Merge pull request #501 from aidangarske/fix-upstream-pqc

Fix changes to pqc header file rename

Author: dgarske

.github/workflows/cmake-build.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 jobs:
   build:

.github/workflows/codespell.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/fwtpm-test.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 jobs:
   # ----------------------------------------------------------------

.github/workflows/make-test-swtpm.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 jobs:
   build:

.github/workflows/multi-compiler.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/nightly.yml

@@ -0,0 +1,40 @@
+name: Nightly CI
+
+# Daily fan-out to every wolfTPM workflow that listens for the
+# 'nightly-trigger' repository_dispatch event. Catches upstream wolfSSL
+# drift (e.g. header renames, API breaks) within ~24h.
+#
+# Workflows opt in by adding the listener to their `on:` block:
+#   repository_dispatch:
+#     types: [nightly-trigger]
+#
+# repository_dispatch is API-only — there is no UI button to trigger
+# these workflows by hand. Maintainers cannot accidentally fire them.
+# Workflows that should never be batch-triggered (e.g. hw-spdm-test on
+# the self-hosted Pi runner) simply don't add the listener.
+
+on:
+  schedule:
+    # 02:00 UTC daily (offset from typical top-of-hour congestion).
+    - cron: '17 2 * * *'
+
+permissions:
+  contents: write
+
+jobs:
+  fan-out:
+    name: Dispatch nightly-trigger to all listening workflows
+    runs-on: ubuntu-latest
+    if: github.repository == 'wolfSSL/wolfTPM'
+
+    steps:
+      - name: Send repository_dispatch event
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.repos.createDispatchEvent({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              event_type: 'nightly-trigger',
+            });
+            core.info('Dispatched nightly-trigger; all listening workflows will fire.');

.github/workflows/pqc-examples.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 jobs:
   pqc-examples:

.github/workflows/release-checks.yml

@@ -11,6 +11,8 @@ on:
     branches: [ 'master', 'main', 'release/**', 'rel_v*_prep' ]
   pull_request:
     branches: [ '**' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/sanitizer.yml

@@ -5,6 +5,8 @@ on:
     branches: [ 'master', 'main', 'release/**' ]
   pull_request:
     branches: [ '*' ]
+  repository_dispatch:
+    types: [nightly-trigger]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/seal-test.yml

@@ -19,6 +19,8 @@ on:
       - 'src/tpm2_wrap.c'
       - 'src/fwtpm/**'
       - 'wolftpm/tpm2_wrap.h'
+  repository_dispatch:
+    types: [nightly-trigger]
 
 jobs:
   seal-test: