ci: Add a C++23 build (#5223)

Author: paulgessinger

.devcontainer/Dockerfile

@@ -1,4 +1,4 @@
-FROM ghcr.io/acts-project/spack-container:19.0.0_linux-ubuntu24.04_gcc-13.3.0
+FROM ghcr.io/acts-project/spack-container:21.0.0_linux-ubuntu24.04_gcc-13.3.0_cxx20
 
 RUN apt-get update && apt-get install -y clangd vim
 

.github/actions/dependencies/action.yml

@@ -13,19 +13,23 @@ inputs:
   spack_version:
     description: 'Version of Spack to use'
     required: false
-    default: 'v1.0.2'
+    default: 'v1.1.1'
   spack_repo_version:
     description: 'Version of Spack builtin repo to use'
     required: false
-    default: 'v2025.07.0'
+    default: 'v2025.11.0'
   DEPENDENCY_TAG:
     description: 'Dependency tag to pull from'
     required: false
-    default: 'v19.0.0'
+    default: 'v21.0.0'
   full_install:
     description: 'Whether to do a full dependency installation including Geant4 datasets and Python packages'
     required: false
     default: 'false'
+  cxx_std:
+    description: 'C++ standard for lockfile selection (e.g. 20, 23). Defaults to 20.'
+    required: false
+    default: '20'
   env_file:
     description: 'Where to generate the environment file'
     required: true
@@ -72,8 +76,8 @@ runs:
         spack/bin/spack list > /dev/null
         rm -rf spack/.git
         mkdir spack_cache
-        cp -r spack spack_cache/
-        cp -r ~/.spack spack_cache/
+        cp -RP spack spack_cache/
+        cp -RP ~/.spack spack_cache/
 
     - name: Save cache
       if: steps.cache-restore.outputs.cache-hit != 'true'
@@ -89,6 +93,7 @@ runs:
         GITHUB_TOKEN: ${{ inputs.GITHUB_TOKEN }}
         SPACK_REPO_VERSION: ${{ inputs.spack_repo_version }}
         DEPENDENCY_TAG: ${{ inputs.DEPENDENCY_TAG }}
+        CXXSTD: ${{ inputs.cxx_std }}
       run: |
         args="-e ${{ inputs.env_file }}"
         if [ "${{ inputs.full_install }}" == "true" ]; then

.github/workflows/analysis.yml

@@ -29,7 +29,7 @@ env:
 jobs:
   build_debug:
     runs-on: ubuntu-latest
-    container: ghcr.io/acts-project/ubuntu2404:83
+    container: ghcr.io/acts-project/ubuntu2404:85
     steps:
 
       - uses: actions/checkout@v6
@@ -79,7 +79,9 @@ jobs:
       - name: ccache stats
         run: ccache -s
       - name: Unit tests
-        run: ctest --test-dir build -j$(nproc)
+        run: >
+          CI/dependencies/run.sh .env
+          ctest --test-dir build -j$(nproc)
 
       - name: Remove .o files
         run: >
@@ -114,7 +116,7 @@ jobs:
 
   clang_tidy:
     runs-on: ubuntu-latest
-    container: ghcr.io/acts-project/ubuntu2404_clang19:83
+    container: ghcr.io/acts-project/ubuntu2404_clang22:85
 
     steps:
       - uses: actions/checkout@v6
@@ -132,10 +134,10 @@ jobs:
 
       - name: Install clang-tidy
         run: |
-          apt-get update && apt-get install -y clang-tidy-19
-          ln -sf /usr/bin/clang-tidy-19 /usr/bin/clang-tidy
-          ln -sf /usr/bin/clang++-19 /usr/bin/clang++
-          ln -sf /usr/bin/clang-19 /usr/bin/clang
+          apt-get update && apt-get install -y clang-tidy-22
+          ln -sf /usr/bin/clang-tidy-22 /usr/bin/clang-tidy
+          ln -sf /usr/bin/clang++-22 /usr/bin/clang++
+          ln -sf /usr/bin/clang-22 /usr/bin/clang
 
