Merge pull request eclipse-score#30 from qorix-group/piotrkorkus_workflows_update

cicd: update GithubActions workflows

Author: dcalavrezo-qorix

.github/actions/setup-rust-build/action.yml

@@ -23,7 +23,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout Repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v4.2.2
 
     - name: Install protoc 26.1
       uses: arduino/setup-protoc@v3
@@ -32,7 +32,7 @@ runs:
         repo-token: ${{ inputs.repo-token }}
 
     - name: Cache cargo & target
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: |
           ~/.cargo/registry

.github/workflows/build.yml

@@ -18,29 +18,17 @@ on:
   merge_group:
     types: [checks_requested]
 
-env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  SCORE_QNX_USER: ${{ secrets.SCORE_QNX_USER }}
-  SCORE_QNX_PASSWORD: ${{ secrets.SCORE_QNX_PASSWORD }}
-  SCORE_QNX_LICENSE: ${{ secrets.SCORE_QNX_LICENSE }}
 jobs:
   build:
     name: Build Bazel Code
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4.2.2
 
-      - name: Install protoc 26.1
-        uses: arduino/setup-protoc@v3
-        with:
-          version: 26.1
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.15.0
         with:
-          bazelisk-version: 1.26.0 # newest LTS before 1 Jun 2025
           disk-cache: true
           repository-cache: true
           bazelisk-cache: true

.github/workflows/build_qnx8.yml

@@ -26,7 +26,7 @@ jobs:
     with:
       bazel-target: '//src/...'
       bazel-config: 'build_qnx8'
-      credential-helper: '.github/tools/qnx_credential_helper.py'
+      credential-helper: 'scripts/internal/qnx_creds.py'
       environment-name: 'workflow-approval'
     secrets:
       score-qnx-license: ${{ secrets.SCORE_QNX_LICENSE }}

.github/workflows/cargo_required.yml

@@ -34,7 +34,7 @@ jobs:
     timeout-minutes: 45 # minutes is the maximum allowed for a cold run
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Setup Rust Build Environment
         uses: ./.github/actions/setup-rust-build
@@ -47,13 +47,15 @@ jobs:
 
       # ---------- TARPAULIN(TEST + COVERAGE) ----------
       - name: Run tests under coverage
-        run: cargo +nightly tarpaulin --version 0.32.7 --skip-clean --out Html --verbose --no-dead-code --engine llvm --all-features
+        run: cargo +nightly tarpaulin --skip-clean --out html --verbose --no-dead-code --engine llvm
 
       - name: Upload coverage report
         uses: actions/upload-artifact@v4
         with:
-          name: coverage-report
-          path: tarpaulin-report.html
+          name: ${{ github.event.repository.name }}_coverage_report
+          path: |
+            tarpaulin-report.html
+            cobertura.xml
 
       # ---------- MIRI ----------
       - name: Install nightly + miri (minimal profile)

.github/workflows/component_integration_tests.yml

@@ -35,7 +35,7 @@ jobs:
         shell: bash
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Setup Rust Build Environment
         uses: ./.github/actions/setup-rust-build

.github/workflows/component_integration_tests_bazel.yml

@@ -23,26 +23,18 @@ on:
 
 env:
   CARGO_TERM_COLOR: always
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
   build:
     name: Build Bazel Code
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4.2.2
 
-      - name: Install protoc 26.1
-        uses: arduino/setup-protoc@v3
-        with:
-          version: 26.1
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Setup Bazel
         uses: bazel-contrib/setup-bazel@0.15.0
         with:
-          bazelisk-version: 1.26.0 # newest LTS before 1 Jun 2025
           disk-cache: true
           repository-cache: true
           bazelisk-cache: true

.github/workflows/gitlint.yml

@@ -20,10 +20,10 @@ env:
 jobs:
   lint-commits:
     name: check-commit-messages
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
       - name: Run Gitlint Action

.github/workflows/license_check.yml

@@ -17,8 +17,7 @@ on:
     types: [opened, reopened, synchronize]
   merge_group:
     types: [checks_requested]
-env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
 permissions:
   pull-requests: write
   issues: write

.github/workflows/lint_fmt_clippy.yml

@@ -19,23 +19,18 @@ on:
 
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
 jobs:
   lint-fmt-clippy:
     timeout-minutes: 6 # 6 minutes is the maximum allowed for a cold run
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
 
-      - name: Install protoc 26.1
-        uses: arduino/setup-protoc@v3
-        with:
-          version: 26.1
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Cache Cargo registry, git deps & target
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: |
             ~/.cargo/registry

.github/workflows/tests.yml

@@ -17,30 +17,41 @@ on:
     types: [opened, reopened, synchronize]
   merge_group:
     types: [checks_requested]
-env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
   setup-and-run-tests:
-    runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4.2.2
 
-      - name: Install protoc 26.1
-        uses: arduino/setup-protoc@v3
-        with:
-          version: 26.1
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Setup Bazel with shared caching
         uses: bazel-contrib/setup-bazel@0.15.0
         with:
-          bazelisk-version: 1.26.0
           disk-cache: true
           repository-cache: true
           bazelisk-cache: true
 
+      - name: Bazel info (discover paths)
+        id: bazel-info
+        run: |
+          echo "BAZEL_OUTPUT_BASE=$(bazel info output_base)" >> $GITHUB_ENV
+          echo "BAZEL_USER_ROOT=$(bazel info output_user_root)" >> $GITHUB_ENV
+          echo "BAZEL_REPO_CACHE=$(bazel info repository_cache)" >> $GITHUB_ENV
+          bazel info
+
+      - name: Cache Bazel output base
+        uses: actions/cache@v4
+        with:
+          path: |
+            ${{ env.BAZEL_OUTPUT_BASE }}/action_cache
+            ${{ env.BAZEL_OUTPUT_BASE }}/bazel-out
+            ${{ env.BAZEL_OUTPUT_BASE }}/external
+            ${{ env.BAZEL_OUTPUT_BASE }}/execroot
+          key: bazel-ob-v2-${{ runner.os }}-${{ hashFiles('.bazelversion', 'MODULE.bazel', 'MODULE.bazel.lock', '**/*.bzl', 'Cargo.lock') }}
+          restore-keys: |
+            bazel-ob-v2-${{ runner.os }}-
+
       - name: Run Tests via Bazel
         run: |
           echo "Running: bazel test //src/..."