empty
          - host: windows-latest
            target: x86_64-pc-windows-msvc
            name: wasm-node
            is-wasm-build: true
            build: >-
              set -e &&
              rustup target add wasm32-unknown-unknown &&
              npm run build:wasm:node
            path: |
              wasm-node/
              .empty

          # Windows
          - host: windows-latest
            build: RUSTFLAGS="-C target-feature=+crt-static" npm run build:napi -- --release
            target: x86_64-pc-windows-msvc
          - host: windows-latest
            build: >-
              set -e &&
              rustup target add i686-pc-windows-msvc &&
              npm run build:napi -- --release --target i686-pc-windows-msvc
            target: i686-pc-windows-msvc
          - host: windows-latest
            target: aarch64-pc-windows-msvc
            build: npm run build:napi -- --release --target aarch64-pc-windows-msvc

          # MacOS
          - host: macos-latest
            target: x86_64-apple-darwin
            build: >-
              set -e &&
              npm run build:napi -- --release --target x86_64-apple-darwin
          - host: macos-latest
            target: aarch64-apple-darwin
            build: >-
              set -e &&
              rustup target add aarch64-apple-darwin &&
              npm run build:napi -- --release --target aarch64-apple-darwin

          # Linux
          - host: ubuntu-latest
            target: x86_64-unknown-linux-gnu
            docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian
            build: >-
              set -e &&
              rustup target add x86_64-unknown-linux-gnu &&
              npm run build:napi -- --release --target x86_64-unknown-linux-gnu
          - host: ubuntu-latest
            target: x86_64-unknown-linux-musl
            docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
            build: >-
              set -e &&
              npm run build:napi -- --release
          - host: ubuntu-latest
            target: armv7-unknown-linux-gnueabihf
            zig: true
            setup: |
              sudo apt-get update
              sudo apt-get install gcc-arm-linux-gnueabihf -y
            build: >-
              set -e &&
              npm run build:napi -- --release --target armv7-unknown-linux-gnueabihf
          - host: ubuntu-latest
            target: armv7-unknown-linux-musleabihf
            zig: true
            build: >-
              set -e &&
              npm run build:napi -- --release --target armv7-unknown-linux-musleabihf
          - host: ubuntu-latest
            target: aarch64-unknown-linux-gnu
            docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian-aarch64
            build: >-
              set -e &&
              export JEMALLOC_SYS_WITH_LG_PAGE=16 &&
              rustup default stable &&
              rustup target add aarch64-unknown-linux-gnu &&
              npm run build:napi -- --release --target aarch64-unknown-linux-gnu
          - host: ubuntu-latest
            target: aarch64-unknown-linux-musl
            docker: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
            build: >-
              set -e &&
              export JEMALLOC_SYS_WITH_LG_PAGE=16 &&
              rustup default stable &&
              rustup target add aarch64-unknown-linux-musl &&
              RUSTFLAGS='-C target-feature=-crt-static -C linker=aarch64-linux-musl-gcc' npm run build:napi -- --release --target aarch64-unknown-linux-musl
          - host: ubuntu-latest
            target: armv7-linux-androideabi
            build: >-
              set -e &&
              npm run build:napi -- --release --target armv7-linux-androideabi
          - host: ubuntu-latest
            target: aarch64-linux-android
            build: >-
              set -e &&
              npm run build:napi -- --release --target aarch64-linux-android
          - host: ubuntu-latest
            target: riscv64gc-unknown-linux-gnu
            setup: |
              sudo apt-get update
              sudo apt-get install gcc-riscv64-linux-gnu -y
            build: >-
              set -e &&
              rustup target add riscv64gc-unknown-linux-gnu &&
              npm run build:napi -- --release --target riscv64gc-unknown-linux-gnu
          - host: ubuntu-latest
            target: powerpc64le-unknown-linux-gnu
            setup: |
              sudo apt-get update
              sudo apt-get install gcc-powerpc64le-linux-gnu -y
            build: >-
              set -e &&
              export CARGO_TARGET_POWERPC64LE_UNKNOWN_LINUX_GNU_LINKER=powerpc64le-linux-gnu-gcc && rustup target add powerpc64le-unknown-linux-gnu &&
              npm run build:napi -- --release --target powerpc64le-unknown-linux-gnu
          - host: ubuntu-latest
            target: s390x-unknown-linux-gnu
            setup: |
              sudo apt-get update
              sudo apt-get install gcc-s390x-linux-gnu -y
            build: >-
              set -e &&
              export CARGO_TARGET_S390X_UNKNOWN_LINUX_GNU_LINKER=s390x-linux-gnu-gcc &&
              rustup target add s390x-unknown-linux-gnu &&
              npm run build:napi -- --release --target s390x-unknown-linux-gnu
    name: Build ${{ matrix.settings.name || matrix.settings.target }}
    runs-on: ${{ matrix.settings.host }}
    timeout-minutes: 30
    steps:
      - name: Checkout Commit
        uses: actions/checkout@v4
      - name: Setup Node
        uses: actions/setup-node@v4
        if: ${{ !matrix.settings.docker }}
        with:
          node-version: 20
      - name: Install Toolchain
        uses: dtolnay/rust-toolchain@stable
        if: ${{ !matrix.settings.docker }}
        with:
          toolchain: stable
          targets: ${{ matrix.settings.target }}
      - name: Cache cargo
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry/index/
            ~/.cargo/registry/cache/
            ~/.cargo/git/db/
            .cargo-cache
            rust/target/
          key: ${{ matrix.settings.name || matrix.settings.target }}-cargo-${{ matrix.settings.host }}-${{ hashFiles('rust/Cargo.lock') }}
          restore-keys: ${{ matrix.settings.name || matrix.settings.target }}-cargo-${{ matrix.settings.host }}
      - uses: goto-bus-stop/setup-zig@v2
        if: ${{ matrix.settings.zig }}
        with:
          version: 0.10.1
      - name: Setup toolchain
        run: ${{ matrix.settings.setup }}
        if: ${{ matrix.settings.setup }}
        shell: bash
      - name: Cache Node Modules
        id: cache-node-modules
        uses: actions/cache@v4
        with:
          path: node_modules
          key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        if: steps.cache-node-modules.outputs.cache-hit != 'true'
        run: npm ci --ignore-scripts
      - name: Build in docker
        uses: addnab/docker-run-action@v3
        if: ${{ matrix.settings.docker }}
        with:
          image: ${{ matrix.settings.docker }}
          options: '--user 0:0 -v ${{ github.workspace }}/.cargo-cache/git/db:/usr/local/cargo/git/db -v ${{ github.workspace }}/.cargo/registry/cache:/usr/local/cargo/registry/cache -v ${{ github.workspace }}/.cargo/registry/index:/usr/local/cargo/registry/index -v ${{ github.workspace }}:/build -w /build'
          run: ${{ matrix.settings.build }}
      - name: Build
        run: ${{ matrix.settings.build }}
        if: ${{ !matrix.settings.docker }}
        shell: bash
      - name: Upload wasm artifact
        uses: actions/upload-artifact@v4
        with:
          name: bindings-${{ matrix.settings.name }}
          path: ${{ matrix.settings.path }}
          if-no-files-found: error
        if: ${{ matrix.settings.is-wasm-build }}
      - name: Upload napi artifact
        uses: actions/upload-artifact@v4
        with:
          name: bindings-${{ matrix.settings.target }}
          path: ${{ env.APP_NAME }}.*.node
          if-no-files-found: error
        if: ${{ !matrix.settings.is-wasm-build }}

