deps(deps): bump the testing group with 2 updates #129
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI (pull_request) | |
| on: | |
| pull_request: | |
| branches: [ main, develop ] | |
| permissions: | |
| contents: read | |
| checks: write | |
| pull-requests: write | |
| jobs: | |
| build: | |
| name: Build & Test (Java ${{ matrix.java }}) | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| java: [ '17', '21' ] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 1 | |
| - name: Set up JDK ${{ matrix.java }} | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: ${{ matrix.java }} | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Build and test with Maven | |
| run: mvn -B clean verify -Pqa -Ddependency-check.skip=true | |
| # Upload XMLs ONLY once (Java 21) so the report doesn't double-count | |
| - name: Upload unit test XMLs (Java 21 only) | |
| uses: actions/upload-artifact@v4 | |
| if: always() && matrix.java == '21' | |
| with: | |
| name: unit-xml | |
| path: | | |
| **/target/surefire-reports/TEST-*.xml | |
| **/target/*-reports/TEST-*.xml | |
| retention-days: 7 | |
| integration-tests: | |
| name: Integration & E2E Tests (Java ${{ matrix.java }}) | |
| runs-on: ubuntu-latest | |
| needs: build | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| java: [ '17', '21' ] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 1 | |
| - name: Set up JDK ${{ matrix.java }} | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: ${{ matrix.java }} | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Run integration tests | |
| run: mvn -B clean verify -Pit -Ddependency-check.skip=true | |
| # Upload XMLs ONLY once (Java 21) so the report doesn't double-count | |
| - name: Upload IT test XMLs (Java 21 only) | |
| uses: actions/upload-artifact@v4 | |
| if: always() && matrix.java == '21' | |
| with: | |
| name: it-xml | |
| path: | | |
| **/target/failsafe-reports/TEST-*.xml | |
| retention-days: 7 | |
| quality: | |
| name: Code Quality Analysis | |
| runs-on: ubuntu-latest | |
| needs: build | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 1 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Install artifacts for analysis (skip tests) | |
| run: mvn -B -Ddependency-check.skip=true clean install -Pqa -DskipTests | |
| - name: Run SpotBugs analysis | |
| run: mvn -B spotbugs:check -Pqa -Ddependency-check.skip=true | |
| - name: Run Checkstyle analysis | |
| run: mvn -B checkstyle:check -Pqa -Ddependency-check.skip=true | |
| dependency-check: | |
| name: OWASP Dependency Check | |
| runs-on: ubuntu-latest | |
| needs: build | |
| env: | |
| NVD_API_KEY: ${{ secrets.NVD_API_KEY }} | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - name: Cache Dependency-Check DB | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.m2/repository/org/owasp/dependency-check-data | |
| key: depcheck-${{ runner.os }}-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| depcheck-${{ runner.os }}- | |
| - name: Run OWASP Dependency Check | |
| run: mvn -B dependency-check:aggregate -Pqa | |
| reports: | |
| name: Test Reports | |
| runs-on: ubuntu-latest | |
| needs: [ build, integration-tests ] | |
| if: always() | |
| permissions: | |
| contents: read | |
| checks: write | |
| pull-requests: write | |
| steps: | |
| - name: Download unit XMLs (Java 21 only) | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: unit-xml | |
| path: reports/unit | |
| - name: Download IT XMLs (Java 21 only) | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: it-xml | |
| path: reports/it | |
| - name: Publish Unit Test Report | |
| uses: mikepenz/action-junit-report@v4 | |
| if: always() | |
| with: | |
| report_paths: 'reports/unit/**/TEST-*.xml' | |
| check_name: Unit Test Report | |
| - name: Publish IT Test Report | |
| uses: mikepenz/action-junit-report@v4 | |
| if: always() | |
| with: | |
| report_paths: 'reports/it/**/TEST-*.xml' | |
| check_name: IT Test Report |