Skip to content
CI

deps(rust): bump the rust-dependencies group across 1 directory with 14 updates #119

Sign in to view logs

deps(rust): bump the rust-dependencies group across 1 directory with 14 updates

deps(rust): bump the rust-dependencies group across 1 directory with 14 updates #119

Workflow file for this run

.github/workflows/ci.yml at a8ac74a
# ReasonKit Core - Comprehensive CI Pipeline
# Production-grade Rust CI/CD following CONS-009 Quality Gates
# Reference: https://reasonkit.sh | ORCHESTRATOR.md v3.6.0
#
# Features:
# - Cross-platform build matrix (Linux, macOS, Windows)
# - Rust stable/beta support with MSRV verification
# - Aggressive caching (sccache + Swatinem/rust-cache)
# - Quality gates: Build, Clippy, Format, Test, Docs
# - Security audit with cargo-audit and cargo-deny
# - Benchmarks with baseline comparison
# - Release automation with asset generation
# - Status badge generation
name: CI
on:
push:
branches: [main, develop, feature/*]
tags: ["v*.*.*"]
pull_request:
branches: [main]
workflow_dispatch:
inputs:
run_benchmarks:
description: "Run benchmarks"
required: false
default: "false"
type: boolean
# Cancel in-progress runs for same workflow and branch
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
env:
CARGO_TERM_COLOR: always
RUSTFLAGS: "-D warnings"
RUST_BACKTRACE: 1
CARGO_INCREMENTAL: 0
# TEMPORARILY DISABLED: GitHub cache service outage
# SCCACHE_GHA_ENABLED: "true"
# RUSTC_WRAPPER: "sccache"
# Override .cargo/config.toml target-cpu=native to prevent SIGILL on different runners
CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_RUSTFLAGS: ""
# CI-safe features (excludes local-embeddings, arf, python which require system deps)
# Also excludes experimental features with incomplete code (code-intelligence, minimax, glm46, vibe)
CI_FEATURES: "cli,embedded-qdrant,aesthetic,daemon"
jobs:
# ===========================================================================
# GATE 1: Build Matrix (Cross-Platform)
# ===========================================================================
build:
name: "Build (${{ matrix.os }}, ${{ matrix.rust }}, ${{ matrix.features }})"
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
rust: [stable]
features: [default]
include:
# Beta on Linux only
- os: ubuntu-latest
rust: beta
features: default
# All features on stable Linux
- os: ubuntu-latest
rust: stable
features: all
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain (${{ matrix.rust }})
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # master
with:
toolchain: ${{ matrix.rust }}
- name: Configure sccache
uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6
- name: Cache Rust artifacts
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
with:
prefix-key: "v2-build"
shared-key: "${{ matrix.os }}-${{ matrix.rust }}-${{ matrix.features }}"
cache-on-failure: true
cache-all-crates: true
- name: Check Cargo.lock is up to date
if: matrix.os == 'ubuntu-latest' && matrix.rust == 'stable' && matrix.features == 'default'
run: cargo update --workspace --locked
- name: Build (default features)
if: matrix.features == 'default'
run: cargo build --release --locked
- name: Build (all features)
if: matrix.features == 'all'
run: cargo build --release --features "$CI_FEATURES" --locked
- name: Build (no default features)
if: matrix.features == 'default' && matrix.os == 'ubuntu-latest' && matrix.rust == 'stable'
run: cargo build --no-default-features --locked
- name: Upload binary (Linux)
if: matrix.os == 'ubuntu-latest' && matrix.rust == 'stable' && matrix.features == 'default'
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: rk-linux-x86_64
path: target/release/rk
retention-days: 7
- name: Upload binary (macOS)
if: matrix.os == 'macos-latest' && matrix.rust == 'stable' && matrix.features == 'default'
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: rk-macos-x86_64
path: target/release/rk
retention-days: 7
- name: Upload binary (Windows)
if: matrix.os == 'windows-latest' && matrix.rust == 'stable' && matrix.features == 'default'
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: rk-windows-x86_64
path: target/release/rk.exe
retention-days: 7
# ===========================================================================
# GATE 2: Lint with Clippy (BLOCKING)
# ===========================================================================
lint:
name: "Gate 2: Clippy"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
components: clippy
- name: Configure sccache
uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6
- name: Cache Rust artifacts
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
with:
prefix-key: "v2-lint"
cache-on-failure: true
- name: Run Clippy (CI features)
# Allow deprecated for criterion::black_box in benchmarks
run: cargo clippy --all-targets --features "$CI_FEATURES" --locked -- -D warnings -A deprecated
- name: Run Clippy (default features)
run: cargo clippy --locked -- -D warnings -A deprecated
# ===========================================================================
# GATE 3: Format Check (BLOCKING)
# ===========================================================================
format:
name: "Gate 3: Format"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
components: rustfmt
- name: Check formatting
run: cargo fmt --all -- --check
- name: Generate format diff (on failure)
if: failure()
run: |
cargo fmt --all -- --check --verbose
echo "Run 'cargo fmt' locally to fix formatting issues"
# ===========================================================================
# GATE 4: Tests (BLOCKING)
# ===========================================================================
test:
name: "Gate 4: Tests (${{ matrix.os }})"
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
- name: Configure sccache
uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6
- name: Cache Rust artifacts
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
with:
prefix-key: "v2-test"
shared-key: "${{ matrix.os }}"
cache-on-failure: true
- name: Install cargo-nextest (Linux/macOS)
if: matrix.os != 'windows-latest'
run: |
curl -LsSf https://get.nexte.st/latest/linux | tar zxf - -C ${CARGO_HOME:-~/.cargo}/bin
continue-on-error: true
- name: Run unit tests
run: cargo test --lib --features "$CI_FEATURES" --locked
- name: Run integration tests (nextest)
if: matrix.os != 'windows-latest'
run: cargo nextest run --features "$CI_FEATURES" --locked 2>/dev/null || cargo test --tests --features "$CI_FEATURES" --locked
- name: Run integration tests (Windows)
if: matrix.os == 'windows-latest'
run: cargo test --tests --features "$CI_FEATURES" --locked
- name: Run doc tests
run: cargo test --doc --locked
- name: Test with no default features
run: cargo test --no-default-features --locked
# ===========================================================================
# Documentation Build
# ===========================================================================
docs:
name: "Documentation"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
- name: Configure sccache
uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6
- name: Cache Rust artifacts
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
with:
prefix-key: "v2-docs"
cache-on-failure: true
# Use --features cli to match docs.rs metadata configuration
# (avoids python/arf/local-embeddings which require system deps not in docs.rs)
# Note: --cfg docsrs is only used on docs.rs (nightly) for unstable features
- name: Build documentation
run: cargo doc --no-deps --features cli --locked
env:
RUSTDOCFLAGS: "-D warnings"
- name: Upload documentation
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: documentation
path: target/doc
retention-days: 7
# ===========================================================================
# MSRV Check (Minimum Supported Rust Version)
# ===========================================================================
msrv:
name: "MSRV Check (Rust 1.75)"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install stable Rust (for lockfile generation)
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # master
with:
toolchain: stable
- name: Install MSRV toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # master
with:
toolchain: "1.75"
