prek/.github/workflows/ci.yml

name: CI

on:
  push:
    branches: [master]
  pull_request:
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: true

permissions: {}

env:
  # UV_VERSION should not greater than MAX_UV_VERSION in `languages/python/uv`.
  # Otherwise, tests jobs will install their own uv, and it will encounter concurrency issue.
  UV_VERSION: "0.11.6"
  NODE_VERSION: "20"
  BUN_VERSION: "1.3"
  GO_VERSION: "1.24"
  PYTHON_VERSION: "3.12"
  RUBY_VERSION: "3.4"
  LUA_VERSION: "5.4"
  LUAROCKS_VERSION: "3.12.2"
  GHC_VERSION: "9.14.1" # Preinstalled in ubuntu-24.04 runner image
  CABAL_VERSION: "3.16.1.0"
  JULIA_VERSION: "1.12.4"
  DOTNET_VERSION: "10.0"
  DENO_VERSION: "2"

  # Cargo env vars
  CARGO_INCREMENTAL: 0
  CARGO_NET_RETRY: 10
  CARGO_TERM_COLOR: always
  RUSTUP_MAX_RETRIES: 10

jobs:
  plan:
    runs-on: ubuntu-latest
    outputs:
      test-code: ${{ !contains(github.event.pull_request.labels.*.name, 'test:skip') && (steps.changed.outputs.any_code_changed == 'true' || github.ref == 'refs/heads/master') }}
      save-rust-cache: ${{ github.ref == 'refs/heads/master' || steps.changed.outputs.cache_changed == 'true' }}
      # Run benchmarks if Rust code or benchmark-related files changed
      run-bench: ${{ !contains(github.event.pull_request.labels.*.name, 'test:skip') && (steps.changed.outputs.rust_code_changed == 'true' || steps.changed.outputs.bench_related_changed == 'true' || github.ref == 'refs/heads/master') }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: "Determine changed files"
        id: changed
        shell: bash
        run: |
          CHANGED_FILES=$(git diff --name-only ${{ github.event.pull_request.base.sha || 'origin/master' }}...HEAD)

          ANY_CODE_CHANGED=false
          CACHE_CHANGED=false
          RUST_CODE_CHANGED=false
          BENCH_RELATED_CHANGED=false

          while IFS= read -r file; do
            # Check if cache-relevant files changed (Cargo files, toolchain, workflows)
            if [[ "${file}" == "Cargo.lock" || "${file}" == "Cargo.toml" || "${file}" == "rust-toolchain.toml" || "${file}" == ".cargo/config.toml" || "${file}" =~ ^crates/.*/Cargo\.toml$ || "${file}" =~ ^\.github/workflows/.*\.yml$ ]]; then
              echo "Detected cache-relevant change: ${file}"
              CACHE_CHANGED=true
            fi

            # Check if Rust code changed (for benchmarks)
            if [[ "${file}" =~ \.rs$ ]] || [[ "${file}" =~ Cargo\.toml$ ]] || [[ "${file}" == "Cargo.lock" ]] || [[ "${file}" == "rust-toolchain.toml" ]] || [[ "${file}" =~ ^\.cargo/ ]]; then
              echo "Detected Rust code change: ${file}"
              RUST_CODE_CHANGED=true
            fi

            if [[ "${file}" == ".github/workflows/performance.yml" ]] || [[ "${file}" =~ ^scripts/hyperfine-.*\.sh$ ]]; then
              echo "Detected benchmark-related change: ${file}"
              BENCH_RELATED_CHANGED=true
            fi

            if [[ "${file}" =~ ^docs/ ]]; then
              echo "Skipping ${file} (matches docs/ pattern)"
              continue
            fi
            if [[ "${file}" =~ ^mkdocs.*\.yml$ ]]; then
              echo "Skipping ${file} (matches mkdocs*.yml pattern)"
              continue
            fi
            if [[ "${file}" =~ \.md$ ]]; then
              echo "Skipping ${file} (matches *.md pattern)"
              continue
            fi

