name: ci

on: [push, pull_request]

jobs:
  build:
    name: ${{ matrix.job }} ${{ matrix.profile }} ${{ matrix.os }}
    if: |
      github.event_name == 'push' ||
      !startsWith(github.event.pull_request.head.label, 'denoland:')
    runs-on: ${{ matrix.os }}
    timeout-minutes: 90
    strategy:
      matrix:
        include:
          - os: macos-10.15
            job: test
            profile: fastci
          - os: macos-10.15
            job: test
            profile: release
          - os: windows-2019
            job: test
            profile: fastci
          - os: windows-2019
            job: test
            profile: release
          - os: ${{ github.repository == 'denoland/deno' && 'ubuntu-20.04-xl' || 'ubuntu-20.04' }}
            job: test
            profile: release
            use_sysroot: true
          - os: ${{ github.repository == 'denoland/deno' && 'ubuntu-20.04-xl' || 'ubuntu-20.04' }}
            job: bench
            profile: release
            use_sysroot: true
          - os: ${{ github.repository == 'denoland/deno' && 'ubuntu-20.04-xl' || 'ubuntu-20.04' }}
            job: test
            profile: debug
          - os: ${{ github.repository == 'denoland/deno' && 'ubuntu-20.04-xl' || 'ubuntu-20.04' }}
            job: lint
            profile: debug

      # Always run main branch builds to completion. This allows the cache to
      # stay mostly up-to-date in situations where a single job fails due to
      # e.g. a flaky test.
      # Don't fast-fail on tag build because publishing binaries shouldn't be
      # prevented if any of the stages fail (which can be a false negative).
      fail-fast: ${{ github.event_name == 'pull_request' ||
        (github.ref != 'refs/heads/main' &&
        !startsWith(github.ref, 'refs/tags/')) }}

    env:
      CARGO_TERM_COLOR: always
      RUST_BACKTRACE: full
      RUSTC_FORCE_INCREMENTAL: 1

    steps:
      - name: Configure git
        run: |
          git config --global core.symlinks true
          git config --global fetch.parallel 32

      - name: Clone repository
        uses: actions/checkout@v2
        with:
          # Use depth > 1, because sometimes we need to rebuild main and if
          # other commits have landed it will become impossible to rebuild if
          # the checkout is too shallow.
          fetch-depth: 5
          submodules: recursive

      - name: Create source tarballs (release, linux)
        if: |
          startsWith(matrix.os, 'ubuntu') &&
          matrix.profile == 'release' &&
          matrix.job == 'test' &&
          github.repository == 'denoland/deno' &&
          startsWith(github.ref, 'refs/tags/')
        run: |
          mkdir -p target/release
          tar --exclude=".git*" --exclude=target --exclude=third_party/prebuilt \
              -czvf target/release/deno_src.tar.gz -C .. deno

      - name: Install Rust
        uses: hecrj/setup-rust-action@v1
        with:
          rust-version: 1.57.0

      - name: Install clippy and rustfmt
        if: matrix.job == 'lint'
        run: |
          rustup component add clippy
          rustup component add rustfmt

      - name: Install Deno
        if: matrix.job == 'lint'
        run: |
          curl -fsSL https://deno.land/x/install/install.sh | sh -s v1.13.2
          echo "$HOME/.deno/bin" >> $GITHUB_PATH

      - name: Install Python
        uses: actions/setup-python@v1
        with:
          python-version: 3.8

      - name: Install Node
        uses: actions/setup-node@v2
        with:
          node-version: 17

      - name: Remove unused versions of Python
        if: startsWith(matrix.os, 'windows')
        run: |-
          $env:PATH -split ";" |
            Where-Object { Test-Path "$_\python.exe" } |
            Select-Object -Skip 1 |
            ForEach-Object { Move-Item "$_" "$_.disabled" }

      - name: Setup gcloud (unix)
        if: |
          runner.os != 'Windows' &&
          matrix.profile == 'release' &&
          matrix.job == 'test' &&
          github.repository == 'denoland/deno' &&
          (github.ref == 'refs/heads/main' ||
          startsWith(github.ref, 'refs/tags/'))
        uses: google-github-actions/setup-gcloud@master
        with:
          project_id: denoland
          service_account_key: ${{ secrets.GCP_SA_KEY }}
          export_default_credentials: true

      - name: Setup gcloud (windows)
        if: |
          runner.os == 'Windows' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          (github.ref == 'refs/heads/main' ||
          startsWith(github.ref, 'refs/tags/'))
        uses: google-github-actions/setup-gcloud@master
        env:
          CLOUDSDK_PYTHON: ${{env.pythonLocation}}\python.exe
        with:
          project_id: denoland
          service_account_key: ${{ secrets.GCP_SA_KEY }}
          export_default_credentials: true

