chore: fixes CI

Goldziher · Goldziher · commit 55dfebf88570 · 2026-02-12T06:44:59.000+01:00
diff --git a/.github/workflows/ci-cli.yaml b/.github/workflows/ci-cli.yaml
@@ -61,7 +61,7 @@ env:
 jobs:
   build-cli:
     name: CLI Build & Test (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
diff --git a/.github/workflows/ci-csharp.yaml b/.github/workflows/ci-csharp.yaml
@@ -66,7 +66,7 @@ env:
 jobs:
   build-csharp:
     name: C# Build + Smoke (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
@@ -181,7 +181,7 @@ jobs:
 
   test-csharp:
     name: C# Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-csharp
     timeout-minutes: 180
     strategy:
diff --git a/.github/workflows/ci-docker.yaml b/.github/workflows/ci-docker.yaml
@@ -19,7 +19,7 @@ on:
       - 'Cargo.lock'
       - '.cargo/config.toml'
       - 'scripts/ci/docker/**'
-      - 'scripts/test_docker*.sh'
+      - 'scripts/ci/docker/test_docker.py'
   pull_request:
     branches: [main]
     paths:
@@ -35,7 +35,7 @@ on:
       - 'Cargo.lock'
       - '.cargo/config.toml'
       - 'scripts/ci/docker/**'
-      - 'scripts/test_docker*.sh'
+      - 'scripts/ci/docker/test_docker.py'
   workflow_dispatch:
     inputs:
       skip_tests:
@@ -57,7 +57,7 @@ env:
 jobs:
   test-docker:
     name: Build and Test Docker Image (${{ matrix.variant }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     permissions:
@@ -168,7 +168,7 @@ jobs:
 
   test-docker-cli:
     name: Build and Test Docker CLI Image
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     permissions:
diff --git a/.github/workflows/ci-elixir.yaml b/.github/workflows/ci-elixir.yaml
@@ -68,7 +68,7 @@ env:
 jobs:
   build-and-test:
     name: Elixir Build and Test (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: false
diff --git a/.github/workflows/ci-go.yaml b/.github/workflows/ci-go.yaml
@@ -70,7 +70,7 @@ env:
 jobs:
   build-go:
     name: Go Bindings (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
@@ -324,7 +324,7 @@ jobs:
 
   test-go:
     name: Go Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-go
     timeout-minutes: 180
     strategy:
diff --git a/.github/workflows/ci-java.yaml b/.github/workflows/ci-java.yaml
@@ -67,7 +67,7 @@ env:
 jobs:
   build-java:
     name: Java Bindings (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
@@ -202,7 +202,7 @@ jobs:
 
   test-java:
     name: Java Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-java
     timeout-minutes: 180
     strategy:
diff --git a/.github/workflows/ci-node.yaml b/.github/workflows/ci-node.yaml
@@ -72,7 +72,7 @@ env:
 jobs:
   build-and-smoke-node:
     name: Node Build + Smoke (${{ matrix.target }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: ${{ matrix.os == 'windows-latest' && 360 || 180 }}
     # Serialize matrix jobs to prevent concurrent cache API writes that trigger rate limits
     concurrency:
@@ -248,7 +248,7 @@ jobs:
 
   test-typescript:
     name: TypeScript Tests (${{ matrix.os }}, ${{ matrix.runtime }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-and-smoke-node
     timeout-minutes: ${{ matrix.os == 'windows-latest' && 360 || 180 }}
     strategy:
diff --git a/.github/workflows/ci-php.yaml b/.github/workflows/ci-php.yaml
@@ -68,7 +68,7 @@ env:
 jobs:
   build-php-extension:
     name: PHP Build (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
@@ -119,7 +119,7 @@ jobs:
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
-          php-version: "8.2"
+          php-version: "8.3"
           extensions: ffi
           tools: composer
 