# Note: Skipping rust-cache for MSRV check because cargo metadata --all-features
# downloads dependencies that require edition2024 (ort, wasmtime) which fails
# with Rust 1.75's cargo. Manual dependency download is fast enough.
- name: Check MSRV compatibility
# Note: Using --no-default-features to avoid optional deps that require newer Rust
# local-embeddings feature requires Rust 1.82+ (ort uses edition2024)
# arf feature requires Rust 1.82+ (wasmtime uses edition2024)
# Removed Cargo.lock first because it contains optional deps with higher MSRV
# Then pin transitive deps that would otherwise resolve to versions requiring newer Rust:
# - pest ecosystem 2.8.1+ requires Rust 1.80+, pin all to 2.8.0 (last 1.65+ compatible)
# (pest_derive requires matching pest version, so pin all together)
# - deranged 0.5.5 requires Rust 1.81+, pin to 0.5.4
# - rayon-core 1.13.0 requires Rust 1.80+, pin to 1.12.1
# - toml ecosystem (0.9.7+, toml_writer 1.0.3+, toml_parser 1.0.3+, serde_spanned 1.0.2+) requires Rust 1.76+
# - toml_datetime 0.7.2+ requires Rust 1.76+, pin to 0.7.1 (last 1.66+ compatible)
# - rangemap 1.7+ requires Rust 1.81+, pin to 1.6.0
# - time 0.3.42+ requires Rust 1.81+, pin to 0.3.41 (last 1.67+ compatible)
# (time has exact version pins on time-core, so we must pin time itself)
# - indexmap 2.12+ requires Rust 1.82+, pin to 2.11.4 (last 1.63+ compatible)
# - derive_more 2.1+ requires Rust 1.81+, pin to 2.0.1 (last 1.75+ compatible)
# - rusqlite 0.38+ uses libsqlite3-sys 0.36+ which uses #[expect] requiring Rust 1.81+
# (pinned in Cargo.toml to 0.33 for MSRV compatibility)
#
# Use stable cargo for lockfile generation (can handle edition2024 deps),
# then pin specific versions down, then use MSRV for the actual check.
run: |
rm -f Cargo.lock
cargo +stable generate-lockfile
cargo +stable update pest_derive --precise 2.8.0
cargo +stable update pest_generator --precise 2.8.0
cargo +stable update pest_meta --precise 2.8.0
cargo +stable update pest --precise 2.8.0
cargo +stable update deranged --precise 0.5.4
cargo +stable update rayon-core --precise 1.12.1
cargo +stable update toml@0.9 --precise 0.9.6
cargo +stable update toml_writer --precise 1.0.2
cargo +stable update toml_parser --precise 1.0.2
cargo +stable update serde_spanned@1 --precise 1.0.1
cargo +stable update toml_datetime@0.7 --precise 0.7.1
cargo +stable update rangemap --precise 1.6.0
cargo +stable update time --precise 0.3.41
cargo +stable update indexmap@2 --precise 2.11.4
cargo +stable update derive_more --precise 2.0.1
cargo +1.75 check --no-default-features --features cli
# ===========================================================================
# Security Audit
# ===========================================================================
security:
name: "Security Audit"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
- name: Install cargo-audit
run: cargo install cargo-audit --locked
- name: Run security audit
run: cargo audit
continue-on-error: true
- name: Run cargo-deny (advisories)
uses: EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 # v1
with:
log-level: warn
command: check advisories
continue-on-error: true
- name: Run cargo-deny (licenses)
uses: EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 # v1
with:
log-level: warn
command: check licenses
continue-on-error: true
- name: Generate security summary
if: always()
run: |
echo "## Security Audit Results" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "| Check | Status |" >> $GITHUB_STEP_SUMMARY
echo "|-------|--------|" >> $GITHUB_STEP_SUMMARY
echo "| cargo-audit | Completed |" >> $GITHUB_STEP_SUMMARY
echo "| cargo-deny (advisories) | Completed |" >> $GITHUB_STEP_SUMMARY
echo "| cargo-deny (licenses) | Completed |" >> $GITHUB_STEP_SUMMARY
