release.yml

name: Lint, Test & Release

on:
  push:
    branches-ignore:
      - 'dependabot/**'
  pull_request:

permissions:
  contents: read

jobs:
  commitlint:
    name: Lint commits
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          fetch-depth: 0
          persist-credentials: false
      - name: Setup Node.js
        uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - name: Install dependencies
        run: npm clean-install
      - name: Lint commit
        if: github.event_name == 'push'
        run: npx commitlint --from HEAD~1 --to HEAD --verbose
      - name: Lint commits
        if: github.event_name == 'pull_request'
        run: npx commitlint --from ${{ github.event.pull_request.head.sha }}~${{ github.event.pull_request.commits }} --to ${{ github.event.pull_request.head.sha }} --verbose
  codelint:
    name: Lint code
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          persist-credentials: false
      - name: Setup Node.js
        uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - name: Install dependencies
        run: npm clean-install
      - name: Lint code
        run: npm run lint
  buildlint:
    name: Check built files
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          persist-credentials: false
      - name: Setup Node.js
        uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - name: Install dependencies
        run: npm clean-install
      - name: Build files
        run: npm run build
      - name: Check built files
        run: git diff-files --quiet -w
  test:
    name: Run tests
    runs-on: ubuntu-22.04
    needs:
      - commitlint
      - codelint
      - buildlint
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          persist-credentials: false
      - name: Setup Node.js
        uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - name: Install dependencies
        run: npm clean-install
      - name: Run tests
        run: npm run test -- --forbid-only
  coverage:
    name: Test coverage
    runs-on: ubuntu-22.04
    needs:
      - commitlint
      - codelint
      - buildlint
    permissions:
      contents: read
      pull-requests: write # to be able to comment on released pull requests
    steps:
      - uses: actions/checkout@v7
        with:
          persist-credentials: false
      - name: Use Node.js
        uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - name: Install deps
        run: npm ci
      - name: Test code
        run: npm run test:coverage -- --forbid-only
      - name: Report coverage
        run: |
          echo "# Code coverage" >> $GITHUB_STEP_SUMMARY
          npx nyc report | sed --expression='1d;$d'  >> $GITHUB_STEP_SUMMARY
        if: ${{ !cancelled() }}
  runaction:
    needs:
      - commitlint
      - codelint
      - buildlint
      - test
    strategy:
      # let every job finish so a failure on one runner doesn't hide the outcome (and hardware) of the others
      fail-fast: false
      matrix:
        os: [ 'windows-2022', 'windows-2025' ]
        sqlserver: [ 'sql-latest', 'sql-2025', 'sql-2022', 'sql-2019', 'sql-2017', 'sql-2016' ]
    runs-on: ${{ matrix.os }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
        with:
          persist-credentials: false
      # SQL Server can't start on a volume reporting a sector size over 4 KB, so record the runner's hardware to
      # compare against any setup failures
      - name: Log runner hardware
        continue-on-error: true
        shell: pwsh
        # write everything straight to the host so it isn't reordered around the output of fsutil
        run: |
          try {
            $vmSize = Invoke-RestMethod -Headers @{ Metadata = 'true' } -TimeoutSec 5 -Uri 'http://169.254.169.254/metadata/instance/compute/vmSize?api-version=2021-02-01&format=text'
          } catch {
            $vmSize = "unknown ($_)"
          }
          Write-Host "VM size: $vmSize"
          Write-Host "CPU: $((Get-CimInstance Win32_Processor).Name)"
          Get-PhysicalDisk | Format-Table -AutoSize FriendlyName, BusType, MediaType, LogicalSectorSize, PhysicalSectorSize | Out-Host
          $forced = (Get-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Services\stornvme\Parameters\Device' -ErrorAction SilentlyContinue).ForcedPhysicalSectorSizeInBytes
          Write-Host "ForcedPhysicalSectorSizeInBytes: $(if ($forced) { $forced } else { 'not set' })"
          foreach ($volume in Get-Volume | Where-Object { $_.DriveLetter -and $_.DriveType -eq 'Fixed' } | Sort-Object DriveLetter) {
            Write-Host "$($volume.DriveLetter):"
            fsutil fsinfo sectorinfo "$($volume.DriveLetter):"
          }
      - name: Install sql server
        uses: ./
        with:
          sqlserver-version: ${{ matrix.sqlserver }}
          native-client-version: 11
          odbc-version: 17
          install-updates: true
      - name: Upload SQL Server logs
        if: failure()
        uses: actions/upload-artifact@v7
        with:
          name: sqlserver-logs-${{ matrix.os }}-${{ matrix.sqlserver }}-${{ github.run_attempt }}
          path: |
            C:/Program Files/Microsoft SQL Server/*/Setup Bootstrap/Log/
            C:/Program Files/Microsoft SQL Server/MSSQL*/MSSQL/Log/
          if-no-files-found: ignore
  release:
    name: Release
    concurrency: release
    if: ${{ github.repository_owner == 'tediousjs' && github.event_name == 'push' && github.actor != 'dependabot[bot]' }}
    runs-on: ubuntu-22.04
    needs:
      - commitlint
      - codelint
      - buildlint
      - test
      - runaction
    permissions:
      contents: write # to be able to publish a GitHub release
      issues: write # to be able to comment on released issues
      pull-requests: write # to be able to comment on released pull requests
      id-token: write # to enable use of OIDC for npm provenance
    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Setup Node.js
        uses: actions/setup-node@v7
        with:
          node-version-file: '.nvmrc'
          cache: 'npm'
      - name: Install dependencies
        run: npm clean-install
      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
        run: npm audit signatures
      - name: Release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: npx semantic-release