@@ -208,7 +208,7 @@ jobs:
 
   test-php:
     name: PHP Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-php-extension
     timeout-minutes: 180
     strategy:
@@ -248,7 +248,7 @@ jobs:
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
         with:
-          php-version: "8.2"
+          php-version: "8.3"
           extensions: ffi
           tools: composer
 
diff --git a/.github/workflows/ci-python.yaml b/.github/workflows/ci-python.yaml
@@ -69,7 +69,7 @@ env:
 jobs:
   build-and-smoke-python:
     name: Python Build + Smoke (${{ matrix.target }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
@@ -210,7 +210,7 @@ jobs:
 
   build-python-sdist:
     name: Python Sdist
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     runs-on: ubuntu-latest
     steps:
@@ -245,7 +245,7 @@ jobs:
 
   test-python:
     name: Python Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-and-smoke-python
     timeout-minutes: 180
     strategy:
diff --git a/.github/workflows/ci-ruby.yaml b/.github/workflows/ci-ruby.yaml
@@ -72,7 +72,7 @@ env:
 jobs:
   build-ruby-gem:
     name: Ruby Gem (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     strategy:
       fail-fast: true
@@ -497,7 +497,7 @@ jobs:
 
   test-ruby:
     name: Ruby Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: build-ruby-gem
     timeout-minutes: 180
     strategy:
diff --git a/.github/workflows/ci-rust.yaml b/.github/workflows/ci-rust.yaml
@@ -74,7 +74,7 @@ env:
 jobs:
   rust-unit:
     name: Rust Unit Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ${{ matrix.os }}
     timeout-minutes: 180
     permissions:
@@ -169,7 +169,7 @@ jobs:
 
   rust-e2e:
     name: Rust E2E Tests
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     permissions:
@@ -237,7 +237,7 @@ jobs:
 
   test-system-pdfium:
     name: Test System PDFium (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ${{ matrix.os }}
     timeout-minutes: 180
     permissions:
@@ -308,6 +308,9 @@ jobs:
         shell: bash
         env:
           PKG_CONFIG_PATH: "${{ matrix.os == 'macos-latest' && '/usr/local/lib/pkgconfig' || '' }}"
+          LD_LIBRARY_PATH: "/usr/local/lib:${{ env.LD_LIBRARY_PATH || '' }}"
+          DYLD_LIBRARY_PATH: "/usr/local/lib:${{ env.DYLD_LIBRARY_PATH || '' }}"
+          DYLD_FALLBACK_LIBRARY_PATH: "/usr/local/lib:${{ env.DYLD_FALLBACK_LIBRARY_PATH || '' }}"
 
       - name: Verify no bundled pdfium in library
         run: scripts/ci/rust/verify-no-bundled-pdfium.sh
@@ -329,7 +332,7 @@ jobs:
 
   build-and-smoke-cli:
     name: CLI Build + Smoke (${{ matrix.target }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     timeout-minutes: 180
     permissions:
       contents: read
diff --git a/.github/workflows/ci-validate.yaml b/.github/workflows/ci-validate.yaml
@@ -85,7 +85,7 @@ env:
 jobs:
   validate:
     name: Validate (Lint & Format)
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     steps:
diff --git a/.github/workflows/ci-wasm.yaml b/.github/workflows/ci-wasm.yaml
@@ -77,7 +77,7 @@ jobs:
 
   unit-tests:
     name: Unit Tests (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ${{ matrix.os }}
     timeout-minutes: 180
     permissions:
@@ -128,7 +128,7 @@ jobs:
 
   build-wasm-targets:
     name: Build WASM (${{ matrix.os }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ${{ matrix.os }}
     timeout-minutes: 180
     permissions:
@@ -203,7 +203,7 @@ jobs:
 
   type-definitions:
     name: Type Definitions Check
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     permissions:
@@ -251,7 +251,7 @@ jobs:
 
   integration-tests-node:
     name: Integration Tests (Node ${{ matrix.node-version }})
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     needs: [build-wasm-targets]
     runs-on: ubuntu-latest
     timeout-minutes: 180
@@ -297,7 +297,7 @@ jobs:
 
   deno-tests:
     name: Deno Tests
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     permissions:
@@ -351,7 +351,7 @@ jobs:
 
   workers-tests:
     name: Cloudflare Workers Tests
-    if: ${{ github.actor != 'dependabot[bot]' }}
+    if: github.repository == 'kreuzberg-dev/kreuzberg' && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     timeout-minutes: 180
     permissions:
diff --git a/.github/workflows/publish-docker.yaml b/.github/workflows/publish-docker.yaml
@@ -215,9 +215,9 @@ jobs:
         if: ${{ needs.prepare.outputs.force_republish == 'true' || (matrix.variant == 'core' && needs.check-docker.outputs.core_exists != 'true') || (matrix.variant == 'full' && needs.check-docker.outputs.full_exists != 'true') || (matrix.variant == 'cli' && needs.check-docker.outputs.cli_exists != 'true') }}
         run: docker build -f ${{ matrix.dockerfile }} --build-arg PDFIUM_VERSION=${{ env.PDFIUM_VERSION }} --build-arg ONNXRUNTIME_VERSION=${{ env.ORT_VERSION }} -t kreuzberg-publish:${{ matrix.variant }}-test .
 
