CI workflow (itchyny/gojq)

name: CI
 
on:
  push:
    branches:
      - main
    tags:
      - v*
  pull_request:
 
permissions:
  contents: read
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
jobs:
  build:
    timeout-minutes: 30
    name: Build
    runs-on: latchkey-small
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
      - name: Setup Go
        uses: actions/setup-go@v6
        with:
          go-version: 1.26.x
      - name: Build
        run: make build
      - name: Check command examples
        run: |
          # shellcheck disable=SC2016
          ./gojq -Rsr 'scan("```sh\n( \\$ .*?)```"; "m")[] |
            gsub(" +#.*"; "") | splits(" \\$ ") |
            capture("(?<command>.+?)\n(?<output>.+)"; "m") |
            "if diff <(printf %s \(.output | @sh)) \\
              <(\(.command | gsub("gojq"; "./gojq")) 2>&1); then
              echo ok: \(.command | @sh)
            else
              echo ng: \(.command | @sh); exit 1
            fi"
          ' README.md | bash
        shell: bash
      - name: Cross build
        run: make cross
      - name: Upload artifact
        uses: actions/upload-artifact@v7
        with:
          name: goxz
          path: goxz
      - name: Clean
        run: make clean
 
  test:
    timeout-minutes: 30
    name: Test
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        go: [1.26.x, 1.25.x, 1.24.x]
      fail-fast: false
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
      - name: Setup Go
        uses: actions/setup-go@v6
        with:
          go-version: ${{ matrix.go }}
      - name: Test
        run: make test
      - name: Test with GOARCH=386
        run: env GOARCH=386 go test -v ./...
        if: matrix.os != 'macos-latest'
      - name: Lint
        run: make lint
      - name: Check tools
        run: make check-tools
      - name: Check go generate
        run: go generate && ! git diff | grep ^
        shell: bash
 
  docker:
    timeout-minutes: 30
    name: Docker
    permissions:
      packages: write
    runs-on: latchkey-small
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
      - name: Docker metadata
        uses: docker/metadata-action@v6
        id: metadata
        with:
          images: |
            ${{ github.repository }}
            ghcr.io/${{ github.repository }}
          tags: |
            type=semver,pattern={{version}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
            type=semver,pattern={{major}}.{{minor}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
            type=semver,pattern={{major}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
            type=sha,format=long,enable=${{ !startsWith(github.ref, 'refs/tags/v') }}
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v4
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4
      - name: Login to Docker Hub
        if: startsWith(github.ref, 'refs/tags/v')
        uses: docker/login-action@v4
        with:
          username: ${{ vars.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
      - name: Login to GitHub Container Registry
        if: startsWith(github.ref, 'refs/tags/v')
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build and release Docker image
        uses: docker/build-push-action@v7
        with:
          context: .
          push: ${{ startsWith(github.ref, 'refs/tags/v') }}
          provenance: false
          platforms: linux/amd64, linux/arm64
          tags: ${{ steps.metadata.outputs.tags }}
          labels: ${{ steps.metadata.outputs.labels }}
 
  release:
    timeout-minutes: 30
    name: Release
    needs: [build, test, docker]
    if: startsWith(github.ref, 'refs/tags/v')
    permissions:
      contents: write
    runs-on: latchkey-small
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
      - name: Download artifacts
        uses: actions/download-artifact@v8
        with:
          name: goxz
          path: goxz
      - name: Setup release body
        run: sed -n '/\[${{ github.ref_name }}\]/,/^$/{//!p}' CHANGELOG.md >release-body.txt
      - name: Create release
        uses: ncipollo/release-action@v1
        with:
          name: Release ${{ github.ref_name }}
          bodyFile: release-body.txt
          artifacts: goxz/*