      - name: Error on warning
        # TODO(piscisaureus): enable this on Windows again.
        if: "!matrix.use_sysroot && !startsWith(matrix.os, 'windows')"
        run: echo "RUSTFLAGS=-D warnings" >> $GITHUB_ENV

      - name: Configure canary build
        if: |
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main'
        shell: bash
        run: echo "DENO_CANARY=true" >> $GITHUB_ENV

      - name: Set up Linux sysroot with Ubuntu 18.04 and LLVM
        if: matrix.use_sysroot
        run: |
          # Avoid running man-db triggers, which sometimes takes several minutes
          # to complete.
          sudo apt-get remove --purge -y man-db
          sudo apt-get update
          sudo apt-get install debootstrap

          # `file` and `make` are needed to build libffi-sys.
          # `curl` is needed to build rusty_v8.
          # `git`, `nc`, `strace`, and `time`, are needed to run the benchmarks.
          sudo debootstrap                                                          \
            --include=ca-certificates,curl,file,git,make,netcat-openbsd,strace,time \
            --no-merged-usr --variant=minbase bionic /sysroot                       \
            http://azure.archive.ubuntu.com/ubuntu
          sudo mount --rbind /dev /sysroot/dev
          sudo mount --rbind /sys /sysroot/sys
          sudo mount --rbind /home /sysroot/home
          sudo mount -t proc /proc /sysroot/proc

          sudo ln --force --target /sysroot/etc \
                  /etc/passwd /etc/shadow /etc/group /etc/gshadow

          # Install clang-13 and lld-13 into the chroot environment.
          echo "deb http://apt.llvm.org/bionic/ llvm-toolchain-bionic-13 main" |
            sudo dd of=/sysroot/etc/apt/sources.list.d/llvm-toolchain-bionic-13.list
          curl https://apt.llvm.org/llvm-snapshot.gpg.key |
            gpg --dearmor                                 |
            sudo dd of=/sysroot/etc/apt/trusted.gpg.d/llvm-snapshot.gpg
          sudo chroot /sysroot apt-get update
          sudo chroot /sysroot apt-get install --no-install-recommends -y \
                                               clang-13 lld-13

          # Redirect ld invocations to ld.lld-13 inside the chroot environment.
          # Setting the 'LD' environment variable doesn't always work.
          sudo chroot /sysroot bash -c \
                                    'ln -f "$(which ld.lld-13)" "$(which ld)"'

          # Make node (needed to run the benchmarks) available.
          sudo ln --target /sysroot/usr/bin "$(which node)"

          cat >> ~/.bash_profile << ___
            cd "$(pwd)"

            # Configure canary build.
            if [ "$DENO_CANARY" == "true" ]
            then
              export DENO_CANARY=true
            fi

            # Add cargo, rustc, and deno to $PATH.
            source /home/runner/.cargo/env
            export PATH="$PATH:$(pwd)/target/release"

            # Rust build configuration.
            export CARGO_PROFILE_BENCH_INCREMENTAL=false
            export CARGO_PROFILE_BENCH_LTO=false
            export CARGO_PROFILE_RELEASE_INCREMENTAL=false
            export CARGO_PROFILE_RELEASE_LTO=false
            export RUSTFLAGS="
              -C linker-plugin-lto=true
              -C linker=clang-13
              -C link-arg=-fuse-ld=lld-13
              -C link-arg=-Wl,--thinlto-cache-dir=$(pwd)/target/release/lto-cache
              -C link-arg=-Wl,--thinlto-cache-policy,cache_size_bytes=700m
              -D warnings
            "
            export RUSTDOCFLAGS="\$RUSTFLAGS"
            unset RUSTC_FORCE_INCREMENTAL

            # C build configuration.
            export CC=clang-13        # Compile c source files with clang.
            export CFLAGS=-flto=thin  # Tell clang to produce llvm bitcode.
            export LD=ld.lld-13       # Use the lld linker.