       - name: Install dependencies
         uses: ./.github/actions/dependencies

.github/workflows/builds.yml

@@ -25,7 +25,7 @@ env:
 jobs:
   linux_ubuntu:
     runs-on: ubuntu-latest
-    container: ghcr.io/acts-project/ubuntu2404:83
+    container: ghcr.io/acts-project/ubuntu2404:85
     env:
       INSTALL_DIR: ${{ github.workspace }}/install
       ACTS_LOG_FAILURE_THRESHOLD: WARNING
@@ -78,10 +78,14 @@ jobs:
           key: ${{ steps.ccache-restore.outputs.cache-primary-key }}
 
       - name: Unit tests
-        run: ctest --test-dir build -j$(nproc)
+        run: >
+          CI/dependencies/run.sh .env
+          ctest --test-dir build -j$(nproc)
 
       - name: Integration tests
-        run: cmake --build build --target integrationtests
+        run: >
+          CI/dependencies/run.sh .env
+          cmake --build build --target integrationtests
 
       - name: Install
         run: cmake --build build --target install
@@ -118,7 +122,7 @@ jobs:
 
   linux_examples_test:
     runs-on: ubuntu-latest
-    container: ghcr.io/acts-project/ubuntu2404:83
+    container: ghcr.io/acts-project/ubuntu2404:85
     needs: [linux_ubuntu]
     env:
       ACTS_SEQUENCER_FAIL_ON_UNMASKED_FPE: 0
@@ -157,7 +161,7 @@ jobs:
 
   linux_physmon:
     runs-on: ubuntu-latest
-    container: ghcr.io/acts-project/ubuntu2404:83
+    container: ghcr.io/acts-project/ubuntu2404:85
     needs: [linux_ubuntu]
 
     steps:
@@ -234,10 +238,10 @@ jobs:
     strategy:
       matrix:
         include:
-          - image: ubuntu2404_clang19
-            std: 20
-            cxx: clang++-19
-    container: ghcr.io/acts-project/${{ matrix.image }}:83
+          - image: ubuntu2404_clang22
+            std: 23
+            cxx: clang++-22
+    container: ghcr.io/acts-project/${{ matrix.image }}:85
     env:
       INSTALL_DIR: ${{ github.workspace }}/install
       ACTS_LOG_FAILURE_THRESHOLD: WARNING
@@ -251,6 +255,7 @@ jobs:
         uses: ./.github/actions/dependencies
         with:
           compiler: ${{ matrix.cxx }}
+          cxx_std: ${{ matrix.std }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           env_file: .env
 
@@ -287,10 +292,14 @@ jobs:
           key: ${{ steps.ccache-restore.outputs.cache-primary-key }}
 
       - name: Unit tests
-        run: cmake --build build --target test
+        run: >
+          CI/dependencies/run.sh .env
+          cmake --build build --target test
 
       - name: Integration tests
-        run: cmake --build build --target integrationtests
+        run: >
+          CI/dependencies/run.sh .env
+          cmake --build build --target integrationtests
 
       - name: Install
         run: cmake --build build --target install
@@ -313,7 +322,7 @@ jobs:
         run: ./build-downstream/bin/ShowActsVersion
 
   macos:
-    runs-on: macos-15
+    runs-on: macos-26
     env:
       INSTALL_DIR: ${{ github.workspace }}/install_acts
       ACTS_LOG_FAILURE_THRESHOLD: WARNING
@@ -326,7 +335,7 @@ jobs:
       - name: Setup Xcode version
         uses: maxim-lobanov/setup-xcode@v1
         with:
-          xcode-version: "16.3.0"
+          xcode-version: "26.3.0"
 
