release: version → 0.12.25 (release-commit convention) #1521
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: gates | |
| # push+pull_request unrestricted ran the suite TWICE per PR-branch push (both events | |
| # fire) — pure duplication. Push covers main + release tags; pull_request covers PRs. | |
| # | |
| # SPLIT INTO 3 PARALLEL JOBS (wall-clock law): static / python / node run concurrently | |
| # (~5 min serial → ~2.5 min), joined by the `gates` job — the ONE required-check context | |
| # branch protection and the merge queue watch. The join fails if ANY leg is not success | |
| # (if:always() + explicit check, because a skipped required check would read as satisfied). | |
| on: | |
| push: | |
| branches: [main] | |
| tags: ['v*'] | |
| pull_request: | |
| # merge queue: the queue's temporary merge-group ref must run (and report) `gates`, | |
| # or every queued PR waits forever on a check that never fires. | |
| merge_group: | |
| # a superseded run's result is worthless — cancel it | |
| concurrency: | |
| group: gates-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| static: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: pnpm/action-setup@v4 # version comes from package.json "packageManager" | |
| - uses: actions/setup-node@v4 | |
| with: { node-version: 22, cache: pnpm } # pnpm 11.7 requires Node >= 22.13 | |
| - run: pnpm install --frozen-lockfile | |
| env: { ONNXRUNTIME_NODE_INSTALL: skip } | |
| # each gate its own step so a failure is unambiguous | |
| - run: pnpm gate:readme | |
| - run: pnpm gate:docs-version | |
| - run: pnpm gate:isolation | |
| - run: pnpm gate:exports | |
| - run: pnpm gate:graph | |
| - run: pnpm gate:schema | |
| - run: pnpm gate:contract-version | |
| - run: pnpm gate:config-contract | |
| - run: pnpm gate:db-schema | |
| - run: pnpm gate:db-budget | |
| - run: pnpm gate:dataflow | |
| - run: pnpm gate:calm | |
| - run: pnpm gate:licenses | |
| # Tests OF the gate scripts (the instruments the steps above trust). scripts/ is not a | |
| # workspace package, so `pnpm test` — turbo run test — never reaches it: this step is the | |
| # only lane these files run in. Kept here, beside the gates they cover, rather than in the | |
| # node job, whose install/build cost buys them nothing. | |
| - name: gate script tests | |
| run: node --test scripts/*.test.mjs release/*.test.mjs | |
| python: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: pnpm/action-setup@v4 | |
| - uses: actions/setup-node@v4 | |
| with: { node-version: 22, cache: pnpm } | |
| - uses: astral-sh/setup-uv@v5 | |
| - run: pnpm install --frozen-lockfile | |
| env: { ONNXRUNTIME_NODE_INSTALL: skip } | |
| # the runtime docker-backend lifecycle test creates containers via the docker socket API, | |
| # which (unlike `docker run`) does NOT implicit-pull — pre-pull its fixture image | |
| - run: docker pull alpine | |
| - run: pnpm gate:python | |
| node: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: pnpm/action-setup@v4 | |
| - uses: actions/setup-node@v4 | |
| with: { node-version: 22, cache: pnpm } | |
| # CI runners have no GPU: skip onnxruntime-node's postinstall CUDA EP download — it is | |
| # large, raced across the two resolved onnxruntime versions, and flaked main's first run | |
| # (ENOENT in /tmp cleanup). The CPU binaries tests use are bundled in the package itself. | |
| - run: pnpm install --frozen-lockfile | |
| env: { ONNXRUNTIME_NODE_INSTALL: skip } | |
| - run: pnpm typecheck | |
| - run: pnpm build | |
| - run: pnpm test | |
| # THE required check — branch protection + merge queue watch this single context. | |
| gates: | |
| needs: [static, python, node] | |
| if: always() | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: All legs green? | |
| env: | |
| R_STATIC: ${{ needs.static.result }} | |
| R_PYTHON: ${{ needs.python.result }} | |
| R_NODE: ${{ needs.node.result }} | |
| run: | | |
| echo "static=$R_STATIC python=$R_PYTHON node=$R_NODE" | |
| [ "$R_STATIC" = "success" ] && [ "$R_PYTHON" = "success" ] && [ "$R_NODE" = "success" ] \ | |
| || { echo "::error ::a gates leg failed or was cancelled"; exit 1; } | |
| echo "✓ all gate legs green" |