# ===========================================================================
# Benchmarks (Conditional)
# ===========================================================================
benchmarks:
name: "Benchmarks"
runs-on: ubuntu-latest
if: |
github.event_name == 'workflow_dispatch' && github.event.inputs.run_benchmarks == 'true' ||
startsWith(github.ref, 'refs/tags/v') ||
contains(github.event.pull_request.labels.*.name, 'performance')
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
- name: Configure sccache
uses: mozilla-actions/sccache-action@9e326ebed976843c9932b3aa0e021c6f50310eb4 # v0.0.6
- name: Cache Rust artifacts
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
with:
prefix-key: "v2-bench"
cache-on-failure: true
- name: Restore benchmark baseline
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v4
with:
path: target/criterion
key: benchmark-baseline-${{ github.base_ref || 'main' }}
restore-keys: |
benchmark-baseline-main
benchmark-baseline-
- name: Run retrieval benchmarks
run: cargo bench --bench retrieval_bench -- --noplot
continue-on-error: true
- name: Run rerank benchmarks
run: cargo bench --bench rerank_bench -- --noplot
continue-on-error: true
- name: Run fusion benchmarks
run: cargo bench --bench fusion_bench -- --noplot
continue-on-error: true
- name: Run ThinkTool benchmarks
run: cargo bench --bench thinktool_bench -- --noplot
continue-on-error: true
- name: Save benchmark baseline (main only)
if: github.ref == 'refs/heads/main'
uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v4
with:
path: target/criterion
key: benchmark-baseline-main-${{ github.sha }}
- name: Generate benchmark summary
if: always()
run: |
echo "## Benchmark Results" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "| Benchmark | Target | Status |" >> $GITHUB_STEP_SUMMARY
echo "|-----------|--------|--------|" >> $GITHUB_STEP_SUMMARY
echo "| Rerank (20 candidates) | < 200ms | See logs |" >> $GITHUB_STEP_SUMMARY
echo "| Fusion RRF | < 50ms | See logs |" >> $GITHUB_STEP_SUMMARY
echo "| BM25 Search | < 10ms | See logs |" >> $GITHUB_STEP_SUMMARY
echo "| ThinkTool Execution | < 100ms | See logs |" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
if [ -d "target/criterion" ]; then
echo "Criterion HTML reports available in artifacts." >> $GITHUB_STEP_SUMMARY
fi
- name: Upload benchmark reports
if: always()
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: benchmark-reports
path: target/criterion
retention-days: 30
# ===========================================================================
# Code Coverage (Optional)
# ===========================================================================
coverage:
name: "Code Coverage"
runs-on: ubuntu-latest
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
with:
toolchain: stable
- name: Install tarpaulin
run: cargo install cargo-tarpaulin --locked
- name: Generate coverage
run: cargo tarpaulin --all-features --workspace --timeout 300 --out xml --out html
continue-on-error: true
- name: Upload coverage to Codecov
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v4
with:
files: ./cobertura.xml
fail_ci_if_error: false
continue-on-error: true
- name: Upload coverage HTML report
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: coverage-report
path: tarpaulin-report.html
retention-days: 7
continue-on-error: true
# ===========================================================================
# Shell Completions Generation
# ===========================================================================
completions:
name: "Shell Completions"
runs-on: ubuntu-latest
needs: [build]
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Download Linux binary
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
with:
name: rk-linux-x86_64
path: ./bin
- name: Generate shell completions
run: |
chmod +x ./bin/rk
