replicate 2.0.1

name: Continuous integration

'on':
  push:
    branches:
      - main
      - master
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  check-release:
    name: Check release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      issues: write
      pull-requests: write
    outputs:
      new-release: ${{ steps.release.outputs.new_release }}
      version: ${{ steps.build-version.outputs.version }}
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          fetch-depth: 0
      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
        with:
          node-version: lts/*
      - run: npm install
      - name: Release
        id: release
        if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master')
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: npx semantic-release
      - name: Build version
        id: build-version
        run: echo "version=${BUILD_VERSION}" >> "$GITHUB_OUTPUT"
        env:
          BUILD_VERSION: ${{ steps.release.outputs.new_release == 'true' && steps.release.outputs.version || format('0.0.{0}', github.run_id) }}

  rust_matrix:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.rust.outputs.matrix }}
    steps:
      - name: Define rust matrix
        id: rust
        run: |
          echo "matrix={'rust': ['stable', '1.85.0']}" >> $GITHUB_OUTPUT

  lint-and-test:
    name: Check
    runs-on: ubuntu-latest
    needs:
      - check-release
      - rust_matrix
    strategy:
      matrix: ${{ fromJson(needs.rust_matrix.outputs.matrix) }}
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - name: Set version
        run: python3 prepare.py "${{ needs.check-release.outputs.version }}"
      - uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
        with:
          toolchain: ${{ matrix.rust }}
      - name: Rust Cache
        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
      - run: rustup component add rustfmt
      - run: rustup component add clippy
      - run: cargo check
      - run: cargo fmt --all -- --check
      - run: cargo clippy -- -D warnings
      - run: cargo test

  tarpaulin:
    name: Tarpaulin
    runs-on: ubuntu-latest
    needs: [check-release]
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - name: Set version
        run: python3 prepare.py "${{ needs.check-release.outputs.version }}"
      - uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
        with:
          toolchain: stable
      - name: Rust Cache
        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
      - run: |
          cargo install cargo-tarpaulin
          cargo tarpaulin --out xml
      - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ./cobertura.xml
          verbose: true

  msrv:
    name: Find msrv
    runs-on: ubuntu-latest
    needs: [check-release]
    if: startsWith(github.head_ref, 'renovate/')
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - name: Set version
        run: python3 prepare.py "${{ needs.check-release.outputs.version }}"
      - uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
        with:
          toolchain: stable
      - name: Rust Cache
        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
      - run: |
          cargo install cargo-msrv
          cargo msrv find

  musl:
    name: Musl
    runs-on: ubuntu-latest
    needs: [check-release]
    strategy:
      matrix:
        example:
          - docker
          - docker_build
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - name: Set version
        run: python3 prepare.py "${{ needs.check-release.outputs.version }}"
      - uses: dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 # master
        with:
          target: x86_64-unknown-linux-musl
          toolchain: stable
      - name: Rust Cache
        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          key: ${{ matrix.example }}
      - run: |
          cargo run --example ${{ matrix.example }} --target x86_64-unknown-linux-musl

  publish:
    runs-on: ubuntu-latest
    needs:
      - check-release
      - lint-and-test
      - musl
      - tarpaulin
      - msrv
    if: always() && needs.lint-and-test.result == 'success' && needs.musl.result == 'success' && needs.tarpaulin.result == 'success' && (needs.msrv.result == 'success' || needs.msrv.result == 'skipped')
    environment: release
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - name: Set version
        run: python3 prepare.py "${{ needs.check-release.outputs.version }}"
      - uses: rust-lang/crates-io-auth-action@v1
        id: auth
      - name: Publish to crates.io
        run: cargo publish --allow-dirty
        if: needs.check-release.outputs.new-release == 'true'
        env:
          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
      - name: Dry-run publish
        run: cargo publish --allow-dirty --dry-run
        if: needs.check-release.outputs.new-release != 'true'

  success:
    name: Success
    runs-on: ubuntu-latest
    needs: [publish]
    steps:
      - name: Success
        run: echo "CI completed successfully!"