cicd.yml

name: Continuous Integration & Delivery

on:
  push:
    branches: [ develop, main, bugfix/*, feature/* ]
  pull_request:
    branches: [ develop, main ]
  workflow_dispatch:
    inputs:
      publish_nuget_package:
        description: Publish a new NuGet package?
        required: false
        type: boolean

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.sha }}
  cancel-in-progress: true

env:
  DOTNET_CLI_TELEMETRY_OPTOUT: true
  DOTNET_NOLOGO: true
  DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
  DOTNET_USE_POLLING_FILE_WATCHER: true
  NUGET_XMLDOC_MODE: skip
  # https://stackoverflow.com/q/53510011.
  TZ: CET

jobs:
  collect-test-projects:
    runs-on: ubuntu-24.04

    outputs:
      test-projects: ${{ steps.set-test-projects.outputs.test-projects }}

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v5
        with:
          lfs: true

      - id: get-all-changed-files
        name: Collect Changed Files
        uses: tj-actions/changed-files@v47

      - id: set-test-projects
        name: Collect Test Projects
        shell: pwsh
        run: echo "test-projects=$(.github/scripts/Collect-TestProjects.ps1)" >> $env:GITHUB_OUTPUT
        env:
          ALL_CHANGED_FILES: ${{ steps.get-all-changed-files.outputs.all_changed_files }}

  ci:
    if: ${{ needs.collect-test-projects.outputs.test-projects != '[]' }}

    needs: collect-test-projects

    strategy:
      max-parallel: 6
      matrix:
        test-projects: ${{ fromJSON(needs.collect-test-projects.outputs.test-projects) }}

    runs-on: ${{ matrix.test-projects.runs-on }}

    env:
      # Lowest API version that GitHub runners support.
      DOCKER_API_VERSION: 1.47

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v5
        with:
          lfs: true

      - name: Cache NuGet Packages
        uses: actions/cache@v4
        with:
          key: ${{ matrix.test-projects.runs-on }}-nuget-${{ hashFiles('Directory.Packages.props') }}
          path: ~/.nuget/packages

      - name: Setup .NET
        uses: actions/setup-dotnet@v5

      - name: Restore NuGet Packages
        run: ./build.sh --target=Restore-NuGet-Packages
        shell: bash

      - name: Run Build
        run: ./build.sh --target=Build --test-project=${{ matrix.test-projects.name }}
        shell: bash

      - name: Run Tests
        run: ./build.sh --target=Test --test-project=${{ matrix.test-projects.name }}
        shell: bash

      - name: Upload Test And Coverage Results
        uses: actions/upload-artifact@v4
        if: always()
        with:
          name: ${{ matrix.test-projects.name }}
          path: test-results

  cd:
    if: ${{ github.repository == 'testcontainers/testcontainers-dotnet' && contains(fromJson('["develop", "main"]'), github.ref_name) }}

    needs: ci

    environment: production

    permissions:
      contents: write
      pull-requests: read

    runs-on: ubuntu-24.04

    env:
      CODE_SIGNING_CERTIFICATE_BASE64: ${{ secrets.CODE_SIGNING_CERTIFICATE_BASE64 }}
      CODE_SIGNING_CERTIFICATE_PASSWORD: ${{ secrets.CODE_SIGNING_CERTIFICATE_PASSWORD }}
      FEED_SOURCE: https://api.nuget.org/v3/index.json
      FEED_API_KEY: ${{ secrets.FEED_API_KEY }}
      SONARCLOUD_URL: https://sonarcloud.io
      SONARCLOUD_ORGANIZATION: testcontainers
      SONARCLOUD_KEY: testcontainers_testcontainers-dotnet
      SONARCLOUD_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
      PUBLISH_NUGET_PACKAGE: ${{ inputs.publish_nuget_package }}

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v5
        with:
          lfs: true
          fetch-depth: 0

      - name: Download Test And Coverage Results
        uses: actions/download-artifact@v5
        with:
          pattern: Testcontainers*
          path: test-results

      - name: Fix Absolute Code Coverage Paths
        run: Get-ChildItem -Path 'test-results' -Filter '*.xml' -Recurse | Select-Object -ExpandProperty FullName | % { (Get-Content -LiteralPath $_) -Replace 'fullPath="[A-Za-z0-9:\-\/\\]+(src|tests)', 'fullPath="${{ github.workspace }}/$1' | Set-Content -LiteralPath $_ }
        shell: pwsh

      - name: Cache NuGet Packages
        uses: actions/cache@v4
        with:
          key: ubuntu-24.04-nuget-${{ hashFiles('Directory.Packages.props') }}
          path: ~/.nuget/packages

      - name: Setup Java
        uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: 21

      - name: Setup .NET
        uses: actions/setup-dotnet@v5

      - name: Restore NuGet Packages
        run: ./build.sh --target=Restore-NuGet-Packages
        shell: bash

      - name: Run Sonar Analysis
        run: ./build.sh --target=Sonar-Begin
        shell: bash

      - name: Run Build
        run: ./build.sh --target=Build
        shell: bash

      - name: Upload Sonar Results
        run: ./build.sh --target=Sonar-End
        shell: bash

      - name: Publish NuGet Package
        run: ./build.sh --target=Publish
        shell: bash

      # Cake sets the semVer environment variable.
      - uses: release-drafter/release-drafter@v6
        with:
          version: ${{ env.semVer }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}