            # Miscellaneous flags.
            export CARGO_TERM_COLOR=always
            export CI=true
          ___

      - name: Log versions
        shell: bash
        run: |
          node -v
          python --version
          rustc --version
          cargo --version
          # Deno is installed when linting.
          if [ "${{ matrix.job }}" == "lint" ]
          then
            deno --version
          fi

      - name: Cache Cargo home
        uses: actions/cache@v2
        with:
          # See https://doc.rust-lang.org/cargo/guide/cargo-home.html#caching-the-cargo-home-in-ci
          path: |
            ~/.cargo/registry/index
            ~/.cargo/registry/cache
            ~/.cargo/git/db
          key: 2-cargo-home-${{ matrix.os }}-${{ hashFiles('Cargo.lock') }}

      # In main branch, always creates fresh cache
      - name: Cache build output (main)
        # TODO(kt3k): Change the version to the released version
        # when https://github.com/actions/cache/pull/489 (or 571) is merged.
        uses: actions/cache@03e00da99d75a2204924908e1cca7902cafce66b
        if: (matrix.profile == 'release' || matrix.profile == 'fastci') &&
            github.ref == 'refs/heads/main'
        with:
          path: |
            ./target
            !./target/*/gn_out
            !./target/*/*.zip
            !./target/*/*.tar.gz
          key: |
            2-cargo-target-${{ matrix.os }}-${{ matrix.profile }}-${{ github.sha }}

      # Restore cache from the latest 'main' branch build.
      - name: Cache build output (PR)
        # TODO(kt3k): Change the version to the released version
        # when https://github.com/actions/cache/pull/489 (or 571) is merged.
        uses: actions/cache@03e00da99d75a2204924908e1cca7902cafce66b
        if: github.ref != 'refs/heads/main'
        with:
          path: |
            ./target
            !./target/*/gn_out
            !./target/*/*.zip
            !./target/*/*.tar.gz
          key: never_saved
          restore-keys: |
            2-cargo-target-${{ matrix.os }}-${{ matrix.profile }}-

      # Don't save cache after building PRs or branches other than 'main'.
      - name: Skip save cache (PR)
        run: echo "CACHE_SKIP_SAVE=true" >> $GITHUB_ENV
        shell: bash
        if: github.ref != 'refs/heads/main'

      - name: Apply and update mtime cache
        if: matrix.profile == 'release'
        uses: ./.github/mtime_cache
        with:
          cache-path: ./target

      # Shallow the cloning the crates.io index makes CI faster because it
      # obviates the need for Cargo to clone the index. If we don't do this
      # Cargo will `git clone` the github repository that contains the entire
      # history of the crates.io index from github. We don't believe the
      # identifier '1ecc6299db9ec823' will ever change, but if it does then this
      # command must be updated.
      - name: Shallow clone crates.io index
        shell: bash
        run: |
          if [ ! -d ~/.cargo/registry/index/github.com-1ecc6299db9ec823/.git ]
          then
            git clone --depth 1 --no-checkout                      \
                      https://github.com/rust-lang/crates.io-index \
                      ~/.cargo/registry/index/github.com-1ecc6299db9ec823
          fi

      - name: test_format.js
        if: matrix.job == 'lint'
        run: deno run --unstable --allow-write --allow-read --allow-run ./tools/format.js --check

      - name: lint.js
        if: matrix.job == 'lint'
        # TODO(ry) assert matrix.profile == "debug"
        run: deno run --unstable --allow-write --allow-read --allow-run ./tools/lint.js

      - name: Build debug
        if: |
          (matrix.job == 'test' || matrix.job == 'bench') &&
          matrix.profile == 'debug' && !matrix.use_sysroot
        run: cargo build --locked --all-targets

      - name: Build fastci
        if: (matrix.job == 'test' && matrix.profile == 'fastci')
        run: cargo build --locked --all-targets
        env:
          CARGO_PROFILE_DEV_DEBUG: 0

      - name: Build release
        if: |
          (matrix.job == 'test' || matrix.job == 'bench') &&
          matrix.profile == 'release' && !matrix.use_sysroot &&
          github.repository == 'denoland/deno' &&
          (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/'))
        run: cargo build --release --locked --all-targets

      - name: Build release (in sysroot)
        if: |
          (matrix.job == 'test' || matrix.job == 'bench') &&
          matrix.profile == 'release' && matrix.use_sysroot
        run: |
          sudo chroot /sysroot   \
               su -l "$(whoami)" \
                  -c "cargo build --release --locked --all-targets"

      - name: Pre-release (linux)
        if: |
          startsWith(matrix.os, 'ubuntu') &&
          matrix.job == 'test' &&
          matrix.profile == 'release'
        run: |
          cd target/release
          zip -r deno-x86_64-unknown-linux-gnu.zip deno
          ./deno types > lib.deno.d.ts

      - name: Pre-release (mac)
        if: |
          startsWith(matrix.os, 'macOS') &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/'))
        run: |
          cd target/release
          zip -r deno-x86_64-apple-darwin.zip deno