            echo "Detected code change in: ${file}"
            ANY_CODE_CHANGED=true

          done <<< "${CHANGED_FILES}"
          {
            echo "any_code_changed=${ANY_CODE_CHANGED}"
            echo "cache_changed=${CACHE_CHANGED}"
            echo "rust_code_changed=${RUST_CODE_CHANGED}"
            echo "bench_related_changed=${BENCH_RELATED_CHANGED}"
          } >> "${GITHUB_OUTPUT}"

  lint:
    name: "lint"
    timeout-minutes: 10
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - name: "Install Rustfmt"
        run: rustup component add rustfmt
      - name: "rustfmt"
        run: cargo fmt --all --check
      - name: Run prek checks
        uses: j178/prek-action@53276d8b0d10f8b6672aa85b4588c6921d0370cc # v2.0.1
        env:
          PREK_SKIP: cargo-fmt,cargo-clippy

  check-release:
    name: "check release"
    needs: plan
    timeout-minutes: 10
    runs-on: ubuntu-latest
    env:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Install dist
        shell: bash
        run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.31.0/cargo-dist-installer.sh | sh"

      - name: Run dist plan
        run: |
          dist plan --output-format=json > plan-dist-manifest.json
          echo "dist plan completed successfully"
          cat plan-dist-manifest.json

  cargo-clippy-linux:
    name: "cargo clippy | ubuntu"
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1
      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Install Rust toolchain"
        run: rustup component add clippy
      - name: "Clippy"
        run: cargo clippy --workspace --all-targets --all-features --locked -- -D warnings

  cargo-clippy-windows:
    name: "cargo clippy | windows"
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 15
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Create Dev Drive
        run: ${{ github.workspace }}/.github/workflows/setup-dev-drive.ps1

      # actions/checkout does not let us clone into anywhere outside ${{ github.workspace }}, so we have to copy the clone...
      - name: Copy Git Repo to Dev Drive
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:PREK_WORKSPACE" -Recurse

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          workspaces: ${{ env.PREK_WORKSPACE }}
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Install Rust toolchain"
        run: rustup component add clippy

      - name: "Clippy"
        working-directory: ${{ env.PREK_WORKSPACE }}
        run: cargo clippy --workspace --all-targets --all-features --locked -- -D warnings

  cargo-shear:
    name: "cargo shear"
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - name: "Install cargo shear"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-shear
      - run: cargo shear

  cargo-test-without-uv:
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 5
    runs-on: ubuntu-latest
    name: "cargo test | without uv"
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1
      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Install Rust toolchain"
        run: rustup component add llvm-tools-preview

      - name: "Install cargo nextest"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-nextest

      - name: "Install cargo-llvm-cov"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-llvm-cov

      - name: "Cargo test without uv"
        run: |
          echo "::group::Test install uv with auto select"
          cargo llvm-cov nextest \
            --profile ci-core \
            --cargo-profile fast-build \
            --no-report \
            -E 'binary_id(prek::run) and test(run_basic)'
          echo "::endgroup::"

          for source in github pypi aliyun pip invalid; do
            echo "::group::Test install uv from $source"
            export PREK_UV_SOURCE=$source
            cargo llvm-cov nextest \
              --profile ci-core \
              --cargo-profile fast-build \
              --no-report \
              -E 'binary_id(prek::run) and test(run_basic)'
            echo "::endgroup::"
          done

          cargo llvm-cov report --profile fast-build --lcov --output-path lcov.info

      - name: "Upload coverage reports to Codecov"
        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: lcov.info

  cargo-test:
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: ${{ matrix.os }}
    name: "cargo test | ${{ matrix.os }}"
    strategy:
      fail-fast: false
      matrix:
        os:
          - ubuntu-latest
          - macos-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1
        if: ${{ matrix.os == 'ubuntu-latest' }}
      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Install Rust toolchain"
        run: rustup component add llvm-tools-preview

