ci.yml

name: Build and publish jMonkeyEngine Native Bootstrap
on:
  push:
    branches: ['**']
  release:
    types: [published]
  pull_request:
  workflow_dispatch:
permissions:
  contents: read
jobs:
  version:
    runs-on: ubuntu-latest
    outputs:
      release-version: ${{ steps.version.outputs.release-version }}
    steps:
      - name: Validate release version
        id: version
        shell: bash
        run: |
          if [[ "$GITHUB_EVENT_NAME" == release ]]; then
            version="${GITHUB_REF_NAME#v}"
            [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || { echo 'Expected release tag MAJOR.MINOR.PATCH or vMAJOR.MINOR.PATCH'; exit 1; }
            echo "release-version=$version" >> "$GITHUB_OUTPUT"
          fi
  test:
    needs: version
    name: ${{ matrix.os }} / Java ${{ matrix.java }}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        java: ['8', '11', '21']
        include:
          - os: windows-11-arm
            java: '17'
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-java@v5
        if: matrix.os != 'windows-11-arm'
        with:
          distribution: zulu
          java-version: |
            8
            11
            21
      - uses: actions/setup-java@v5
        if: matrix.os == 'windows-11-arm'
        with:
          distribution: microsoft
          java-version: |
            17
            21
      - uses: gradle/actions/setup-gradle@v5
      - uses: ilammy/msvc-dev-cmd@v1
        if: runner.os == 'Windows'
        with:
          arch: ${{ matrix.os == 'windows-11-arm' && 'amd64_arm64' || 'x64' }}
      - name: Prepare Linux noexec fixture
        if: runner.os == 'Linux'
        shell: bash
        run: |
          sudo mkdir -p /mnt/native-bootstrap-noexec
          sudo mount -t tmpfs -o noexec,mode=1777 tmpfs /mnt/native-bootstrap-noexec
          echo 'NATIVE_BOOTSTRAP_NOEXEC_ROOT=/mnt/native-bootstrap-noexec' >> "$GITHUB_ENV"
      - name: Build, test real JNI and prepare artifacts
        shell: bash
        env:
          RELEASE_VERSION: ${{ needs.version.outputs.release-version }}
        run: |
          args=(-PtestJavaVersion=${{ matrix.java }})
          tasks=(build)
          if [[ -n "$RELEASE_VERSION" ]]; then
            args+=(-PreleaseVersion="$RELEASE_VERSION")
          else
            tasks+=(stageMavenArtifacts)
          fi
          ./gradlew --no-daemon "${tasks[@]}" "${args[@]}"
      - name: Upload test reports
        if: always()
        uses: actions/upload-artifact@v6
        with:
          name: tests-${{ matrix.os }}-java-${{ matrix.java }}
          path: '**/build/reports/tests/'
      - name: Unmount Linux fixture
        if: always() && runner.os == 'Linux'
        shell: bash
        run: sudo umount /mnt/native-bootstrap-noexec || true
  android:
    name: Android / JNI end-to-end
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: '21'
      - uses: android-actions/setup-android@v4
      - name: Install Android build tools
        shell: bash
        run: |
          sdkmanager 'platforms;android-35' 'build-tools;35.0.0' 'ndk;27.2.12479018'
          echo "ANDROID_NDK_HOME=$ANDROID_HOME/ndk/27.2.12479018" >> "$GITHUB_ENV"
      - name: Enable emulator acceleration
        run: |
          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
          sudo udevadm control --reload-rules
          sudo udevadm trigger --name-match=kvm
      - name: Run JNI on Android emulator
        uses: reactivecircus/android-emulator-runner@v2
        with:
          api-level: 35
          arch: x86_64
          script: bash native-loader/src/test/android/run.sh
  publish:
    needs: [version, test, android]
    if: github.event_name == 'release' || (github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master'))
    runs-on: ubuntu-latest
    environment: sonatype-central
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: '21'
      - uses: gradle/actions/setup-gradle@v5
      - name: Publish to Maven Central
        shell: bash
        env:
          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
          SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
          CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
          CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
          RELEASE_VERSION: ${{ needs.version.outputs.release-version }}
        run: |
          for secret in SIGNING_KEY SIGNING_PASSWORD CENTRAL_USERNAME CENTRAL_PASSWORD; do
            if [[ -z "${!secret}" ]]; then
              echo "::error::Missing required secret: $secret"
              exit 1
            fi
          done
          if [[ -n "$RELEASE_VERSION" ]]; then
            ./gradlew --no-daemon mavenCentralDeploy -PreleaseVersion="$RELEASE_VERSION"
          else
            ./gradlew --no-daemon mavenCentralDeploy
          fi