make statement sanitizer configurable for spring boot (#11350) #3404
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - release/* | |
| workflow_dispatch: | |
| jobs: | |
| common: | |
| uses: ./.github/workflows/build-common.yml | |
| secrets: | |
| GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }} | |
| test-latest-deps: | |
| # release branches are excluded | |
| # because any time a new library version is released to maven central it can fail | |
| # which requires unnecessary release branch maintenance, especially for patches | |
| if: "!startsWith(github.ref_name, 'release/')" | |
| uses: ./.github/workflows/reusable-test-latest-deps.yml | |
| secrets: | |
| GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }} | |
| muzzle: | |
| # release branches are excluded | |
| # because any time a new library version is released to maven central it can fail | |
| # which requires unnecessary release branch maintenance, especially for patches | |
| if: "!startsWith(github.ref_name, 'release/')" | |
| uses: ./.github/workflows/reusable-muzzle.yml | |
| shell-script-check: | |
| # release branches are excluded to avoid unnecessary maintenance if new shell checks are added | |
| if: "!startsWith(github.ref_name, 'release/')" | |
| uses: ./.github/workflows/reusable-shell-script-check.yml | |
| markdown-link-check: | |
| # release branches are excluded to avoid unnecessary maintenance if external links break | |
| # (and also because the README.md javaagent download link has to be updated on release branches | |
| # before the release download has been published) | |
| if: "!startsWith(github.ref_name, 'release/')" | |
| uses: ./.github/workflows/reusable-markdown-link-check.yml | |
| markdown-lint-check: | |
| # release branches are excluded | |
| if: "!startsWith(github.ref_name, 'release/')" | |
| uses: ./.github/workflows/reusable-markdown-lint-check.yml | |
| misspell-check: | |
| # release branches are excluded to avoid unnecessary maintenance if new misspellings are added | |
| # to the misspell dictionary | |
| if: "!startsWith(github.ref_name, 'release/')" | |
| uses: ./.github/workflows/reusable-misspell-check.yml | |
| publish-snapshots: | |
| needs: | |
| # intentionally not blocking snapshot publishing on test-latest-deps, muzzle, | |
| # markdown-link-check, or misspell-check | |
| - common | |
| runs-on: ubuntu-latest | |
| # skipping release branches because the versions in those branches are not snapshots | |
| if: github.ref_name == 'main' && github.repository == 'open-telemetry/opentelemetry-java-instrumentation' | |
| steps: | |
| - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 | |
| - name: Free disk space | |
| run: .github/scripts/gha-free-disk-space.sh | |
| - name: Set up JDK for running Gradle | |
| uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 | |
| with: | |
| distribution: temurin | |
| java-version-file: .java-version | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@db19848a5fa7950289d3668fb053140cf3028d43 # v3.3.2 | |
| with: | |
| # gradle enterprise is used for the build cache | |
| gradle-home-cache-excludes: caches/build-cache-1 | |
| - name: Build and publish artifact snapshots | |
| env: | |
| GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }} | |
| SONATYPE_USER: ${{ secrets.SONATYPE_USER }} | |
| SONATYPE_KEY: ${{ secrets.SONATYPE_KEY }} | |
| GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} | |
| GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }} | |
| run: ./gradlew assemble publishToSonatype | |
| - name: Build and publish gradle plugin snapshots | |
| env: | |
| GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }} | |
| SONATYPE_USER: ${{ secrets.SONATYPE_USER }} | |
| SONATYPE_KEY: ${{ secrets.SONATYPE_KEY }} | |
| GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} | |
| GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }} | |
| run: ./gradlew build publishToSonatype | |
| working-directory: gradle-plugins |