main #6558

Workflow file for this run

	name: main
	on:
	pull_request:
	branches:
	- master
	push:
	branches:
	- master
	tags:
	- v*
	schedule:
	- cron: 32 2 * * *
	env:
	ACTIONLINT_VERSION: 1.7.1 # https://github.com/rhysd/actionlint/releases
	AGE_VERSION: 1.2.0 # https://github.com/FiloSottile/age/releases
	CHOCOLATEY_VERSION: 2.2.2 # https://github.com/chocolatey/choco/releases
	EDITORCONFIG_CHECKER_VERSION: 3.0.1 # https://github.com/editorconfig-checker/editorconfig-checker/releases
	FIND_TYPOS_VERSION: 0.0.3 # https://github.com/twpayne/find-typos/tags
	GO_VERSION: 1.22.4 # https://go.dev/doc/devel/release
	GOFUMPT_VERSION: 0.6.0 # https://github.com/mvdan/gofumpt/releases
	GOLANGCI_LINT_VERSION: 1.59.1 # https://github.com/golangci/golangci-lint/releases
	GOLINES_VERSION: 0.12.2 # https://github.com/segmentio/golines/releases
	GORELEASER_VERSION: 2.0.1 # https://github.com/goreleaser/goreleaser/releases
	GOVERSIONINFO_VERSION: 1.4.0 # https://github.com/josephspurrier/goversioninfo/releases
	RAGE_VERSION: 0.10.0 # https://github.com/str4d/rage/releases
	jobs:
	changes:
	runs-on: ubuntu-22.04
	outputs:
	code: ${{ steps.filter.outputs.code }}
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- id: filter
	uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36
	with:
	filters: \|
	code:
	- '*/.go'
	- '.github/workflows/main.yml'
	- '.goreleaser.yaml'
	- 'Makefile'
	- 'assets/*/.tmpl'
	- 'assets/docker/**'
	- 'assets/scripts/*.py'
	- 'assets/scripts/generate-commit.go'
	- 'assets/scripts/stow-to-chezmoi.sh'
	- 'assets/vagrant/**'
	- 'completions/**'
	- 'go.*'
	- 'internal/**/!(install.sh.tmpl)'
	codeql:
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: ubuntu-22.04
	permissions:
	security-events: write
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 1
	- uses: github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f
	with:
	languages: go
	- uses: github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f
	misspell:
	runs-on: ubuntu-22.04
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- uses: reviewdog/action-misspell@8cd4a880dd86b1b175092c18c23cdec31283d654
	with:
	locale: US
	ignore: ackward
	test-alpine:
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: ubuntu-22.04
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- name: test
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	( cd assets/docker && ./test.sh alpine )
	test-archlinux:
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: ubuntu-22.04
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- name: test
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	( cd assets/docker && ./test.sh archlinux )
	test-macos:
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: macos-12
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- name: build
	run: \|
	go build ./...
	- name: run
	run: \|
	go run . --version
	- name: install-age
	run: \|
	brew install age
	age --version
	- name: install-rage
	run: \|
	brew tap str4d.xyz/rage https://str4d.xyz/rage
	brew install rage
	rage --version
	- name: install-keepassxc
	run: \|
	brew install keepassxc
	keepassxc-cli --version
	- name: test
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	go test -race ./...
	test-oldstable-go:
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: ubuntu-22.04
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: oldstable
	- name: build
	run: \|
	go build ./...
	- name: run
	run: \|
	go run . --version
	- name: install-age
	run: \|
	cd "$(mktemp -d)"
	curl -fsSL "https://github.com/FiloSottile/age/releases/download/v${AGE_VERSION}/age-v${AGE_VERSION}-linux-amd64.tar.gz" \| tar xzf -
	sudo install -m 755 age/age /usr/local/bin
	sudo install -m 755 age/age-keygen /usr/local/bin
	- name: install-rage
	run: \|
	cd "$(mktemp -d)"
	curl -fsSL "https://github.com/str4d/rage/releases/download/v${RAGE_VERSION}/rage-v${RAGE_VERSION}-x86_64-linux.tar.gz" \| tar xzf -
	sudo install -m 755 rage/rage /usr/local/bin
	sudo install -m 755 rage/rage-keygen /usr/local/bin
	- name: test
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	go test ./...
	test-release:
	needs: changes
	runs-on: ubuntu-20.04 # use older Ubuntu for older glibc
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 0
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- name: install-release-dependencies
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	run: \|
	sudo apt-get --quiet update
