Merge branch 'master' of github.com:RoaringBitmap/CRoaring

.github/dependabot.yml

@@ -0,0 +1,8 @@
+# Set update schedule for GitHub Actions
+version: 2
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "monthly"
+ open-pull-requests-limit: 5

.github/workflows/alpine.yml

@@ -2,11 +2,13 @@ name: Alpine Linux
 'on':
  - push
  - pull_request
+permissions:
+ contents: read
 jobs:
  ubuntu-build:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: start docker
  run: |
  docker run -w /src -dit --name alpine -v $PWD:/src alpine:latest
@@ -33,4 +35,4 @@ jobs:
  ./alpine.sh cmake --build build_for_alpine_debug
  - name: testdebug
  run: |
- ./alpine.sh bash -c "cd build_for_alpine_debug && ctest"
+ ./alpine.sh bash -c "cd build_for_alpine_debug && ctest"

.github/workflows/cifuzz.yml

@@ -0,0 +1,26 @@
+name: CIFuzz
+on: [pull_request]
+permissions:
+ contents: read
+jobs:
+ Fuzzing:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Build Fuzzers
+ id: build
+ uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@d318097b285bc695f785b98d40c2d058c0f438b5 # master
+ with:
+ oss-fuzz-project-name: 'croaring'
+ dry-run: false
+ - name: Run Fuzzers
+ uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@d318097b285bc695f785b98d40c2d058c0f438b5 # master
+ with:
+ oss-fuzz-project-name: 'croaring'
+ fuzz-seconds: 300
+ dry-run: false
+ - name: Upload Crash
+ uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+ if: failure() && steps.build.outcome == 'success'
+ with:
+ name: artifacts
+ path: ./out/artifacts

.github/workflows/codeql.yml

@@ -0,0 +1,44 @@
+name: "CodeQL"
+
+on:
+ push:
+ branches: [ "master" ]
+ pull_request:
+ branches: [ "master" ]
+ schedule:
+ - cron: "39 2 * * 6"
+
+permissions:
+ contents: read
+
+jobs:
+ analyze:
+ name: Analyze
+ runs-on: ubuntu-latest
+ permissions:
+ actions: read
+ contents: read
+ security-events: write
+
+ strategy:
+ fail-fast: false
+ matrix:
+ language: [ cpp, python ]
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2
+ with:
+ languages: ${{ matrix.language }}
+
+ - name: Autobuild
+ uses: github/codeql-action/autobuild@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2
+ if: ${{ matrix.language == 'cpp' || matrix.language == 'python' }}
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2
+ with:
+ category: "/language:${{ matrix.language }}"

.github/workflows/documentation.yml

@@ -0,0 +1,36 @@
+name: Doxygen GitHub Pages
+
+on:
+ push:
+ branches:
+ - master
+ # Allows you to run this workflow manually from the Actions tab
+ workflow_dispatch:
+
+permissions:
+ contents: read
+
+jobs:
+ deploy:
+ environment:
+ name: github-pages
+ url: ${{ steps.deployment.outputs.page_url }}
+ runs-on: ubuntu-latest
+ permissions:
+ contents: write
+ pages: write
+ id-token: write
+ steps:
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+ - name: Install Doxygen
+ run: sudo apt-get install doxygen graphviz -y
+ - run: mkdir docs
+ - name: Install theme
+ run: ./tools/prepare_doxygen.sh
+ - name: Generate Doxygen Documentation
+ run: doxygen ./doxygen
+ - name: Deploy to GitHub Pages
+ uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3.9.3
+ with:
+ github_token: ${{ secrets.GITHUB_TOKEN }}
+ publish_dir: docs/html

.github/workflows/macos-ci.yml

@@ -4,13 +4,15 @@ name: Macos-CI
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
  name: macos-llvm
  runs-on: macos-latest
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: Build and Test
  run: |
  mkdir build
@@ -20,6 +22,15 @@ jobs:
  ctest . --output-on-failure
  cmake --install . 
  cd ../tests/installation/find && mkdir build && cd build && cmake -DCMAKE_INSTALL_PREFIX:PATH=../../../build/destination .. && cmake --build .
+ - name: Build and Test (shared)
+ run: |
+ cmake -DBUILD_SHARED_LIBS=ON -B buildshared -DCMAKE_INSTALL_PREFIX:PATH=destinationshared
+ cmake --build buildshared
+ cmake --install buildshared
+ cd tests/installation/find
+ cmake -DCMAKE_INSTALL_PREFIX:PATH=../../../destinationshared -B buildshared
+ cmake --build buildshared
+ ./buildshared/repro
  - name: Build and Test Debug
  run: |
  mkdir builddebug