mkdir -p completions
./bin/rk completions bash > completions/rk.bash 2>/dev/null || echo "# Bash completions" > completions/rk.bash
./bin/rk completions zsh > completions/_rk 2>/dev/null || echo "#compdef rk" > completions/_rk
./bin/rk completions fish > completions/rk.fish 2>/dev/null || echo "# Fish completions" > completions/rk.fish
./bin/rk completions powershell > completions/rk.ps1 2>/dev/null || echo "# PowerShell completions" > completions/rk.ps1
- name: Upload completions
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
with:
name: shell-completions
path: completions/
retention-days: 30
# ===========================================================================
# Quality Metrics Summary
# ===========================================================================
metrics:
name: "Quality Metrics"
runs-on: ubuntu-latest
needs: [build, lint, format, test, docs]
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Calculate metrics
run: |
echo "## Quality Metrics Report" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "### Code Statistics" >> $GITHUB_STEP_SUMMARY
echo "| Metric | Value |" >> $GITHUB_STEP_SUMMARY
echo "|--------|-------|" >> $GITHUB_STEP_SUMMARY
# Code metrics
RUST_LINES=$(find src -name '*.rs' -exec cat {} \; 2>/dev/null | wc -l || echo 0)
echo "| Lines of Rust | $RUST_LINES |" >> $GITHUB_STEP_SUMMARY
RUST_FILES=$(find src -name '*.rs' 2>/dev/null | wc -l || echo 0)
echo "| Rust source files | $RUST_FILES |" >> $GITHUB_STEP_SUMMARY
TEST_FILES=$(find tests -name '*.rs' 2>/dev/null | wc -l || echo 0)
echo "| Test files | $TEST_FILES |" >> $GITHUB_STEP_SUMMARY
# Quality indicators
TODO_COUNT=$(grep -r 'TODO' src --include='*.rs' 2>/dev/null | wc -l || echo 0)
echo "| TODO count | $TODO_COUNT |" >> $GITHUB_STEP_SUMMARY
FIXME_COUNT=$(grep -r 'FIXME' src --include='*.rs' 2>/dev/null | wc -l || echo 0)
echo "| FIXME count | $FIXME_COUNT |" >> $GITHUB_STEP_SUMMARY
UNSAFE_COUNT=$(grep -r 'unsafe' src --include='*.rs' 2>/dev/null | wc -l || echo 0)
echo "| Unsafe blocks | $UNSAFE_COUNT |" >> $GITHUB_STEP_SUMMARY
TEST_COUNT=$(grep -r '#\[test\]' src tests --include='*.rs' 2>/dev/null | wc -l || echo 0)
echo "| Test functions | $TEST_COUNT |" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "### Gate Status (CONS-009)" >> $GITHUB_STEP_SUMMARY
echo "- Gate 1: Build - Passed" >> $GITHUB_STEP_SUMMARY
echo "- Gate 2: Lint (Clippy) - Passed" >> $GITHUB_STEP_SUMMARY
echo "- Gate 3: Format - Passed" >> $GITHUB_STEP_SUMMARY
echo "- Gate 4: Tests - Passed" >> $GITHUB_STEP_SUMMARY
echo "- Gate 5: Documentation - Passed" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "**All quality gates passed!**" >> $GITHUB_STEP_SUMMARY
# ===========================================================================
# Release Automation
# ===========================================================================
release:
name: "Create Release"
needs: [build, lint, format, test, security, msrv]
if: startsWith(github.ref, 'refs/tags/v')
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
- name: Download Linux binary
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
with:
name: rk-linux-x86_64
path: artifacts/linux
- name: Download macOS binary
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
with:
name: rk-macos-x86_64
path: artifacts/macos
- name: Download Windows binary
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
with:
name: rk-windows-x86_64
path: artifacts/windows
- name: Download shell completions
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4
with:
name: shell-completions
path: artifacts/completions
continue-on-error: true
- name: Prepare release assets
run: |
VERSION=${GITHUB_REF#refs/tags/}
# Linux
cd artifacts/linux
chmod +x rk
tar czvf ../../rk-${VERSION}-linux-x86_64.tar.gz rk
cd ../..