	sudo apt-get --no-install-suggests --no-install-recommends --quiet --yes install musl-tools snapcraft
	# https://github.com/goreleaser/goreleaser/issues/1715
	# https://bugs.launchpad.net/snapcraft/+bug/1889741
	mkdir -p "${HOME}/.cache/snapcraft/download"
	mkdir -p "${HOME}/.cache/snapcraft/stage-packages"
	mkdir -p /opt/chocolatey
	wget -q -O - "https://github.com/chocolatey/choco/releases/download/${CHOCOLATEY_VERSION}/chocolatey.v${CHOCOLATEY_VERSION}.tar.gz" \| tar -xz -C "/opt/chocolatey"
	echo '#!/bin/bash' >> /usr/local/bin/choco
	echo 'mono /opt/chocolatey/choco.exe $@' >> /usr/local/bin/choco
	chmod +x /usr/local/bin/choco
	- name: create-syso
	run: \|
	make create-syso
	- name: build-release
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200
	with:
	version: ${{ env.GORELEASER_VERSION }}
	args: release --skip=sign --snapshot --timeout=1h
	- name: upload-artifact-chezmoi-darwin-amd64
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
	with:
	name: chezmoi-darwin-amd64
	path: dist/chezmoi-nocgo_darwin_amd64_v1/chezmoi
	- name: upload-artifact-chezmoi-darwin-arm64
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
	with:
	name: chezmoi-darwin-arm64
	path: dist/chezmoi-nocgo_darwin_arm64/chezmoi
	- name: upload-artifact-chezmoi-linux-amd64
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
	with:
	name: chezmoi-linux-amd64
	path: dist/chezmoi-cgo-glibc_linux_amd64_v1/chezmoi
	- name: upload-artifact-chezmoi-linux-musl-amd64
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
	with:
	name: chezmoi-linux-amd64-musl
	path: dist/chezmoi-cgo-musl_linux_amd64_v1/chezmoi
	- name: upload-artifact-chezmoi-windows-amd64.exe
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
	with:
	name: chezmoi-windows-amd64
	path: dist/chezmoi-nocgo_windows_amd64_v1/chezmoi.exe
	test-ubuntu:
	needs: changes
	runs-on: ubuntu-20.04 # use older Ubuntu for older glibc
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 0
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- name: install-age
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	run: \|
	cd "$(mktemp -d)"
	curl -fsSL "https://github.com/FiloSottile/age/releases/download/v${AGE_VERSION}/age-v${AGE_VERSION}-linux-amd64.tar.gz" \| tar xzf -
	sudo install -m 755 age/age /usr/local/bin
	sudo install -m 755 age/age-keygen /usr/local/bin
	- name: install-rage
	run: \|
	cd "$(mktemp -d)"
	curl -fsSL "https://github.com/str4d/rage/releases/download/v${RAGE_VERSION}/rage-v${RAGE_VERSION}-x86_64-linux.tar.gz" \| tar xzf -
	sudo install -m 755 rage/rage /usr/local/bin
	sudo install -m 755 rage/rage-keygen /usr/local/bin
	- name: build
	run: \|
	go build ./...
	- name: run
	run: \|
	go run . --version
	- name: test-umask-022
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	go test -ldflags="-X github.com/twpayne/chezmoi/v2/internal/chezmoitest.umaskStr=0o022" -race -timeout=1h ./...
	- name: test-umask-002
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	go test -ldflags="-X github.com/twpayne/chezmoi/v2/internal/chezmoitest.umaskStr=0o002" -race -timeout=1h ./...
	test-website:
	runs-on: ubuntu-22.04
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- name: install-website-dependencies
	run: \|
	pip3 install -r assets/chezmoi.io/requirements.txt
	- name: build-website
	run: mkdocs build -f assets/chezmoi.io/mkdocs.yml
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	test-windows:
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: windows-2022
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
	with:
	path: ~/go/pkg/mod
	key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
	restore-keys: \|
	${{ runner.os }}-go-
	- name: build
	run: \|
	go build ./...
	- name: run
	run: \|
	go run . --version
	- name: test
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	run: \|
	go test -race ./...
	check:
	runs-on: ubuntu-22.04
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 0
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- name: generate
	run: \|
	go generate
	git diff --exit-code
	- name: actionlint
	run: \|
	go install "github.com/rhysd/actionlint/cmd/actionlint@v${ACTIONLINT_VERSION}"
	actionlint
	- uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38
	with:
	ignore_paths: completions
	- name: editorconfig-checker
	run: \|
	GOOS="$(go env GOOS)"
	GOARCH="$(go env GOARCH)"
