revert: pkg/tui lean-mode machinery from #3724 #8119
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: ${{ github.ref != 'refs/heads/main' }} | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: [ main ] | |
| tags: [ "v*" ] | |
| pull_request: | |
| branches: [ main ] | |
| jobs: | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| - name: Set up Go | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| go-version-file: go.mod | |
| cache-dependency-path: go.sum | |
| - name: Lint | |
| uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0 | |
| with: | |
| version: v2.12.2 | |
| - name: Lint GitHub Actions | |
| uses: raven-actions/actionlint@3d39aea434753780c3b3d4a1a31c854b4dbf49d7 # v2.2.0 | |
| with: | |
| fail-on-error: true | |
| pyflakes: false | |
| - name: Lint GitHub Workflows | |
| run: ./scripts/workflow-lint.sh | |
| build-and-test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| - name: Set up Go | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| go-version-file: go.mod | |
| cache-dependency-path: go.sum | |
| - name: Install Task | |
| uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0 | |
| with: | |
| version: 3.51.1 | |
| - name: Create bin directory | |
| run: mkdir -p "$HOME/bin" | |
| - name: Build | |
| run: task build | |
| - name: Run tests | |
| run: | | |
| task test | |
| task test-binary | |
| license-check: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| - name: Set up Go | |
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| go-version-file: go.mod | |
| cache-dependency-path: go.sum | |
| - name: Install go-licences | |
| run: go install github.com/google/go-licenses@latest | |
| - name: Check licenses | |
| run: go-licenses check . --allowed_licenses=Apache-2.0,MIT,BSD-3-Clause,BSD-2-Clause --ignore modernc.org/mathutil --ignore github.com/hashicorp/hcl/v2 | |
| build-image: | |
| if: github.event_name == 'pull_request' | |
| # Build each platform on its own native runner, in parallel. Building both | |
| # platforms on a single runner serializes two CPU-bound cgo/zig compiles on | |
| # 2 vCPUs (~8 min); splitting across native runners cuts wall-clock to ~4 min. | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - platform: linux/amd64 | |
| runner: ubuntu-latest | |
| - platform: linux/arm64 | |
| runner: ubuntu-24.04-arm | |
| runs-on: ${{ matrix.runner }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 | |
| - name: Build image | |
| uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 | |
| with: | |
| context: . | |
| platforms: ${{ matrix.platform }} | |
| push: false | |
| sbom: false | |
| provenance: false | |
| build-args: | | |
| GIT_TAG=pr | |
| GIT_COMMIT=dev | |
| cache-from: type=gha,scope=buildx-${{ matrix.platform }} | |
| cache-to: type=gha,mode=min,scope=buildx-${{ matrix.platform }} | |
| # The sandbox template shares the builder-linux stage, so it reuses the | |
| # binary compiled by the step above. | |
| - name: Build template | |
| uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 | |
| with: | |
| context: . | |
| target: template | |
| platforms: ${{ matrix.platform }} | |
| push: false | |
| sbom: false | |
| provenance: false | |
| build-args: | | |
| GIT_TAG=pr | |
| GIT_COMMIT=dev | |
| cache-from: type=gha,scope=buildx-${{ matrix.platform }} | |
| build-and-push-image: | |
| if: github.event_name != 'pull_request' && !github.event.repository.fork | |
| needs: [ lint, build-and-test, license-check ] | |
| # Build each platform on its own native runner in parallel, push by digest, | |
| # then assemble the multi-arch manifest in the merge job below. | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - platform: linux/amd64 | |
| runner: ubuntu-latest | |
| - platform: linux/arm64 | |
| runner: ubuntu-24.04-arm | |
| runs-on: ${{ matrix.runner }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| - name: Prepare platform name | |
| run: echo "PLATFORM_PAIR=${platform//\//-}" >> "$GITHUB_ENV" | |
| env: | |
| platform: ${{ matrix.platform }} | |
| - name: Hub login | |
| uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 | |
| with: | |
| username: ${{ vars.DOCKERPUBLICBOT_USERNAME }} | |
| password: ${{ secrets.DOCKERPUBLICBOT_WRITE_PAT }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 | |
| - name: Docker metadata | |
| id: meta | |
| uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 | |
| with: | |
| images: | | |
| docker/docker-agent | |
| - name: Build and push by digest | |
| id: build | |
| uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 | |
| with: | |
| context: . | |
| platforms: ${{ matrix.platform }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| sbom: true | |
| provenance: mode=max | |
| outputs: type=image,name=docker/docker-agent,push-by-digest=true,name-canonical=true,push=true | |
| build-args: | | |
| GIT_TAG=${{ github.ref_name }} | |
