ci: uci/copy-templates

.github/workflows/go-check.yml

@@ -1,77 +1,16 @@
-# File managed by web3-bot. DO NOT EDIT.
-# See https://github.com/protocol/.github/ for details.
-
 on:
  pull_request:
  push:
  branches: ["master"]
 name: Go Checks
 
+permissions:
+ contents: read
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event_name == 'push' && github.sha || github.ref }}
  cancel-in-progress: true
 
 jobs:
- unit:
- runs-on: ubuntu-latest
- name: All
- steps:
- - uses: actions/checkout@v3
- with:
- submodules: recursive
- - id: config
- uses: protocol/.github/.github/actions/read-config@master
- - id: go-mod
- # TODO: change ref to next before merging
- uses: protocol/.github/.github/actions/read-go-mod@no-go
- - uses: actions/setup-go@v3
- with:
- go-version: ${{ fromJSON(steps.go-mod.outputs.json).Go }}.x
- - name: Run repo-specific setup
- uses: ./.github/actions/go-check-setup
- if: hashFiles('./.github/actions/go-check-setup') != ''
- - name: Install staticcheck
- run: go install honnef.co/go/tools/cmd/staticcheck@4970552d932f48b71485287748246cf3237cebdf # 2023.1 (v0.4.0)
- - name: Check that go.mod is tidy
- uses: protocol/[email protected]
- with:
- run: |
- go mod tidy
- if [[ -n $(git ls-files --other --exclude-standard --directory -- go.sum) ]]; then
- echo "go.sum was added by go mod tidy"
- exit 1
- fi
- git diff --exit-code -- go.sum go.mod
- - name: gofmt
- if: success() || failure() # run this step even if the previous one failed
- run: |
- out=$(gofmt -s -l .)
- if [[ -n "$out" ]]; then
- echo $out | awk '{print "::error file=" $0 ",line=0,col=0::File is not gofmt-ed."}'
- exit 1
- fi
- - name: go vet
- if: success() || failure() # run this step even if the previous one failed
- uses: protocol/[email protected]
- with:
- run: go vet ./...
- - name: staticcheck
- if: success() || failure() # run this step even if the previous one failed
- uses: protocol/[email protected]
- with:
- run: |
- set -o pipefail
- staticcheck ./... | sed -e 's@\(.*\)\.go@./\1.go@g'
- - name: go generate
- uses: protocol/[email protected]
- if: (success() || failure()) && fromJSON(steps.config.outputs.json).gogenerate == true
- with:
- run: |
- git clean -fd # make sure there aren't untracked files / directories
- go generate -x ./...
- # check if go generate modified or added any files
- if ! $(git add . && git diff-index HEAD --exit-code --quiet); then
- echo "go generated caused changes to the repository:"
- git status --short
- exit 1
- fi
+ go-check:
+ uses: pl-strflt/uci/.github/workflows/[email protected]

.github/workflows/go-test.yml

@@ -1,106 +1,16 @@
-# File managed by web3-bot. DO NOT EDIT.
-# See https://github.com/protocol/.github/ for details.
-
 on:
  pull_request:
  push:
  branches: ["master"]
 name: Go Test
 
+permissions:
+ contents: read
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event_name == 'push' && github.sha || github.ref }}
  cancel-in-progress: true
 