       - name: Install dependencies
         uses: ./.github/actions/dependencies
@@ -580,7 +589,7 @@ jobs:
   linux_ubuntu_python_wheel:
     runs-on: ubuntu-latest
     needs: [linux_ubuntu]
-    container: ghcr.io/acts-project/ubuntu2404:83
+    container: ghcr.io/acts-project/ubuntu2404:85
 
     steps:
       - uses: actions/checkout@v6

.github/workflows/sonarcloud.yml

@@ -8,7 +8,7 @@ jobs:
   sonarcloud:
     name: SonarCloud
     runs-on: ubuntu-latest
-    container: ghcr.io/acts-project/ubuntu2404:83
+    container: ghcr.io/acts-project/ubuntu2404:85
     if: github.event.workflow_run.conclusion == 'success'
     steps:
       - name: Dump job context

.gitlab-ci.yml

@@ -4,12 +4,12 @@ variables:
   CCACHE_KEY_SUFFIX: r2
   CTEST_OUTPUT_ON_FAILURE: 1
 
-  SPACK_VERSION: v1.0.2
-  SPACK_REPO_VERSION: v2025.07.0
+  SPACK_VERSION: v1.1.1
+  SPACK_REPO_VERSION: v2025.11.0
 
   LOCKFILE_CACHE_DIR: ${CI_PROJECT_DIR}/spack_lockfile_cache
 
-  DEPENDENCY_TAG: v19.0.0
+  DEPENDENCY_TAG: v21.0.0
 
   MODEL_STORAGE: ${CI_PROJECT_DIR}/ci_models
 
@@ -45,7 +45,7 @@ variables:
 
 build_gnn_cpu:
   stage: build
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:85
   tags:
     - large
 
@@ -78,7 +78,7 @@ build_gnn_cpu:
 
 build_gnn:
   stage: build
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:85
   tags:
     - large
 
@@ -120,7 +120,7 @@ test_gnn_unittests:
   stage: test
   needs:
     - build_gnn
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:85
   tags:
     - docker-gpu-nvidia
 
@@ -144,7 +144,7 @@ test_gnn_python:
   stage: test
   needs:
     - build_gnn
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_gnn:85
   tags:
     - docker-gpu-nvidia
 
@@ -175,7 +175,7 @@ test_gnn_python:
 
 build_gnn_tensorrt:
   stage: build
-  image: ghcr.io/acts-project/ubuntu2404_tensorrt:83
+  image: ghcr.io/acts-project/ubuntu2404_tensorrt:85
 
   cache:
     - !reference [.spack_cache, cache]
@@ -200,7 +200,7 @@ build_gnn_tensorrt:
 
 build_linux_ubuntu:
   stage: build
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404:85
 
   cache:
    - !reference [.ccache_base, cache]
@@ -261,7 +261,7 @@ build_linux_ubuntu:
 
 linux_test_examples:
   stage: test
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404:85
   needs: [build_linux_ubuntu]
 
   cache:
@@ -287,7 +287,7 @@ linux_test_examples:
 linux_physmon:
   stage: test
   needs: [build_linux_ubuntu]
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404:83
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404:85
 
   artifacts:
     when: always
@@ -375,20 +375,20 @@ linux_physmon:
   after_script:
    - !reference [.spack_cleanup, after_script]
 
-linux_ubuntu_2404_clang19:
+linux_ubuntu_2404_clang22:
   extends: .linux_ubuntu_extra
   variables:
-    CXX: clang++-19
-    CXXSTD: 20
-  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_clang19:83
+    CXX: clang++-22
+    CXXSTD: 23
+  image: registry.cern.ch/ghcr.io/acts-project/ubuntu2404_clang22:85
 
 
 ######################
 ### LCG JOB MATRIX ###
 ######################
 
 .lcg_base_job:
-  image: registry.cern.ch/ghcr.io/acts-project/${OS}-base:83
+  image: registry.cern.ch/ghcr.io/acts-project/${OS}-base:85
   stage: build
   tags:
     - cvmfs