  # smoke test for some architectures that do not receive the full test suite
  smoke-test:
    permissions:
      packages: write # for caching container images
    name: Smoke Test ${{ matrix.settings.target }}
    needs:
      - build
    strategy:
      fail-fast: false
      matrix:
        settings:
          - arch: aarch64
            distro: ubuntu_latest
            target: aarch64-unknown-linux-gnu
          - arch: aarch64
            distro: alpine_latest
            target: aarch64-unknown-linux-musl
          - arch: armv7
            distro: ubuntu_latest
            target: armv7-unknown-linux-gnueabihf
# There is a bug that hangs the build when running npm
#          - arch: armv7
#            distro: alpine_latest
#            target: armv7-unknown-linux-musleabihf
          - arch: ppc64le
            distro: ubuntu_latest
            target: powerpc64le-unknown-linux-gnu
            use-nvm: true
          - arch: s390x
            distro: ubuntu_latest
            target: s390x-unknown-linux-gnu
            use-nvm: true
# I could not find a way to install Node without compiling from source
#          - arch: riscv64
#            distro: ubuntu_latest
#            target: riscv64gc-unknown-linux-gnu
    runs-on: ubuntu-latest
    timeout-minutes: 120
    steps:
      - name: Checkout Commit
        uses: actions/checkout@v4
      - name: Cache Node Modules
        id: cache-node-modules
        uses: actions/cache@v4
        with:
          path: node_modules
          key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        if: steps.cache-node-modules.outputs.cache-hit != 'true'
        run: npm ci --ignore-scripts
      - name: Build JS
        run: npm run build:cjs
      - name: Download napi artifacts
        uses: actions/download-artifact@v4
        with:
          name: bindings-${{ matrix.settings.target }}
          path: dist/
      - name: Run Smoke Test
        uses: uraimo/run-on-arch-action@v2
        with:
          arch: ${{ matrix.settings.arch }}
          distro: ${{ matrix.settings.distro }}
          githubToken: ${{ github.token }}
          install: |
            case "${{ matrix.settings.distro }}" in
              ubuntu*)
                apt-get update -y
                apt-get install -y curl git
                if [[ -z "${{ matrix.settings.use-nvm }}" ]]; then
                  curl -fsSL https://deb.nodesource.com/setup_lts.x | bash -
                  apt-get install -y nodejs
                fi
                ;;
              alpine*)
                apk add nodejs npm git
                ;;
            esac
          run: |
            set -e
            if [[ -n "${{ matrix.settings.use-nvm }}" ]]; then
              curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.1/install.sh | bash
              source ~/.nvm/nvm.sh
              nvm install --lts
            fi
            echo "Node: $(node -v)"
            echo "npm: $(npm -v)"
            git config --global --add safe.directory /home/runner/work/rollup/rollup
            chmod +x dist/bin/rollup
            dist/bin/rollup --version | grep -E 'rollup v[0-9]+\.[0-9]+\.[0-9]+'
            mv dist dist-build
            node dist-build/bin/rollup --config rollup.config.ts --configPlugin typescript --configTest --forceExit
            cp dist-build/rollup.*.node dist/
            dist/bin/rollup --version | grep -E 'rollup v[0-9]+\.[0-9]+\.[0-9]+'