      - name: Pre-release (windows)
        if: |
          startsWith(matrix.os, 'windows') &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/'))
        run: |
          Compress-Archive -CompressionLevel Optimal -Force -Path target/release/deno.exe -DestinationPath target/release/deno-x86_64-pc-windows-msvc.zip

      - name: Upload canary to dl.deno.land (unix)
        if: |
          runner.os != 'Windows' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main'
        run: |
          gsutil -h "Cache-Control: public, max-age=3600" cp ./target/release/*.zip gs://dl.deno.land/canary/$(git rev-parse HEAD)/

      - name: Upload canary to dl.deno.land (windows)
        if: |
          runner.os == 'Windows' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main'
        env:
          CLOUDSDK_PYTHON: ${{env.pythonLocation}}\python.exe
        shell: bash
        run: |
          gsutil -h "Cache-Control: public, max-age=3600" cp ./target/release/*.zip gs://dl.deno.land/canary/$(git rev-parse HEAD)/

      - name: Test debug
        if: |
          matrix.job == 'test' && matrix.profile == 'debug' &&
          !matrix.use_sysroot && !startsWith(github.ref, 'refs/tags/')
        run: |
          cargo test --locked --doc
          cargo test --locked

      - name: Test fastci
        if: (matrix.job == 'test' && matrix.profile == 'fastci')
        run: cargo test --locked
        env:
          CARGO_PROFILE_DEV_DEBUG: 0

      - name: Test release
        if: |
          matrix.job == 'test' && matrix.profile == 'release' &&
          !matrix.use_sysroot &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main' && !startsWith(github.ref, 'refs/tags/')
        run: cargo test --release --locked

      - name: Test release (in sysroot)
        if: |
          matrix.job == 'test' && matrix.profile == 'release' &&
          matrix.use_sysroot && !startsWith(github.ref, 'refs/tags/')
        run: |
          sudo chroot /sysroot   \
               su -l "$(whoami)" \
                  -c "cargo test --release --locked"

      # Since all tests are skipped when we're building a tagged commit
      # this is a minimal check to ensure that binary is not corrupted
      - name: Check Deno Binary
        if: matrix.profile == 'release' && startsWith(github.ref, 'refs/tags/')
        shell: bash
        run: target/release/deno eval "console.log(1+2)" | grep 3
        env:
          NO_COLOR: 1

      # TODO(ry): Because CI is so slow on for OSX and Windows, we currently
      #           run the Web Platform tests only on Linux.
      - name: Configure hosts file for WPT
        if: startsWith(matrix.os, 'ubuntu') && matrix.job == 'test'
        run: ./wpt make-hosts-file | sudo tee -a /etc/hosts
        working-directory: test_util/wpt/

      - name: Run web platform tests (debug)
        if: |
          startsWith(matrix.os, 'ubuntu') && matrix.job == 'test' &&
          matrix.profile == 'debug' &&
          github.ref == 'refs/heads/main'
        env:
          DENO_BIN: ./target/debug/deno
        run: |
          "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
                          --allow-write --unstable                         \
                          ./tools/wpt.ts setup
          "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
                          --allow-write --unstable                         \
                          ./tools/wpt.ts run --quiet --binary="$DENO_BIN"

      - name: Run web platform tests (release)
        if: |
          startsWith(matrix.os, 'ubuntu') && matrix.job == 'test' &&
          matrix.profile == 'release' && !startsWith(github.ref, 'refs/tags/')
        env:
          DENO_BIN: ./target/release/deno
        run: |
          "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
                          --allow-write --unstable                         \
                          ./tools/wpt.ts setup
          "$DENO_BIN" run --allow-env --allow-net --allow-read --allow-run \
                          --allow-write --unstable                         \
                          ./tools/wpt.ts run --quiet --release             \
                                             --binary="$DENO_BIN"          \
                                             --json=wpt.json               \
                                             --wptreport=wptreport.json

      - name: Upload wpt results to dl.deno.land
        if: |
          runner.os == 'Linux' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main' && !startsWith(github.ref, 'refs/tags/')
        run: |
          gzip ./wptreport.json
          gsutil -h "Cache-Control: public, max-age=3600" cp ./wpt.json gs://dl.deno.land/wpt/$(git rev-parse HEAD).json
          gsutil -h "Cache-Control: public, max-age=3600" cp ./wptreport.json.gz gs://dl.deno.land/wpt/$(git rev-parse HEAD)-wptreport.json.gz
          echo $(git rev-parse HEAD) > wpt-latest.txt
          gsutil -h "Cache-Control: no-cache" cp wpt-latest.txt gs://dl.deno.land/wpt-latest.txt