      - name: "Install cargo nextest"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-nextest

      - name: "Install cargo-llvm-cov"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-llvm-cov

      - name: "Install uv"
        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
        with:
          version: ${{ env.UV_VERSION }}

      - name: "Install Python"
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: ${{ env.PYTHON_VERSION }}

      - name: "Cargo test"
        run: |
          cargo llvm-cov nextest \
            --lcov \
            --output-path lcov.info \
            --workspace \
            --cargo-profile fast-build \
            --profile ci-core \
            --features schemars

      - name: "Upload coverage reports to Codecov"
        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: lcov.info

  cargo-test-windows:
    name: "cargo test | windows"
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    runs-on: windows-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Create Dev Drive
        run: ${{ github.workspace }}/.github/workflows/setup-dev-drive.ps1

      # actions/checkout does not let us clone into anywhere outside ${{ github.workspace }}, so we have to copy the clone...
      - name: Copy Git Repo to Dev Drive
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:PREK_WORKSPACE" -Recurse

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          workspaces: ${{ env.PREK_WORKSPACE }}
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Install Rust toolchain"
        run: rustup component add llvm-tools-preview

      - name: "Install cargo nextest"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-nextest

      - name: "Install cargo-llvm-cov"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-llvm-cov

      - name: "Install uv"
        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
        with:
          version: ${{ env.UV_VERSION }}
          cache-local-path: ${{ env.DEV_DRIVE }}/uv-cache

      - name: "Install Python"
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: ${{ env.PYTHON_VERSION }}

      - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # windows only

      - name: "Cargo test"
        working-directory: ${{ env.PREK_WORKSPACE }}
        shell: pwsh
        run: |
          # Remove msys64 from PATH for Rust compilation
          $env:PATH = ($env:PATH -split ';' | Where-Object { $_ -notmatch '\\msys64\\' }) -join ';'

          cargo llvm-cov nextest `
            --lcov `
            --output-path lcov.info `
            --workspace `
            --cargo-profile fast-build `
            --features schemars `
            --profile ci-core

          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }

      - name: "Upload coverage reports to Codecov"
        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ${{ env.PREK_WORKSPACE }}/lcov.info

  language-tests:
    name: "language tests | ${{ matrix.os }} | group ${{ matrix.group }} (${{ matrix.languages }})"
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 15
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        # Keep platform constraints encoded directly in grouped rows:
        # Docker only runs on Ubuntu, Swift skips Windows, and Haskell skips macOS.
        include:
          - os: ubuntu-latest
            group: 1
            languages: bun deno docker
            filter: test(bun::) or test(deno::) or test(docker::) or test(docker_image::)
          - os: ubuntu-latest
            group: 2
            languages: dotnet golang haskell
            filter: test(dotnet::) or test(golang::) or test(haskell::)
          - os: ubuntu-latest
            group: 3
            languages: julia lua node
            filter: test(julia::) or test(lua::) or test(node::)
          - os: ubuntu-latest
            group: 4
            languages: python ruby rust
            filter: test(python::) or test(ruby::) or test(rust::)
          - os: ubuntu-latest
            group: 5
            languages: swift
            filter: test(swift::)
          - os: macos-latest
            group: 1
            languages: bun deno dotnet
            filter: test(bun::) or test(deno::) or test(dotnet::)
          - os: macos-latest
            group: 2
            languages: golang julia lua
            filter: test(golang::) or test(julia::) or test(lua::)
          - os: macos-latest
            group: 3
            languages: node python ruby
            filter: test(node::) or test(python::) or test(ruby::)
          - os: macos-latest
            group: 4
            languages: rust swift
            filter: test(rust::) or test(swift::)
          - os: windows-latest
            group: 1
            languages: bun deno dotnet
            filter: test(bun::) or test(deno::) or test(dotnet::)
          - os: windows-latest
            group: 2
            languages: golang haskell julia
            filter: test(golang::) or test(haskell::) or test(julia::)
          - os: windows-latest
            group: 3
            languages: lua node python
            filter: test(lua::) or test(node::) or test(python::)
          - os: windows-latest
            group: 4
            languages: ruby rust
            filter: test(ruby::) or test(rust::)
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1
        if: ${{ matrix.os == 'ubuntu-latest' }}

