ci.yml

name: CI
# Jobs in this workflow are all required run successfully before the PR can be merged. This is enforced by using GitHub status checks.
# What's GitHub status check: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/collaborating-on-repositories-with-code-quality-features/about-status-checks

permissions: {}

on:
  pull_request:
    types: [opened, synchronize]
  merge_group:
  push:
    branches:
      - main
      - 'renovate/**' # For renovate bot "automerge": true
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: ${{ github.ref_name != 'main' }}

jobs:
  # JOB to run change detection
  changes: # https://github.com/dorny/paths-filter
    name: Detect Changes
    runs-on: ubuntu-latest
    permissions:
      pull-requests: read
    outputs:
      rust-changes: ${{ (steps.filter.outputs.rust-changes == 'true') || (github.ref_name == 'main') }}
      node-changes: ${{ (steps.filter.outputs.node-changes == 'true') || (github.ref_name == 'main') }}
      pluginutils-changes: ${{ (steps.filter.outputs.pluginutils-changes == 'true') || (github.ref_name == 'main') }}
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1

      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
        id: filter
        with:
          filters: |
            rust-changes: &rust-changes
              - '.github/workflows/**'
              - 'crates/**'
              - 'tasks/**'
              - 'scripts/src/esbuild-tests/**'
              - 'Cargo.toml'
              - 'Cargo.lock'
              - 'rust-toolchain.toml'
              - 'pnpm-lock.yaml'
              - 'pnpm-workspace.yaml'
              - '.gitattributes'
              - 'justfile'
              - 'test262'
            node-changes:
              - *rust-changes
              - 'packages/**'
              - 'examples/**'
              - 'scripts/**'
              - 'package.json'
              - 'justfile'
              - 'rollup'
            pluginutils-changes:
              - 'packages/pluginutils/**'
              - 'package.json'
              - 'pnpm-lock.yaml'
              - 'pnpm-workspace.yaml'
      - name: Show outputs
        run: |
          echo "Rust changes: ${{ (steps.filter.outputs.rust-changes == 'true') || (github.ref_name == 'main') }}"
          echo "Node changes: ${{ (steps.filter.outputs.node-changes == 'true') || (github.ref_name == 'main') }}"
          echo "PluginUtils changes: ${{ (steps.filter.outputs.pluginutils-changes == 'true') || (github.ref_name == 'main') }}"

  rust-validation:
    name: Rust Validation
    needs: changes
    if: ${{ needs.changes.outputs.rust-changes == 'true' }}
    runs-on: ubuntu-latest
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1

      - name: Setup Rust
        uses: oxc-project/setup-rust@23f38cfb0c04af97a055f76acee94d5be71c7c82 # v1.0.16
        with:
          tools: just
          cache-key: lint
          save-cache: ${{ github.ref_name == 'main' }}
          components: clippy rustfmt

      - run: just lint-rust

  cargo-test:
    needs: changes
    strategy:
      matrix:
        target: ${{ github.ref_name == 'main' && fromJSON('["ubuntu-latest","macos-latest","windows-latest"]') || fromJSON('["ubuntu-latest"]') }}
    uses: ./.github/workflows/reusable-cargo-test.yml
    with:
      os: ${{ matrix.target }}
      changed: ${{ needs.changes.outputs.rust-changes == 'true' }}

  node-test-windows:
    needs: [changes, build-rolldown-windows]
    uses: ./.github/workflows/reusable-node-test.yml
    if: |
      github.ref_name == 'main' &&
      always() &&
      (needs.build-rolldown-windows.result == 'success' || needs.build-rolldown-windows.result == 'skipped')
    with:
      os: windows-latest
      node-version: 24
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}

  node-test-macos:
    needs: [changes, build-rolldown-macos]
    uses: ./.github/workflows/reusable-node-test.yml
    if: |
      github.ref_name == 'main' &&
      always() &&
      (needs.build-rolldown-macos.result == 'success' || needs.build-rolldown-macos.result == 'skipped')
    with:
      os: macos-latest
      node-version: 24
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}

  node-test-ubuntu:
    needs: [changes, build-rolldown-ubuntu]
    # Matrix is defined here (not inside reusable-node-test.yml) because when the
    # reusable workflow's job is skipped via `if: inputs.changed`, an internal matrix
    # would never expand — producing zero jobs instead of skipped ones. GitHub required
    # status checks need the job names to exist (even as "skipped") to pass.
    strategy:
      fail-fast: false
      matrix:
        node-version: [20, 22, 24]
    uses: ./.github/workflows/reusable-node-test.yml
    if: |
      always() &&
      (needs.build-rolldown-ubuntu.result == 'success' || needs.build-rolldown-ubuntu.result == 'skipped')
    with:
      os: ubuntu-latest
      node-version: ${{ matrix.node-version }}
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}

  type-check:
    name: Type Check
    needs: [changes, build-rolldown-ubuntu]
    if: needs.changes.outputs.node-changes == 'true'
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1

      - uses: oxc-project/setup-node@b8d296d30eafd1ae2968fab67aead472a1dbf6d4 # v1.0.7

      - name: Download Native Rolldown Build
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: rolldown-native-ubuntu-latest
          path: ./packages