| GIT_COMMIT=${{ github.sha }} | |
| cache-from: type=gha,scope=buildx-${{ matrix.platform }} | |
| cache-to: type=gha,mode=max,scope=buildx-${{ matrix.platform }} | |
| - name: Export digest | |
| run: | | |
| mkdir -p "${RUNNER_TEMP}/digests" | |
| digest="${{ steps.build.outputs.digest }}" | |
| touch "${RUNNER_TEMP}/digests/${digest#sha256:}" | |
| - name: Upload digest | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | |
| with: | |
| name: digests-${{ env.PLATFORM_PAIR }} | |
| path: ${{ runner.temp }}/digests/* | |
| if-no-files-found: error | |
| retention-days: 1 | |
| # The sandbox template is a stage of the same Dockerfile with identical | |
| # build args, so it reuses the builder-linux layer from the image build | |
| # above and embeds the exact same binary. | |
| - name: Build and push template by digest | |
| id: build-template | |
| uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 | |
| with: | |
| context: . | |
| target: template | |
| platforms: ${{ matrix.platform }} | |
| sbom: true | |
| provenance: mode=max | |
| outputs: type=image,name=docker/docker-agent-sbx-templates,push-by-digest=true,name-canonical=true,push=true | |
| build-args: | | |
| GIT_TAG=${{ github.ref_name }} | |
| GIT_COMMIT=${{ github.sha }} | |
| cache-from: type=gha,scope=buildx-${{ matrix.platform }} | |
| - name: Export template digest | |
| env: | |
| DIGEST: ${{ steps.build-template.outputs.digest }} | |
| run: | | |
| mkdir -p "${RUNNER_TEMP}/template-digests" | |
| touch "${RUNNER_TEMP}/template-digests/${DIGEST#sha256:}" | |
| - name: Upload template digest | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 | |
| with: | |
| name: template-digests-${{ env.PLATFORM_PAIR }} | |
| path: ${{ runner.temp }}/template-digests/* | |
| if-no-files-found: error | |
| retention-days: 1 | |
| merge-and-push-image: | |
| if: github.event_name != 'pull_request' && !github.event.repository.fork | |
| needs: [ build-and-push-image ] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Download digests | |
| uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 | |
| with: | |
| path: ${{ runner.temp }}/digests | |
| pattern: digests-* | |
| merge-multiple: true | |
| - name: Hub login | |
| uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 | |
| with: | |
| username: ${{ vars.DOCKERPUBLICBOT_USERNAME }} | |
| password: ${{ secrets.DOCKERPUBLICBOT_WRITE_PAT }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 | |
| - name: Docker metadata | |
| id: meta | |
| uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 | |
| with: | |
| images: | | |
| docker/docker-agent | |
| tags: | | |
| type=semver,pattern={{version}} | |
| type=edge | |
| type=ref,event=pr | |
| - name: Create manifest list and push | |
| working-directory: ${{ runner.temp }}/digests | |
| run: | | |
| mapfile -t tags < <(jq -r '.tags[]' <<< "$DOCKER_METADATA_OUTPUT_JSON") | |
| args=() | |
| for tag in "${tags[@]}"; do args+=(-t "$tag"); done | |
| for digest in *; do args+=("docker/docker-agent@sha256:${digest}"); done | |
| docker buildx imagetools create "${args[@]}" | |
| - name: Inspect image | |
| run: | | |
| docker buildx imagetools inspect docker/docker-agent:${{ steps.meta.outputs.version }} | |
| merge-and-push-template: | |
| if: github.event_name != 'pull_request' && !github.event.repository.fork | |
| needs: [ build-and-push-image ] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Download template digests | |
| uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 | |
| with: | |
| path: ${{ runner.temp }}/template-digests | |
| pattern: template-digests-* | |
| merge-multiple: true | |
| - name: Hub login | |
| uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 | |
| with: | |
| username: ${{ vars.DOCKERPUBLICBOT_USERNAME }} | |
| password: ${{ secrets.DOCKERPUBLICBOT_WRITE_PAT }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 | |
| # Assemble the multi-arch manifest list from the per-arch digests pushed | |
| # by build-and-push-image. On main only the edge tag moves; on a v* tag | |
| # both the version tag and the floating latest tag that sandboxes pulls | |
| # by default. | |
| - name: Create manifest list and push | |
| working-directory: ${{ runner.temp }}/template-digests | |
| run: | | |
| if [[ "${GITHUB_REF}" == refs/tags/v* ]]; then | |
| tags=(-t "docker/docker-agent-sbx-templates:${GITHUB_REF_NAME#v}" -t "docker/docker-agent-sbx-templates:latest") | |
| else | |
| tags=(-t "docker/docker-agent-sbx-templates:edge") | |
| fi | |
| args=() | |
| for digest in *; do args+=("docker/docker-agent-sbx-templates@sha256:${digest}"); done | |
| docker buildx imagetools create "${tags[@]}" "${args[@]}" | |
| - name: Inspect template | |
| run: | | |
| if [[ "${GITHUB_REF}" == refs/tags/v* ]]; then tag="${GITHUB_REF_NAME#v}"; else tag="edge"; fi | |
| docker buildx imagetools inspect "docker/docker-agent-sbx-templates:${tag}" |