  test:
    name: Test${{ matrix.additionalName || '' }} Node ${{ matrix.node }} (${{ matrix.settings.target }})
    needs:
      - build
    strategy:
      fail-fast: false
      matrix:
        settings:
          - host: ubuntu-latest
            target: x86_64-unknown-linux-gnu
          - host: windows-latest
            target: x86_64-pc-windows-msvc
          - host: macos-latest
            target: aarch64-apple-darwin
        node:
          - '18.0.0'
          - '20'
        include:
          - settings:
              host: ubuntu-latest
              target: x86_64-unknown-linux-gnu
            node: '20'
            command: 'ci:coverage'
            additionalName: ' with Coverage'
            coverage: true
          - settings:
              host: ubuntu-latest
              target: x86_64-unknown-linux-gnu
            node: '18.0.0'
            command: 'ci:test:all'
            additionalName: ' with Additional Tests'
    runs-on: ${{ matrix.settings.host }}
    timeout-minutes: 15
    steps:
      - name: Checkout Commit
        uses: actions/checkout@v4
      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node }}
          check-latest: true
      - name: Cache Node Modules
        id: cache-node-modules
        uses: actions/cache@v4
        with:
          path: node_modules
          key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        if: steps.cache-node-modules.outputs.cache-hit != 'true'
        run: npm ci --ignore-scripts
      - name: Download napi artifacts
        uses: actions/download-artifact@v4
        with:
          name: bindings-${{ matrix.settings.target }}
          path: .
      - name: Download wasm artifacts
        uses: actions/download-artifact@v4
        with:
          name: bindings-wasm
      - name: Build and test Rollup
        run: npm run ${{ matrix.command || 'ci:test:only' }}
        env:
          CI: true
      - name: Upload coverage
        uses: codecov/codecov-action@v5
        if: matrix.coverage
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          commit_parent: ${{ github.event.pull_request.head.sha }}

  publish:
    permissions:
      pull-requests: write # for writing comments
      issues: write # for writing comments
      contents: write # for creating a release
    name: Publish
    runs-on: ubuntu-latest
    timeout-minutes: 15
    needs:
      - lint
      - test
      - smoke-test
    # This needs to be adapted for Rollup 5
    if: startsWith(github.ref_name, 'v4')
    steps:
      - name: Checkout Commit
        uses: actions/checkout@v4
        with:
          # Necessary to find the commits included in the release
          fetch-depth: 0
      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node }}
          check-latest: true
      - name: Cache Node Modules
        id: cache-node-modules
        uses: actions/cache@v4
        with:
          path: node_modules
          key: node-modules-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        if: steps.cache-node-modules.outputs.cache-hit != 'true'
        run: npm ci --ignore-scripts
      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts
      - name: Copy wasm files
        run: cp -R artifacts/bindings-wasm/wasm .
      - name: Build JavaScript
        run: npm run build:cjs && cp artifacts/*/*.node dist/ && npm run build:bootstrap
      - name: Move artifacts
        run: npm run ci:artifacts
      - name: Publish
        run: |
          if git --no-pager log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$";
          then
            echo "Publishing regular release"
            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
            npm publish --access public
          elif git --no-pager log -1 --pretty=%B | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+-[0-9]\+$";
          then
            echo "Publishing beta release"
            echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
            npm publish --tag beta --access public
          else
            echo "Not a release, skipping publish"
          fi
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          ROLLUP_RELEASE: 'releasing'