Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.1 to 2.12.2.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](002fdce3c6...6c439dc8bd)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-version: 2.12.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
146 lines
6.1 KiB
YAML
146 lines
6.1 KiB
YAML
# ***************************************************************************
|
|
# * Copyright (c) 2023 0penBrain *
|
|
# * *
|
|
# * This program is free software; you can redistribute it and/or modify *
|
|
# * it under the terms of the GNU Lesser General Public License (LGPL) *
|
|
# * as published by the Free Software Foundation; either version 2 of *
|
|
# * the License, or (at your option) any later version. *
|
|
# * for detail see the LICENCE text file. *
|
|
# * *
|
|
# * This program is distributed in the hope that it will be useful, *
|
|
# * but WITHOUT ANY WARRANTY; without even the implied warranty of *
|
|
# * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
|
|
# * GNU Library General Public License for more details. *
|
|
# * *
|
|
# * You should have received a copy of the GNU Library General Public *
|
|
# * License along with this program; if not, write to the Free Software *
|
|
# * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 *
|
|
# * USA *
|
|
# * *
|
|
# ***************************************************************************
|
|
|
|
# This is a build and test workflow for CI of FreeCAD.
|
|
# This workflow aims at building and testing FreeCAD on Windows using MSVC.
|
|
|
|
name: Build Windows
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
artifactBasename:
|
|
type: string
|
|
required: true
|
|
allowedToFail:
|
|
default: false
|
|
type: boolean
|
|
required: false
|
|
outputs:
|
|
reportFile:
|
|
value: ${{ jobs.Build.outputs.reportFile }}
|
|
|
|
jobs:
|
|
Build:
|
|
runs-on: windows-latest
|
|
continue-on-error: ${{ inputs.allowedToFail }}
|
|
env:
|
|
CCACHE_DIR: C:/FC/cache/
|
|
CCACHE_COMPILERCHECK: "%compiler%" # default:mtime
|
|
CCACHE_MAXSIZE: 1G
|
|
CCACHE_COMPRESS: true
|
|
CCACHE_COMPRESSLEVEL: 1
|
|
CCACHE_NOHASHDIR: true
|
|
CCACHE_DIRECT: true
|
|
#CCACHE_SLOPPINESS: "pch_defines,time_macros" # Can't get PCH to work on Windows
|
|
CCACHE_LOGFILE: C:/logs/ccache.log
|
|
## Have to use C:\ because not enough space on workspace drive
|
|
builddir: C:/FC/build/release/
|
|
libpackdir: C:/FC/libpack/
|
|
ccachebindir: C:/FC/ccache/
|
|
logdir: C:/logs/
|
|
reportdir: C:/report/
|
|
reportfilename: ${{ inputs.artifactBasename }}-report.md
|
|
outputs:
|
|
reportFile: ${{ steps.Init.outputs.reportFile }}
|
|
|
|
steps:
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Checking out source code
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
submodules: true
|
|
- name: Make needed directories, files and initializations
|
|
id: Init
|
|
run: |
|
|
mkdir ${{ env.CCACHE_DIR }}
|
|
mkdir ${{ env.ccachebindir }}
|
|
mkdir ${{ env.libpackdir }}
|
|
mkdir ${{ env.builddir }}
|
|
mkdir ${{ env.logdir }}
|
|
mkdir ${{ env.reportdir }}
|
|
echo "reportFile=${{ env.reportfilename }}" >> $GITHUB_OUTPUT
|
|
- name: Get Ccache
|
|
uses: ./.github/workflows/actions/windows/getCcache
|
|
with:
|
|
ccachebindir: ${{ env.ccachebindir }}
|
|
- name: Get Libpack
|
|
uses: ./.github/workflows/actions/windows/getLibpack
|
|
with:
|
|
libpackdir: ${{ env.libpackdir }}
|
|
- name: Restore compiler cache
|
|
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
|
|
with:
|
|
save-always: true
|
|
path: ${{ env.CCACHE_DIR }}
|
|
key: FC-Windows-${{ github.ref }}-${{ github.run_id }}
|
|
restore-keys: |
|
|
FC-Windows-${{ github.ref }}-
|
|
FC-Windows-
|
|
- name: Print Ccache statistics before build, reset stats and print config
|
|
run: |
|
|
. $env:ccachebindir\ccache -s
|
|
. $env:ccachebindir\ccache -z
|
|
. $env:ccachebindir\ccache -p
|
|
- name: Install cmake
|
|
uses: jwlawson/actions-setup-cmake@802fa1a2c4e212495c05bf94dba2704a92a472be # v2.0.2
|
|
with:
|
|
cmake-version: '3.31.6'
|
|
- name: Configuring CMake
|
|
run: >
|
|
cmake -B"${{ env.builddir }}" .
|
|
--preset release
|
|
-DCMAKE_VS_NO_COMPILE_BATCHING=ON
|
|
-DCMAKE_BUILD_TYPE=Release
|
|
-DFREECAD_USE_PCH=OFF
|
|
-DFREECAD_RELEASE_PDB=OFF
|
|
-DFREECAD_LIBPACK_DIR="${{ env.libpackdir }}"
|
|
-DFREECAD_COPY_DEPEND_DIRS_TO_BUILD=ON
|
|
-DFREECAD_COPY_LIBPACK_BIN_TO_BUILD=ON
|
|
-DFREECAD_COPY_PLUGINS_BIN_TO_BUILD=ON
|
|
- name: Add msbuild to PATH
|
|
uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2.0.0
|
|
- name: Compiling sources
|
|
run: |
|
|
cd $env:builddir
|
|
msbuild ALL_BUILD.vcxproj /m /p:Configuration=Release /p:TrackFileAccess=false /p:CLToolPath=${{ env.ccachebindir }}
|
|
- name: Print Ccache statistics after build
|
|
run: |
|
|
. $env:ccachebindir\ccache -s
|
|
- name: C++ unit tests
|
|
if: false # Disabled because seems to not function on Windows build
|
|
timeout-minutes: 1
|
|
run: |
|
|
. ${{ env.builddir }}\tests\Release\Tests_run --gtest_output=json:${{ env.reportdir }}gtest_results.json # 2>&1 | tee -filepath ${{ env.logdir }}\unitTests.log
|
|
- name: FreeCAD CLI tests
|
|
run: |
|
|
. ${{ env.builddir }}\bin\FreeCADCmd -t 0 # 2>&1 | tee -filepath ${{ env.logdir }}\integrationTests.log
|
|
- name: Upload logs
|
|
if: always()
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
|
with:
|
|
name: ${{ inputs.artifactBasename }}-Logs
|
|
path: |
|
|
${{ env.logdir }}
|