 jobs:
- unit:
- strategy:
- fail-fast: false
- matrix:
- os: [ "ubuntu", "windows", "macos" ]
- go: [ "this", "next" ]
- env:
- GOTESTFLAGS: -shuffle=on -cover -coverprofile=module-coverage.txt -coverpkg=./...
- GO386FLAGS: -shuffle=on
- GORACEFLAGS: -shuffle=on
- runs-on: ${{ fromJSON(vars[format('UCI_GO_TEST_RUNNER_{0}', matrix.os)] || format('"{0}-latest"', matrix.os)) }}
- name: ${{ matrix.os }} (go ${{ matrix.go }})
- steps:
- - name: Use msys2 on windows
- if: matrix.os == 'windows'
- shell: bash
- # The executable for msys2 is also called bash.cmd
- # https://github.com/actions/virtual-environments/blob/main/images/win/Windows2019-Readme.md#shells
- # If we prepend its location to the PATH
- # subsequent 'shell: bash' steps will use msys2 instead of gitbash
- run: echo "C:/msys64/usr/bin" >> $GITHUB_PATH
- - uses: actions/checkout@v3
- with:
- submodules: recursive
- - id: config
- uses: protocol/.github/.github/actions/read-config@master
- - id: go-mod
- # TODO: change ref to next before merging
- uses: protocol/.github/.github/actions/read-go-mod@no-go
- - id: go
- env:
- MATRIX_GO: ${{ matrix.go }}
- GO_MOD_VERSION: ${{ fromJSON(steps.go-mod.outputs.json).Go }}
- run: |
- if [[ "$MATRIX_GO" == "this" ]]; then
- echo "version=$GO_MOD_VERSION.x" >> $GITHUB_OUTPUT
- elif [[ "$MATRIX_GO" == "next" ]]; then
- MAJOR="${GO_MOD_VERSION%.[0-9]*}"
- MINOR="${GO_MOD_VERSION#[0-9]*.}"
- echo "version=$MAJOR.$(($MINOR+1)).x" >> $GITHUB_OUTPUT
- else
- echo "version=$MATRIX_GO" >> $GITHUB_OUTPUT
- fi
- shell: bash
- - uses: actions/setup-go@v3
- with:
- go-version: ${{ steps.go.outputs.version }}
- - name: Go information
- run: |
- go version
- go env
- - name: Run repo-specific setup
- uses: ./.github/actions/go-test-setup
- if: hashFiles('./.github/actions/go-test-setup') != ''
- - name: Run tests
- if: contains(fromJSON(steps.config.outputs.json).skipOSes, matrix.os) == false
- uses: protocol/[email protected]
- env:
- GOFLAGS: ${{ format('{0} {1}', env.GOTESTFLAGS, env.GOFLAGS) }}
- with:
- run: go test -v ./...
- - name: Run tests (32 bit)
- # can't run 32 bit tests on OSX.
- if: matrix.os != 'macos' &&
- fromJSON(steps.config.outputs.json).skip32bit != true &&
- contains(fromJSON(steps.config.outputs.json).skipOSes, matrix.os) == false
- uses: protocol/[email protected]
- env:
- GOARCH: 386
- GOFLAGS: ${{ format('{0} {1}', env.GO386FLAGS, env.GOFLAGS) }}
- with:
- run: |
- export "PATH=$PATH_386:$PATH"
- go test -v ./...
- - name: Run tests with race detector
- # speed things up. Windows and OSX VMs are slow
- if: matrix.os == 'ubuntu' &&
- contains(fromJSON(steps.config.outputs.json).skipOSes, matrix.os) == false
- uses: protocol/[email protected]
- env:
- GOFLAGS: ${{ format('{0} {1}', env.GORACEFLAGS, env.GOFLAGS) }}
- with:
- run: go test -v -race ./...
- - name: Collect coverage files
- id: coverages
- shell: bash
- run: echo "files=$(find . -type f -name 'module-coverage.txt' | tr -s '\n' ',' | sed 's/,$//')" >> $GITHUB_OUTPUT
- - name: Upload coverage to Codecov
- uses: codecov/codecov-action@d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 # v3.1.1
- with:
- files: ${{ steps.coverages.outputs.files }}
- env_vars: OS=${{ matrix.os }}, GO=${{ matrix.go }}
+ go-test:
+ uses: pl-strflt/uci/.github/workflows/[email protected]

.github/workflows/release-check.yml

@@ -1,17 +1,16 @@
-# File managed by web3-bot. DO NOT EDIT.
-# See https://github.com/protocol/.github/ for details.
-
 name: Release Checker
 on:
  pull_request_target:
  paths: [ 'version.json' ]
 
+permissions:
+ contents: write
+ pull-requests: write
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
 jobs:
  release-check:
- uses: protocol/.github/.github/workflows/release-check.yml@make_latest
- with:
- go-version: 1.20.x
+ uses: pl-strflt/uci/.github/workflows/release-check.yml@v0

.github/workflows/releaser.yml

@@ -1,15 +1,15 @@
-# File managed by web3-bot. DO NOT EDIT.
-# See https://github.com/protocol/.github/ for details.
-
 name: Releaser
 on:
  push:
  paths: [ 'version.json' ]
 
+permissions:
+ contents: write
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.sha }}
  cancel-in-progress: true
 
 jobs:
  releaser:
- uses: protocol/.github/.github/workflows/releaser.yml@make_latest
+ uses: pl-strflt/uci/.github/workflows/releaser.yml@v0

.github/workflows/tagpush.yml

@@ -1,16 +1,17 @@
-# File managed by web3-bot. DO NOT EDIT.
-# See https://github.com/protocol/.github/ for details.
-
 name: Tag Push Checker
 on:
  push:
  tags:
  - v*
 
+permissions:
+ contents: read
+ issues: write
+
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
 
 jobs:
  releaser:
- uses: protocol/.github/.github/workflows/tagpush.yml@master
+ uses: pl-strflt/uci/.github/workflows/tagpush.yml@v0