-      - name: Run Docker feature tests
+      - name: Run Docker tests
         if: ${{ needs.prepare.outputs.force_republish == 'true' || (matrix.variant == 'core' && needs.check-docker.outputs.core_exists != 'true') || (matrix.variant == 'full' && needs.check-docker.outputs.full_exists != 'true') || (matrix.variant == 'cli' && needs.check-docker.outputs.cli_exists != 'true') }}
-        run: ./scripts/test_docker.sh --skip-build --image kreuzberg-publish:${{ matrix.variant }}-test --variant ${{ matrix.variant }} --verbose
+        run: python3 scripts/ci/docker/test_docker.py --image kreuzberg-publish:${{ matrix.variant }}-test --variant ${{ matrix.variant }} --verbose
 
       - name: Log in to GitHub Container Registry
         if: ${{ needs.prepare.outputs.dry_run != 'true' && (needs.prepare.outputs.force_republish == 'true' || (matrix.variant == 'core' && needs.check-docker.outputs.core_exists != 'true') || (matrix.variant == 'full' && needs.check-docker.outputs.full_exists != 'true') || (matrix.variant == 'cli' && needs.check-docker.outputs.cli_exists != 'true')) }}
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -2486,8 +2486,21 @@ jobs:
         working-directory: packages/elixir
         run: mix docs
 
+      - name: Re-check Hex.pm before publish
+        id: recheck
+        run: |
+          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" \
+            --retry 3 --retry-delay 5 --connect-timeout 30 --max-time 60 \
+            "https://hex.pm/api/packages/kreuzberg/releases/${{ needs.prepare.outputs.version }}")
+          if [ "$HTTP_CODE" = "200" ]; then
+            echo "exists=true" >> "$GITHUB_OUTPUT"
+            echo "Package kreuzberg@${{ needs.prepare.outputs.version }} already exists on Hex.pm — skipping publish"
+          else
+            echo "exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Publish to Hex.pm
-        if: ${{ needs.prepare.outputs.dry_run != 'true' }}
+        if: ${{ needs.prepare.outputs.dry_run != 'true' && steps.recheck.outputs.exists != 'true' }}
         working-directory: packages/elixir
         env:
           HEX_API_KEY: ${{ secrets.HEX_API_KEY }}
@@ -2497,6 +2510,10 @@ jobs:
         if: ${{ needs.prepare.outputs.dry_run == 'true' }}
         run: echo "Dry run requested; Hex.pm publish skipped." >> "$GITHUB_STEP_SUMMARY"
 
+      - name: Hex.pm already published summary
+        if: ${{ steps.recheck.outputs.exists == 'true' }}
+        run: echo "Package kreuzberg@${{ needs.prepare.outputs.version }} already published on Hex.pm — skipped." >> "$GITHUB_STEP_SUMMARY"
+
   publish-pypi:
     name: Publish Python packages to PyPI
     needs: [prepare, validate-versions, check-pypi, python-wheels, python-sdist]
diff --git a/.task/languages/php.yml b/.task/languages/php.yml
@@ -9,7 +9,7 @@ includes:
     internal: true
 
 vars:
-  PHP_VERSION: "8.2"
+  PHP_VERSION: "8.3"
 
 tasks:
   install:
diff --git a/packages/elixir/mix.exs b/packages/elixir/mix.exs
@@ -58,7 +58,8 @@ defmodule Kreuzberg.MixProject do
     [
       main: "Kreuzberg",
       source_url: @source_url,
-      extras: ["README.md"]
+      extras: ["README.md"],
+      deps: [elixir: "https://hexdocs.pm/elixir/"]
     ]
   end
 
diff --git a/packages/elixir/native/kreuzberg_rustler/src/config.rs b/packages/elixir/native/kreuzberg_rustler/src/config.rs
diff --git a/scripts/ci/docker/run-cli-tests.sh b/scripts/ci/docker/run-cli-tests.sh
diff --git a/scripts/ci/docker/run-feature-tests.sh b/scripts/ci/docker/run-feature-tests.sh
diff --git a/scripts/ci/docker/test_docker.py b/scripts/ci/docker/test_docker.py
diff --git a/scripts/test_docker.sh b/scripts/test_docker.sh
diff --git a/scripts/test_docker_cli.sh b/scripts/test_docker_cli.sh