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Install Rust toolchain"
        run: rustup component add llvm-tools-preview

      - name: "Install cargo nextest"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-nextest

      - name: "Install cargo-llvm-cov"
        uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7
        with:
          tool: cargo-llvm-cov

      - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # windows only
        if: ${{ matrix.os == 'windows-latest' }}

      - name: "Install uv"
        if: ${{ contains(format(' {0} ', matrix.languages), ' python ') }}
        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
        with:
          version: ${{ env.UV_VERSION }}

      - name: "Install Python"
        if: ${{ contains(format(' {0} ', matrix.languages), ' python ') }}
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: ${{ env.PYTHON_VERSION }}

      - name: "Install Node.js"
        if: ${{ contains(format(' {0} ', matrix.languages), ' node ') }}
        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm
          # Dummy dependency path to satisfy required input while enabling caching
          cache-dependency-path: LICENSE

      - name: "Install Go"
        if: ${{ contains(format(' {0} ', matrix.languages), ' golang ') }}
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version: ${{ env.GO_VERSION }}
          # Dummy dependency path to satisfy required input while enabling caching
          cache-dependency-path: LICENSE

      - name: "Install Lua"
        if: ${{ contains(format(' {0} ', matrix.languages), ' lua ') }}
        uses: leafo/gh-actions-lua@8c9e175e7a3d77e21f809eefbee34a19b858641b # v12
        with:
          luaVersion: ${{ env.LUA_VERSION }}

      - name: "Install LuaRocks"
        if: ${{ contains(format(' {0} ', matrix.languages), ' lua ') }}
        uses: luarocks/gh-actions-luarocks@7c85eeff60655651b444126f2a78be784e836a0a #v6
        with:
          luaRocksVersion: ${{ env.LUAROCKS_VERSION }}

      - name: "Install Ruby"
        if: ${{ contains(format(' {0} ', matrix.languages), ' ruby ') }}
        uses: ruby/setup-ruby@4c56a21280b36d862b5fc31348f463d60bdc55d5 # v1.301.0
        with:
          ruby-version: ${{ env.RUBY_VERSION }}

      - name: "Install Bun"
        if: ${{ contains(format(' {0} ', matrix.languages), ' bun ') }}
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
        with:
          bun-version: ${{ env.BUN_VERSION }}

      - name: "Install Deno"
        if: ${{ contains(format(' {0} ', matrix.languages), ' deno ') }}
        uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2.0.4
        with:
          deno-version: ${{ env.DENO_VERSION }}

      - name: "Install GHC and Cabal"
        if: ${{ contains(format(' {0} ', matrix.languages), ' haskell ') }}
        uses: haskell-actions/setup@de26526e12bc780fb9d384c1fb61c0bf02e3a40d # v2.10.4
        with:
          ghc-version: ${{ env.GHC_VERSION }}
          cabal-version: ${{ env.CABAL_VERSION }}

      - name: "Install Julia"
        if: ${{ contains(format(' {0} ', matrix.languages), ' julia ') }}
        uses: julia-actions/setup-julia@4a12c5f801ca5ef0458bba44687563ef276522dd # v3.0.0
        with:
          version: ${{ env.JULIA_VERSION }}

      - name: "Install .NET"
        if: ${{ contains(format(' {0} ', matrix.languages), ' dotnet ') }}
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2.0
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: "Run language tests"
        if: ${{ matrix.os != 'windows-latest' }}
        env:
          # Ruby auto_download test queries the GitHub Releases API; without a
          # token, shared runners quickly hit the 60 req/hour rate limit.
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          cargo llvm-cov nextest \
            --lcov \
            --output-path lcov.info \
            --workspace \
            --cargo-profile fast-build \
            --features schemars \
            --profile ci-language \
            -E '${{ matrix.filter }}'