	curl -sSfL "https://github.com/editorconfig-checker/editorconfig-checker/releases/download/v${EDITORCONFIG_CHECKER_VERSION}/ec-${GOOS}-${GOARCH}.tar.gz" \| tar -xzf -
	"bin/ec-${GOOS}-${GOARCH}"
	- name: lint-whitespace
	run: \|
	go run ./internal/cmds/lint-whitespace
	- name: lint-txtar
	run: \|
	find . -name '*.txtar' -print0 \| xargs -0 go run ./internal/cmds/lint-txtar
	- name: find-typos
	run: \|
	go install "github.com/twpayne/find-typos@v${FIND_TYPOS_VERSION}"
	find-typos -format=github-actions chezmoi .
	- name: lint-commit-messages
	if: github.event_name == 'push'
	run: \|
	go run ./internal/cmds/lint-commit-messages HEAD~1..HEAD
	- name: lint-commit-messages
	if: github.event_name == 'pull_request' && github.event.pull_request.draft == false
	run: \|
	go run ./internal/cmds/lint-commit-messages ${{ github.event.pull_request.head.sha }}~${{ github.event.pull_request.commits }}..${{ github.event.pull_request.head.sha }}
	lint:
	name: lint-${{ matrix.runs-on }}
	strategy:
	fail-fast: false
	matrix:
	runs-on:
	- macos-14
	- ubuntu-22.04
	- windows-2022
	needs: changes
	if: github.event_name == 'push' \|\| needs.changes.outputs.code == 'true'
	runs-on: ${{ matrix.runs-on }}
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: stable
	- uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64
	with:
	version: v${{ env.GOLANGCI_LINT_VERSION }}
	args: --timeout=5m
	release: # FIXME this should be merged into test-release above
	if: startsWith(github.ref, 'refs/tags/')
	needs:
	- check
	- lint
	- test-alpine
	- test-archlinux
	- test-macos
	- test-oldstable-go
	- test-release
	- test-ubuntu
	- test-website
	- test-windows
	runs-on: ubuntu-20.04 # use older Ubuntu for older glibc
	permissions:
	contents: write
	steps:
	- name: install-build-dependencies
	run: \|
	sudo apt-get --quiet update
	sudo apt-get --no-install-suggests --no-install-recommends --quiet --yes install musl-tools snapcraft
	# https://github.com/goreleaser/goreleaser/issues/1715
	# https://bugs.launchpad.net/snapcraft/+bug/1889741
	mkdir -p "${HOME}/.cache/snapcraft/download"
	mkdir -p "${HOME}/.cache/snapcraft/stage-packages"
	mkdir -p /opt/chocolatey
	wget -q -O - "https://github.com/chocolatey/choco/releases/download/${CHOCOLATEY_VERSION}/chocolatey.v${CHOCOLATEY_VERSION}.tar.gz" \| tar -xz -C "/opt/chocolatey"
	echo '#!/bin/bash' >> /usr/local/bin/choco
	echo 'mono /opt/chocolatey/choco.exe $@' >> /usr/local/bin/choco
	chmod +x /usr/local/bin/choco
	- name: check-snapcraft-credentials
	run: snapcraft whoami
	env:
	SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 0
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20
	- name: create-syso
	run: \|
	make create-syso
	- uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200
	with:
	version: ${{ env.GORELEASER_VERSION }}
	args: release --timeout=1h
	env:
	CHOCOLATEY_API_KEY: ${{ secrets.CHOCOLATEY_API_KEY }}
	COSIGN_PWD: ${{ secrets.COSIGN_PWD }}
	GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
	SCOOP_GITHUB_TOKEN: ${{ secrets.SCOOP_GITHUB_TOKEN }}
	SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
	WINGET_GITHUB_TOKEN: ${{ secrets.WINGET_GITHUB_TOKEN }}
	deploy-website:
	needs:
	- release
	runs-on: ubuntu-22.04
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
	with:
	fetch-depth: 0
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7
	with:
	go-version: ${{ env.GO_VERSION }}
	- name: prepare-chezmoi.io
	run: \|
	pip3 install -r assets/chezmoi.io/requirements.txt
	mkdocs build -f assets/chezmoi.io/mkdocs.yml
	env:
	CHEZMOI_GITHUB_TOKEN: ${{ secrets.CHEZMOI_GITHUB_TOKEN }}
	- name: push-chezmoi.io
	run: \|
	( cd assets/chezmoi.io && mkdocs gh-deploy )
	- name: prepare-get.chezmoi.io
	run: \|
	cp assets/scripts/install.sh assets/get.chezmoi.io/index.html
	cp assets/scripts/install-local-bin.sh assets/get.chezmoi.io/lb
	cp assets/scripts/install.ps1 assets/get.chezmoi.io/ps1
	cp LICENSE assets/get.chezmoi.io/LICENSE
	- name: push-get.chezmoi.io
	uses: cpina/github-action-push-to-another-repository@07c4d7b3def0a8ebe788a8f2c843a4e1de4f6900
	env:
	SSH_DEPLOY_KEY: ${{ secrets.GET_CHEZMOI_IO_SSH_DEPLOY_KEY }}
	with:
	source-directory: assets/get.chezmoi.io
	destination-github-username: chezmoi
	destination-repository-name: get.chezmoi.io
	target-branch: gh-pages
	commit-message: 'chore: Update from ORIGIN_COMMIT'
	user-email: [email protected]

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

main #6558

Workflow file

main #6558

Jobs

Run details

Workflow file for this run