      - name: Build `@rolldown/test-dev-server`
        run: pnpm --filter '@rolldown/test-dev-server' build

      - name: Type Check
        run: pnpm type-check

      - name: Node Type Test
        run: pnpm run --filter rolldown-tests test:types

  node-dev-server-test-windows:
    needs: [changes, build-rolldown-windows]
    uses: ./.github/workflows/reusable-node-dev-server-test.yml
    if: |
      github.ref_name == 'main' &&
      always() &&
      (needs.build-rolldown-windows.result == 'success' || needs.build-rolldown-windows.result == 'skipped')
    with:
      os: windows-latest
      node-version: 24
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}

  node-dev-server-test-macos:
    needs: [changes, build-rolldown-macos]
    uses: ./.github/workflows/reusable-node-dev-server-test.yml
    if: |
      github.ref_name == 'main' &&
      always() &&
      (needs.build-rolldown-macos.result == 'success' || needs.build-rolldown-macos.result == 'skipped')
    with:
      os: macos-latest
      node-version: 24
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}

  node-dev-server-test-ubuntu:
    needs: [changes, build-rolldown-ubuntu]
    # Matrix is defined here (not inside reusable-node-dev-server-test.yml) because when the
    # reusable workflow's job is skipped via `if: inputs.changed`, an internal matrix
    # would never expand — producing zero jobs instead of skipped ones. GitHub required
    # status checks need the job names to exist (even as "skipped") to pass.
    strategy:
      fail-fast: false
      matrix:
        node-version: [20, 22, 24]
    uses: ./.github/workflows/reusable-node-dev-server-test.yml
    if: |
      always() &&
      (needs.build-rolldown-ubuntu.result == 'success' || needs.build-rolldown-ubuntu.result == 'skipped')
    with:
      os: ubuntu-latest
      node-version: ${{ matrix.node-version }}
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}

  build-rolldown-windows:
    needs: changes
    if: github.ref_name == 'main'
    uses: ./.github/workflows/reusable-native-build.yml
    with:
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}
      os: windows-latest

  build-rolldown-macos:
    needs: changes
    if: github.ref_name == 'main'
    uses: ./.github/workflows/reusable-native-build.yml
    with:
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}
      os: macos-latest

  build-rolldown-ubuntu:
    needs: changes
    uses: ./.github/workflows/reusable-native-build.yml
    with:
      changed: ${{ needs.changes.outputs.node-changes == 'true' }}
      os: ubuntu-latest

  pluginutils-test:
    name: Pluginutils Test
    needs: changes
    if: ${{ needs.changes.outputs.pluginutils-changes == 'true' }}
    runs-on: ubuntu-latest
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1

      - uses: oxc-project/setup-node@b8d296d30eafd1ae2968fab67aead472a1dbf6d4 # v1.0.7

      - name: Test `@rolldown/pluginutils`
        run: pnpm --filter '@rolldown/pluginutils' test

  node-validation:
    name: Node Validation
    needs: changes
    if: ${{ needs.changes.outputs.node-changes == 'true' }}
    runs-on: ubuntu-latest
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1

      - name: Setup Rust
        uses: oxc-project/setup-rust@23f38cfb0c04af97a055f76acee94d5be71c7c82 # v1.0.16
        with:
          tools: just
          cache-key: native-build
          save-cache: false

      - uses: oxc-project/setup-node@b8d296d30eafd1ae2968fab67aead472a1dbf6d4 # v1.0.7

      - name: Add WASI target
        run: rustup target add wasm32-wasip1-threads

      - name: Build Native Rolldown
        run: just build-rolldown

      - name: Build @rolldown/browser
        run: just build-browser

      - name: Build @rolldown/debug
        run: just build-rolldown-debug

      - name: Make sure generated code of `@rolldown/debug` is up-to-date
        run: git diff --exit-code

      - name: Build @rolldown/pluginutils
        run: just build-pluginutils

      - name: Lint Code
        run: pnpm lint-code

      - name: Lint publint
        run: pnpm lint-publint

      - name: Lint exports & dependencies
        run: pnpm lint-knip

      - name: Validate workspace package
        run: node scripts/misc/published-package-check.mjs

  repo-validation:
    name: Repo Validation
    runs-on: ubuntu-latest
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1

      - name: Setup Rust
        uses: oxc-project/setup-rust@23f38cfb0c04af97a055f76acee94d5be71c7c82 # v1.0.16
        with:
          cache-key: repo-validation
          save-cache: ${{ github.ref_name == 'main' }}
          components: rustfmt

      - uses: oxc-project/setup-node@b8d296d30eafd1ae2968fab67aead472a1dbf6d4 # v1.0.7

      - name: Lint Filename
        run: cargo ls-lint

      - name: update generated code
        run: |
          cargo run --bin generator
          git diff --exit-code

  typos:
    name: Spell Check
    runs-on: ubuntu-latest
    steps:
      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
      - uses: crate-ci/typos@631208b7aac2daa8b707f55e7331f9112b0e062d # v1.44.0
        with:
          files: .