vscode-python/.github/workflows/release-compatibility.yml at main · microsoft/vscode-python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
name: Packaged compatibility guards

on:
  pull_request:
    paths:
      - '.github/workflows/release-compatibility.yml'
      - 'build/releaseCompatibility/**'
      - 'build/azure-pipeline.release-compatibility.yml'
      - 'package.json'
      - 'package-lock.json'
      - '.nvmrc'
  push:
    branches: [main, 'release/**']
    paths:
      - '.github/workflows/release-compatibility.yml'
      - 'build/releaseCompatibility/**'
      - 'build/azure-pipeline.release-compatibility.yml'
      - 'package.json'
      - 'package-lock.json'
      - '.nvmrc'
  workflow_dispatch:

permissions:
  contents: read

jobs:
  guards:
    name: Guards and immutable harness (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    strategy:
      fail-fast: false
      matrix:
        os: [windows-2022, ubuntu-22.04]
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Select repository Node version
        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version-file: .nvmrc
          cache: npm
      - name: Restore locked dependencies without install hooks
        run: npm ci --ignore-scripts --no-audit --no-fund
      - name: Run package, provenance, interpreter, mode, adapter and packer guards
        run: npm run test:releaseCompatibility
      - name: Lint compatibility implementation
        run: npx --no-install eslint --max-warnings 0 build/releaseCompatibility
      - name: Produce immutable reusable test harness
        run: npm run package:releaseCompatibility -- "${{ github.workspace }}/harness.zip"
      - name: Select Python for real fixture venvs
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: '3.10'
      - name: Exercise the frozen released pair in real isolated on/off hosts
        shell: pwsh
        run: |
          $output = Join-Path $env:GITHUB_WORKSPACE 'released-pair-evidence'
          $script = Join-Path (Join-Path (Join-Path $env:GITHUB_WORKSPACE 'build') 'releaseCompatibility') 'selfTest.js'
          $python = (Get-Command python).Source
          if ($IsLinux) {
            & xvfb-run -a node $script $output $python
          } else {
            & node $script $output $python
          }
          exit $LASTEXITCODE
      - name: Retain verified harness bytes
        if: always()
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: python-release-compatibility-harness-${{ matrix.os }}
          path: harness.zip
          if-no-files-found: error
          retention-days: 7
      - name: Retain real-host pass, failure and infrastructure evidence
        if: always()
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: released-pair-evidence-${{ matrix.os }}
          path: |
            released-pair-evidence/input-report.json
            released-pair-evidence/plan.json
            released-pair-evidence/run/report.json
            released-pair-evidence/run/environments-on/candidate/**
            released-pair-evidence/run/environments-on/user-data/logs/**
            released-pair-evidence/run/environments-on/workspace/probe-*.json
            released-pair-evidence/run/explicit-off/candidate/**
            released-pair-evidence/run/explicit-off/user-data/logs/**
            released-pair-evidence/run/explicit-off/workspace/probe-*.json
          if-no-files-found: warn
          retention-days: 7