      - name: "Run language tests (windows)"
        if: ${{ matrix.os == 'windows-latest' }}
        shell: pwsh
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          # Remove msys64 from PATH for Rust compilation
          $env:PATH = ($env:PATH -split ';' | Where-Object { $_ -notmatch '\\msys64\\' }) -join ';'

          cargo llvm-cov nextest `
            --lcov `
            --output-path lcov.info `
            --workspace `
            --cargo-profile fast-build `
            --features schemars `
            --profile ci-language `
            -E '${{ matrix.filter }}'

          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }

      - name: "Upload coverage reports to Codecov"
        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: lcov.info

  performance:
    needs: plan
    if: ${{ needs.plan.outputs.run-bench == 'true' }}
    uses: ./.github/workflows/performance.yml
    with:
      save-rust-cache: ${{ needs.plan.outputs.save-rust-cache }}

  ecosystem-cpython:
    name: "ecosystem | cpython"
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Checkout python/cpython
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          repository: python/cpython
          ref: f3759d21dd5e6510361d7409a1df53f35ebd9a58
          path: cpython
          fetch-depth: 1
          persist-credentials: false

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: Run prek on cpython
        working-directory: cpython
        run: cargo run -p prek -- --all-files

  build-binary-msrv:
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    name: "build binary | msrv"
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - name: "Read MSRV from Cargo.toml"
        id: msrv
        run: |
          MSRV=$(grep -m1 'rust-version' Cargo.toml | sed 's/.*"\([^"]*\)".*/\1/')
          echo "value=$MSRV" >> "$GITHUB_OUTPUT"
      - name: "Install Rust toolchain"
        run: rustup default "${MSRV}"
        env:
          MSRV: ${{ steps.msrv.outputs.value }}
      - name: "Install mold"
        uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1
      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}
      - run: cargo +"${MSRV}" build --profile no-debug --bin prek
        env:
          MSRV: ${{ steps.msrv.outputs.value }}
      - run: ./target/no-debug/prek --version

  build-binary-linux-libc:
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: ubuntu-latest
    name: "build binary | linux libc"
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: rui314/setup-mold@9c9c13bf4c3f1adef0cc596abc155580bcb04444 # v1

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Build"
        run: cargo build --profile no-debug --bin prek

      - name: "Upload binary"
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: prek-linux-libc-${{ github.sha }}
          path: |
            ./target/no-debug/prek
          retention-days: 1

  build-binary-macos-aarch64:
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: macos-latest
    name: "build binary | macos aarch64"
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Build"
        run: cargo build --profile no-debug --bin prek

      - name: "Upload binary"
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: prek-macos-aarch64-${{ github.sha }}
          path: |
            ./target/no-debug/prek
          retention-days: 1

  build-binary-windows-x86_64:
    needs: plan
    if: ${{ needs.plan.outputs.test-code == 'true' }}
    timeout-minutes: 10
    runs-on: windows-latest
    name: "build binary | windows x86_64"
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Setup Dev Drive
        run: ${{ github.workspace }}/.github/workflows/setup-dev-drive.ps1

      # actions/checkout does not let us clone into anywhere outside ${{ github.workspace }}, so we have to copy the clone...
      - name: Copy Git Repo to Dev Drive
        run: |
          Copy-Item -Path "${{ github.workspace }}" -Destination "$Env:PREK_WORKSPACE" -Recurse

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          workspaces: ${{ env.PREK_WORKSPACE }}
          save-if: ${{ needs.plan.outputs.save-rust-cache == 'true' }}

      - name: "Build"
        working-directory: ${{ env.PREK_WORKSPACE }}
        run: cargo build --profile no-debug --bin prek

      - name: "Upload binary"
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: prek-windows-x86_64-${{ github.sha }}
          path: |
            ${{ env.PREK_WORKSPACE }}/target/no-debug/prek.exe
          retention-days: 1