name: CI on: pull_request: branches: - main jobs: format: name: format runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Dart uses: dart-lang/setup-dart@v1 - name: Install dependencies run: dart pub get - name: Check formatting run: dart format --output=none --set-exit-if-changed . analyze: name: analyze runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Dart uses: dart-lang/setup-dart@v1 - name: Install dependencies run: dart pub get - name: Run analyzer run: dart analyze --fatal-infos test: name: test runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Dart uses: dart-lang/setup-dart@v1 - name: Install dependencies run: dart pub get - name: Run tests run: dart test pana: name: pana runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Dart uses: dart-lang/setup-dart@v1 - name: Install dependencies run: dart pub get - name: Run pana and enforce full score run: | set -euo pipefail dart pub global activate pana export PATH="$PATH:$HOME/.pub-cache/bin" pana . | tee /tmp/pana.log SCORE_LINE="$(grep -Eo 'Points: [0-9]+/[0-9]+' /tmp/pana.log | tail -n1 || true)" if [ -z "$SCORE_LINE" ]; then echo "Could not parse pana score output." exit 1 fi SCORE="${SCORE_LINE#Points: }" GOT="${SCORE%/*}" MAX="${SCORE#*/}" if [ "$GOT" -ne "$MAX" ]; then echo "Pana score must be full. Got $SCORE." exit 1 fi echo "Pana full score confirmed: $SCORE" version_and_changelog: name: version-and-changelog runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@v4 with: fetch-depth: 0 - name: Validate release metadata for PRs into main run: | set -euo pipefail if [ "${GITHUB_EVENT_NAME}" != "pull_request" ]; then echo "Not a pull_request event; skipping version/changelog gate." exit 0 fi if [ -z "${GITHUB_BASE_REF:-}" ]; then echo "GITHUB_BASE_REF is not set for pull_request event." exit 1 fi git fetch origin "${GITHUB_BASE_REF}" --depth=1 if git diff --quiet "origin/${GITHUB_BASE_REF}...HEAD" -- pubspec.yaml README.md ':(glob)**/*.dart'; then echo "No release-relevant files changed (pubspec.yaml, README.md, *.dart); skipping version/changelog gate." exit 0 fi PACKAGE_NAME="$(sed -nE 's/^name:\s*([^[:space:]]+)\s*$/\1/p' pubspec.yaml | head -n1)" PR_VERSION="$(sed -nE 's/^version:\s*([^[:space:]]+)\s*$/\1/p' pubspec.yaml | head -n1)" BASE_HAS_PUBSPEC="false" BASE_VERSION="" if git cat-file -e "origin/${GITHUB_BASE_REF}:pubspec.yaml" 2>/dev/null; then BASE_HAS_PUBSPEC="true" BASE_VERSION="$(git show "origin/${GITHUB_BASE_REF}:pubspec.yaml" | sed -nE 's/^version:\s*([^[:space:]]+)\s*$/\1/p' | head -n1)" fi if [ -z "$PACKAGE_NAME" ] || [ -z "$PR_VERSION" ]; then echo "Unable to read package name/version from PR pubspec.yaml." exit 1 fi if [ "$BASE_HAS_PUBSPEC" = "true" ]; then if [ -z "$BASE_VERSION" ]; then echo "Unable to read version from base branch pubspec.yaml." exit 1 fi parse_semver_core() { printf '%s' "$1" | sed -E 's/^([0-9]+\.[0-9]+\.[0-9]+).*/\1/' } BASE_CORE="$(parse_semver_core "$BASE_VERSION")" PR_CORE="$(parse_semver_core "$PR_VERSION")" if ! printf '%s' "$BASE_CORE" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+$'; then echo "Base version is not valid semver: $BASE_VERSION" exit 1 fi if ! printf '%s' "$PR_CORE" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+$'; then echo "PR version is not valid semver: $PR_VERSION" exit 1 fi BASE_MAJOR="${BASE_CORE%%.*}" BASE_REST="${BASE_CORE#*.}" BASE_MINOR="${BASE_REST%%.*}" BASE_PATCH="${BASE_REST#*.}" PR_MAJOR="${PR_CORE%%.*}" PR_REST="${PR_CORE#*.}" PR_MINOR="${PR_REST%%.*}" PR_PATCH="${PR_REST#*.}" if [ "$PR_MAJOR" -lt "$BASE_MAJOR" ]; then echo "pubspec.yaml version must be greater than base version ($BASE_VERSION -> $PR_VERSION)." exit 1 fi if [ "$PR_MAJOR" -eq "$BASE_MAJOR" ] && [ "$PR_MINOR" -lt "$BASE_MINOR" ]; then echo "pubspec.yaml version must be greater than base version ($BASE_VERSION -> $PR_VERSION)." exit 1 fi if [ "$PR_MAJOR" -eq "$BASE_MAJOR" ] && [ "$PR_MINOR" -eq "$BASE_MINOR" ] && [ "$PR_PATCH" -lt "$BASE_PATCH" ]; then echo "pubspec.yaml version must be greater than base version ($BASE_VERSION -> $PR_VERSION)." exit 1 fi if [ "$PR_MAJOR" -eq "$BASE_MAJOR" ] && [ "$PR_MINOR" -eq "$BASE_MINOR" ] && [ "$PR_PATCH" -eq "$BASE_PATCH" ]; then if curl -fsSL "https://pub.dev/api/packages/${PACKAGE_NAME}" | grep -q "\"version\":\"${PR_VERSION}\""; then echo "pubspec.yaml version must be at least 0.0.1 greater than base version ($BASE_VERSION -> $PR_VERSION)." exit 1 fi echo "Version unchanged ($PR_VERSION), but this version is not yet on pub.dev; allowing first publish." fi else echo "Base branch has no pubspec.yaml; treating this as first release." fi if git diff --quiet "origin/${GITHUB_BASE_REF}...HEAD" -- CHANGELOG.md; then echo "CHANGELOG.md must be updated in the PR." exit 1 fi if ! grep -Fq "## $PR_VERSION" CHANGELOG.md && ! grep -Fq "## [$PR_VERSION]" CHANGELOG.md; then echo "CHANGELOG.md must include a heading for version $PR_VERSION." exit 1 fi if [ "$BASE_HAS_PUBSPEC" = "true" ]; then echo "Version/changelog gate passed: $BASE_VERSION -> $PR_VERSION" else echo "Version/changelog gate passed for first release: $PR_VERSION" fi