      - name: Upload wpt results to wpt.fyi
        if: |
          runner.os == 'Linux' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main' && !startsWith(github.ref, 'refs/tags/')
        env:
          WPT_FYI_USER: ${{ secrets.WPT_FYI_USER }}
          WPT_FYI_PW: ${{ secrets.WPT_FYI_PW }}
          GITHUB_TOKEN: ${{ secrets.DENOBOT_PAT }}
        run: |
          ./target/release/deno run --allow-all \
              ./tools/upload_wptfyi.js $(git rev-parse HEAD) --ghstatus

      - name: Run benchmarks
        if: matrix.job == 'bench' && !matrix.use_sysroot && !startsWith(github.ref, 'refs/tags/')
        run: cargo bench --locked

      - name: Run benchmarks (in sysroot)
        if: matrix.job == 'bench' && matrix.use_sysroot
        run: |
          sudo chroot /sysroot   \
               su -l "$(whoami)" \
                  -c "cargo bench --locked"

      - name: Post Benchmarks
        if: |
          matrix.job == 'bench' &&
          github.repository == 'denoland/deno' &&
          github.ref == 'refs/heads/main' && !startsWith(github.ref, 'refs/tags/')
        env:
          DENOBOT_PAT: ${{ secrets.DENOBOT_PAT }}
        run: |
          git clone --depth 1 --branch gh-pages                             \
              https://${DENOBOT_PAT}@github.com/denoland/benchmark_data.git \
              gh-pages
          ./target/release/deno run --allow-all --unstable \
              ./tools/build_benchmark_jsons.js --release
          cd gh-pages
          git config user.email "propelml@gmail.com"
          git config user.name "denobot"
          git add .
          git commit --message "Update benchmarks"
          git push origin gh-pages

      - name: Build product size info
        if: matrix.job != 'lint' && matrix.profile != 'fastci' &&
          github.repository == 'denoland/deno' &&
          (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/'))
        run: |
          du -hd1 "./target/${{ matrix.profile }}"
          du -ha  "./target/${{ matrix.profile }}/deno"

      - name: Worker info
        if: matrix.job == 'bench'
        run: |
          cat /proc/cpuinfo
          cat /proc/meminfo

      - name: Upload release to dl.deno.land (unix)
        if: |
          runner.os != 'Windows' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          startsWith(github.ref, 'refs/tags/')
        run: |
          gsutil -h "Cache-Control: public, max-age=3600" cp ./target/release/*.zip gs://dl.deno.land/release/${GITHUB_REF#refs/*/}/
          echo ${GITHUB_REF#refs/*/} > release-latest.txt
          gsutil -h "Cache-Control: no-cache" cp release-latest.txt gs://dl.deno.land/release-latest.txt

      - name: Upload release to dl.deno.land (windows)
        if: |
          runner.os == 'Windows' &&
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          startsWith(github.ref, 'refs/tags/')
        env:
          CLOUDSDK_PYTHON: ${{env.pythonLocation}}\python.exe
        shell: bash
        run: |
          gsutil -h "Cache-Control: public, max-age=3600" cp ./target/release/*.zip gs://dl.deno.land/release/${GITHUB_REF#refs/*/}/
          echo ${GITHUB_REF#refs/*/} > release-latest.txt
          gsutil -h "Cache-Control: no-cache" cp release-latest.txt gs://dl.deno.land/release-latest.txt

      - name: Upload release to GitHub
        uses: softprops/action-gh-release@59c3b4891632ff9a897f99a91d7bc557467a3a22
        if: |
          matrix.job == 'test' &&
          matrix.profile == 'release' &&
          github.repository == 'denoland/deno' &&
          startsWith(github.ref, 'refs/tags/')
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          files: |
            target/release/deno-x86_64-pc-windows-msvc.zip
            target/release/deno-x86_64-unknown-linux-gnu.zip
            target/release/deno-x86_64-apple-darwin.zip
            target/release/deno_src.tar.gz
            target/release/lib.deno.d.ts
          draft: true

  publish-canary:
    name: publish canary
    runs-on: ubuntu-20.04
    needs: ["build"]
    if: github.repository == 'denoland/deno' &&
        (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/'))
    steps:
      - name: Setup gcloud
        uses: google-github-actions/setup-gcloud@master
        with:
          project_id: denoland
          service_account_key: ${{ secrets.GCP_SA_KEY }}
          export_default_credentials: true

      - name: Upload canary version file to dl.deno.land
        run: |
          echo ${{ github.sha }} > canary-latest.txt
          gsutil -h "Cache-Control: no-cache" cp canary-latest.txt gs://dl.deno.land/canary-latest.txt