nightly.yml

name: Nightly

on:
  workflow_dispatch:
  pull_request:
    paths:
      - .github/workflows/nightly.yml
      - src/e2e-tests/**
      - '!**/*.md'
  schedule:
    - cron: '0 4 * * *'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

defaults:
  run:
    shell: bash

jobs:
  validate-links:
    name: Validate Markdown Links
    runs-on: ubuntu-latest
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
        with:
          egress-policy: audit

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Validate Links
        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
        with:
          args: --config .github/lychee.toml './**/*.md'
          fail: true
          jobSummary: false

  build:
    if: github.repository == 'Open-CMSIS-Pack/vscode-cmsis-solution'
    permissions:
      contents: write
      packages: read
      actions: read
    runs-on: [ubuntu-latest]
    name: 'Build'

    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
        with:
          egress-policy: audit

      - name: Checkout repository
        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.3.1
        with:
          submodules: true
          fetch-depth: 0

      - name: Setup Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        env:
          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          node-version-file: package.json
          registry-url: https://npm.pkg.github.com
          package-manager-cache: false

      - name: Install dependencies
        env:
          GITHUB_TOKEN: ${{ github.token }}
          NODE_OPTIONS: --max-old-space-size=8192
        run: npm ci

      - name: Run build
        run: npm run build

      - name: Lint check
        run: npm run lint

      - name: Update version for nightly build
        run: |
          # Increment patch version by 1 (e.g. 1.64.1 -> 1.64.2)
          BASE_VERSION=$(node -p "require('./package.json').version.split('-')[0]")
          IFS='.' read -r MAJOR MINOR PATCH <<< "$BASE_VERSION"
          if [ -z "$MAJOR" ] || [ -z "$MINOR" ] || [ -z "$PATCH" ]; then
            echo "Invalid semver: $BASE_VERSION"
            exit 1
          fi
          if ! [[ "$MAJOR" =~ ^[0-9]+$ && "$MINOR" =~ ^[0-9]+$ && "$PATCH" =~ ^[0-9]+$ ]]; then
            echo "Invalid semver components (non-numeric): $BASE_VERSION (MAJOR=$MAJOR, MINOR=$MINOR, PATCH=$PATCH)"
            exit 1
          fi
          NEXT_PATCH_VERSION="${MAJOR}.${MINOR}.$((PATCH + 1))"

          # Get commit count: since last tag if exists, otherwise total commits
          LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
          if [ -n "$LAST_TAG" ]; then
            COMMIT_COUNT=$(git rev-list --count HEAD ^${LAST_TAG})
          else
            COMMIT_COUNT=$(git rev-list --count HEAD)
          fi

          # Get short commit SHA
          SHORT_SHA=$(git rev-parse --short HEAD)

          # Create nightly version: 1.64.2-12-abc1234
          NIGHTLY_VERSION="${NEXT_PATCH_VERSION}-${COMMIT_COUNT}-${SHORT_SHA}"
          echo "Setting version to ${NIGHTLY_VERSION}"

          # Update package.json
          npm version "${NIGHTLY_VERSION}" --no-git-tag-version

      - name: Remove badges
        run: |
          sed -i "/https:\/\/qlty\.sh\/gh/d" README.md
          sed -i "/https:\/\/securityscorecards\.dev\/viewer/d" README.md
          sed -i "/https:\/\/img.shields.io\//d" README.md

      - name: Ensure download-tools.sh is executable
        working-directory: .github/workflows
        run: chmod +x ./download-tools.sh

      - name: Download dependencies (win32-x64)
        working-directory: .github/workflows
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./download-tools.sh win32-x64

      - name: Package win32-x64
        run: npm run package -- --target win32-x64

      - name: Download dependencies (win32-arm64)
        working-directory: .github/workflows
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./download-tools.sh win32-arm64

      - name: Package win32-arm64
        run: npm run package -- --target win32-arm64

      - name: Download dependencies (linux-x64)
        working-directory: .github/workflows
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./download-tools.sh linux-x64

      - name: Package linux-x64
        run: npm run package -- --target linux-x64

      - name: Download dependencies (linux-arm64)
        working-directory: .github/workflows
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./download-tools.sh linux-arm64

      - name: Package linux-arm64
        run: npm run package -- --target linux-arm64

      - name: Download dependencies (darwin-x64)
        working-directory: .github/workflows
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./download-tools.sh darwin-x64

      - name: Package darwin-x64
        run: npm run package -- --target darwin-x64

      - name: Download dependencies (darwin-arm64)
        working-directory: .github/workflows
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./download-tools.sh darwin-arm64

      - name: Package darwin-arm64
        run: npm run package -- --target darwin-arm64

      - name: Upload win32-x64 VSIX package
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: vscode-cmsis-solution-nightly-win32-x64
          path: ./*win32-x64*.vsix
          retention-days: 1

      - name: Upload win32-arm64 VSIX package
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: vscode-cmsis-solution-nightly-win32-arm64
          path: ./*win32-arm64*.vsix
          retention-days: 1

      - name: Upload linux-x64 VSIX package
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: vscode-cmsis-solution-nightly-linux-x64
          path: ./*linux-x64*.vsix
          retention-days: 1

      - name: Upload linux-arm64 VSIX package
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: vscode-cmsis-solution-nightly-linux-arm64
          path: ./*linux-arm64*.vsix
          retention-days: 1

      - name: Upload darwin-x64 VSIX package
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: vscode-cmsis-solution-nightly-darwin-x64
          path: ./*darwin-x64*.vsix
          retention-days: 1

      - name: Upload darwin-arm64 VSIX package
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: vscode-cmsis-solution-nightly-darwin-arm64
          path: ./*darwin-arm64*.vsix
          retention-days: 1

  test:
    name: 'Test (windows-latest)'
    runs-on: windows-latest
    needs: build
    permissions:
      contents: write
      packages: read
      actions: read
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
        with:
          egress-policy: audit

      - name: Checkout repository
        uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # v4.3.1
        with:
          submodules: true
          fetch-depth: 0

      - name: Setup Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        env:
          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          node-version-file: package.json
          registry-url: https://npm.pkg.github.com
          package-manager-cache: false

      - name: Install dependencies
        env:
          GITHUB_TOKEN: ${{ github.token }}
          NODE_OPTIONS: --max-old-space-size=8192
        run: npm ci

      - name: Run build
        run: npm run build

      - name: Download VSIX package
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: vscode-cmsis-solution-nightly-win32-x64

      - name: Setup Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        env:
          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          node-version: '24'
          package-manager-cache: false

      - name: Setup vcpkg environment
        uses: ARM-software/cmsis-actions/vcpkg@1ab1da03e6e9787dc903bcf041ba541e59b5739f # v1.2
        with:
          config: './src/e2e-tests/vcpkg-configuration.json'

      - name: Activate Arm tool license
        run: armlm activate --server https://mdk-preview.keil.arm.com --product KEMDK-COM0

      - name: Install Playwright
        run: npx playwright install --with-deps

      - name: Run Playwright tests
        id: tests
        run: npm run e2e

      - name: Publish Test Results
        if: always() && steps.tests.conclusion != 'skipped'
        uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0
        with:
          name: Playwright Tests
          path: e2e-report/results.xml
          reporter: jest-junit

      - name: Upload HTML report
        if: always() && steps.tests.conclusion != 'skipped'
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: e2e-report
          path: e2e-report

      - name: Upload Screenshots
        if: always() && steps.tests.conclusion != 'skipped'
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: e2e-screenshots
          path: e2e-screenshots