# macOS
cd artifacts/macos
chmod +x rk
tar czvf ../../rk-${VERSION}-macos-x86_64.tar.gz rk
cd ../..
# Windows
cd artifacts/windows
zip ../../rk-${VERSION}-windows-x86_64.zip rk.exe
cd ../..
# Shell completions (if available)
if [ -d "artifacts/completions" ]; then
cd artifacts/completions
tar czvf ../../rk-${VERSION}-completions.tar.gz *
cd ../..
fi
# Generate checksums
sha256sum rk-${VERSION}-*.tar.gz rk-${VERSION}-*.zip 2>/dev/null > checksums-${VERSION}.txt || true
- name: Create GitHub Release
uses: softprops/action-gh-release@26994186c0ac3ef5cae75ac16aa32e8153525f77 # v1
with:
draft: false
prerelease: ${{ contains(github.ref, '-alpha') || contains(github.ref, '-beta') || contains(github.ref, '-rc') }}
generate_release_notes: true
files: |
rk-*.tar.gz
rk-*.zip
checksums-*.txt
# ===========================================================================
# Badge Generation
# ===========================================================================
badge:
name: "Update Badge"
runs-on: ubuntu-latest
needs: [build, lint, format, test]
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
steps:
- name: Create badge data
run: |
echo "CI pipeline completed successfully"
echo "Badge URL: https://github.com/${{ github.repository }}/actions/workflows/ci.yml/badge.svg"
# ===========================================================================
# Final CI Success Gate
# ===========================================================================
ci-success:
name: "CI Success"
runs-on: ubuntu-latest
needs: [build, lint, format, test, docs, msrv, metrics]
if: always()
steps:
- name: Check all required jobs
run: |
echo "## CI Pipeline Results" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "| Job | Result |" >> $GITHUB_STEP_SUMMARY
echo "|-----|--------|" >> $GITHUB_STEP_SUMMARY
echo "| Build | ${{ needs.build.result }} |" >> $GITHUB_STEP_SUMMARY
echo "| Lint | ${{ needs.lint.result }} |" >> $GITHUB_STEP_SUMMARY
echo "| Format | ${{ needs.format.result }} |" >> $GITHUB_STEP_SUMMARY
echo "| Test | ${{ needs.test.result }} |" >> $GITHUB_STEP_SUMMARY
echo "| Docs | ${{ needs.docs.result }} |" >> $GITHUB_STEP_SUMMARY
echo "| MSRV | ${{ needs.msrv.result }} |" >> $GITHUB_STEP_SUMMARY
echo "| Metrics | ${{ needs.metrics.result }} |" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
REQUIRED_RESULTS="${{ needs.build.result }} ${{ needs.lint.result }} ${{ needs.format.result }} ${{ needs.test.result }} ${{ needs.docs.result }} ${{ needs.msrv.result }}"
for result in $REQUIRED_RESULTS; do
if [ "$result" != "success" ]; then
echo "**CI FAILED** - One or more required jobs did not succeed" >> $GITHUB_STEP_SUMMARY
exit 1
fi
done
echo "**CI PASSED** - All required quality gates succeeded!" >> $GITHUB_STEP_SUMMARY