.github/workflows/s390x.yml

@@ -0,0 +1,33 @@
+name: Ubuntu s390x (GCC 11)
+
+on:
+ push:
+ branches:
+ - master
+ pull_request:
+ branches:
+ - master
+
+permissions:
+ contents: read
+
+jobs:
+ build:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+ - uses: uraimo/run-on-arch-action@a8003307a739516fdd80ee6d3da8924db811b8da # v2.5.0
+ name: Test
+ id: runcmd
+ with:
+ arch: s390x
+ githubToken: ${{ github.token }}
+ distro: ubuntu_latest
+ install: |
+ apt-get update -q -y
+ apt-get install -y cmake make g++
+ run: |
+ cmake -DCMAKE_BUILD_TYPE=Release -B build
+ cmake --build build -j=2
+ ctest --output-on-failure --test-dir build
+

.github/workflows/ubuntu-ci.yml

@@ -4,6 +4,8 @@ name: Ubuntu-CI
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
@@ -15,7 +17,7 @@ jobs:
  CXX: g++
 
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: Build and Test
  run: |
  mkdir build

.github/workflows/ubuntu-debug-sani-ci.yml

@@ -0,0 +1,27 @@
+name: Ubuntu-Debug-Sanitized-CI
+
+'on':
+ - push
+ - pull_request
+
+permissions:
+ contents: read
+
+jobs:
+ ci:
+ name: ubuntu-gcc
+ runs-on: ubuntu-latest
+
+ env:
+ CC: gcc
+ CXX: g++
+
+ steps: 
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
+ - name: Build and Test
+ run: |
+ mkdir build
+ cd build
+ cmake -DCMAKE_BUILD_TYPE=Debug -DROARING_SANITIZE=ON ..
+ cmake --build . 
+ ctest . --output-on-failure

.github/workflows/ubuntu-gcc10-ci.yml

@@ -4,6 +4,8 @@ name: Ubuntu-GCC10-CI
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
@@ -13,7 +15,7 @@ jobs:
  CC: gcc-10
  CXX: g++-10
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - run: |
  sudo apt update
  sudo apt install gcc-10 g++-10

.github/workflows/ubuntu-legacy-ci.yml

@@ -4,14 +4,16 @@ name: Ubuntu-CI
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
  name: ubuntu-gcc
  runs-on: ubuntu-latest
 
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: Build and Test
  run: |
  mkdir build

.github/workflows/ubuntu-noexcept-ci.yml

@@ -4,6 +4,8 @@ name: Ubuntu-CI
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
@@ -15,7 +17,7 @@ jobs:
  CXX: g++
 
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: Build and Test
  run: |
  mkdir build

.github/workflows/ubuntu-sani-ci.yml

@@ -4,6 +4,8 @@ name: Ubuntu-Sanitized-CI
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
@@ -15,7 +17,7 @@ jobs:
  CXX: g++
 
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: Build and Test
  run: |
  mkdir build

.github/workflows/ubuntu-18-ci.yml → .github/workflows/ubuntu-sani-thread-ci.yml

@@ -1,25 +1,27 @@
-name: Ubuntu-18-CI
+name: Ubuntu-Sanitized-CI
 
 'on':
  - push
  - pull_request
 
+permissions:
+ contents: read
 
 jobs:
  ci:
  name: ubuntu-gcc
- runs-on: ubuntu-18.04
+ runs-on: ubuntu-latest
 
  env:
  CC: gcc
  CXX: g++
 
  steps: 
- - uses: actions/checkout@v2
+ - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
  - name: Build and Test
  run: |
  mkdir build
  cd build
- cmake ..
+ cmake -DROARING_SANITIZE_THREADS=ON ..
  cmake --build . 
  ctest . --output-on-failure