main.yml

name: Build and Deploy Snapshot
on:
  push:
    branches: ['3.*']
    paths-ignore:
    - "README.md"
    - "release-notes/*"
  pull_request:
    paths-ignore:
    - "README.md"
    - "release-notes/*"
permissions:
  contents: read
  pull-requests: write

jobs:
  build:
    # Here we DO need "os" option, to include Windows
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        java_version: ['17', '21', '25']
        os: ['ubuntu-24.04']
        include:
          - java_version: '17'
            os: 'ubuntu-24.04'
            release_build: 'R'
          - java_version: '17'
            os: 'windows-latest'
            is_windows: 'W'
    env:
      JAVA_OPTS: "-XX:+TieredCompilation -XX:TieredStopAtLevel=1"
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - name: Set up JDK (without deployment credentials)
      if: ${{ github.event_name == 'pull_request' || github.repository != 'FasterXML/jackson-databind' }}
      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
      with:
        distribution: 'temurin'
        java-version: ${{ matrix.java_version }}
        cache: 'maven'
    - name: Set up JDK with deployment credentials
      if: ${{ github.event_name != 'pull_request' && github.repository == 'FasterXML/jackson-databind' }}
      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
      with:
        distribution: 'temurin'
        java-version: ${{ matrix.java_version }}
        cache: 'maven'
        server-id: central-snapshots
        server-username: CI_DEPLOY_USERNAME
        server-password: CI_DEPLOY_PASSWORD
        # See https://github.com/actions/setup-java/blob/v2/docs/advanced-usage.md#Publishing-using-Apache-Maven
        # gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} # Value of the GPG private key to import
        # gpg-passphrase: MAVEN_GPG_PASSPHRASE # env variable for GPG private key passphrase
    - name: Build
      run: ./mvnw -B -ff -ntp verify
    - name: Extract project Maven version
      id: projectVersion
      if: ${{ !matrix.is_windows }}
      run: echo "version=$(./mvnw org.apache.maven.plugins:maven-help-plugin:3.5.1:evaluate -DforceStdout -Dexpression=project.version -q)" >> $GITHUB_OUTPUT
    - name: Verify Android SDK Compatibility
      if: ${{ matrix.release_build }}
      run: ./mvnw -B -q -ff -ntp -DskipTests animal-sniffer:check
    - name: Deploy snapshot
      if: ${{ matrix.release_build && github.event_name != 'pull_request' && github.repository == 'FasterXML/jackson-databind' && endsWith(steps.projectVersion.outputs.version, '-SNAPSHOT') }}
      env:
        CI_DEPLOY_USERNAME: ${{ secrets.CENTRAL_DEPLOY_USERNAME }}
        CI_DEPLOY_PASSWORD: ${{ secrets.CENTRAL_DEPLOY_PASSWORD }}
        # MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
      run: ./mvnw -B -q -ff -DskipTests -ntp source:jar deploy
    - name: Generate code coverage
      if: ${{ matrix.release_build }}
      run: ./mvnw -B -q -ff -ntp test jacoco:report
    - name: Publish code coverage
      if: ${{ matrix.release_build && github.event_name != 'pull_request' && github.repository == 'FasterXML/jackson-databind' }}
      uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
      with:
        token: ${{ secrets.CODECOV_TOKEN }}
        files: ./target/site/jacoco/jacoco.xml
        flags: unittests
    - name: Upload coverage report as artifact
      if: ${{ matrix.release_build && github.event_name != 'pull_request' && github.repository == 'FasterXML/jackson-databind' }}
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: jacoco-report
        path: target/site/jacoco/jacoco.csv
        retention-days: 30
    - name: Download base branch coverage
      if: ${{ matrix.release_build && github.event_name == 'pull_request' }}
      uses: dawidd6/action-download-artifact@883bc3da0e2f55ddd0a8fc8e99378551c1991a55 # v13
      continue-on-error: true
      with:
        workflow: main.yml
        branch: ${{ github.event.pull_request.base.ref }}
        name: jacoco-report
        path: base-coverage/
    - name: Generate coverage summary
      if: ${{ matrix.release_build && github.event_name == 'pull_request' }}
      id: jacoco
      uses: cicirello/jacoco-badge-generator@72266185b7ee48a6fd74eaf0238395cc8b14fef8 # v2.12.1
      with:
        jacoco-csv-file: target/site/jacoco/jacoco.csv
        generate-coverage-badge: false
        generate-branches-badge: false
        generate-summary: true
    - name: Generate coverage comment
      if: ${{ matrix.release_build && github.event_name == 'pull_request' }}
      run: |
        # Helper functions
        parse_coverage() {
          local csv_file=$1 col_missed=$2 col_covered=$3
          awk -F',' -v m="$col_missed" -v c="$col_covered" \
            'NR>1 && $1=="jackson-databind" {
              total_missed += $m;
              total_covered += $c;
            }
            END {
              if (total_missed + total_covered > 0)
                printf "%.2f", (total_covered * 100.0) / (total_missed + total_covered)
            }' "$csv_file"
        }

        format_delta() {
          local delta=$1
          if awk -v d="$delta" 'BEGIN { exit (d >= 0) ? 0 : 1 }'; then
            echo "+${delta}%|📈"
          else
            echo "${delta}%|📉"
          fi
        }

        get_color() {
          awk -v v="$1" 'BEGIN {
            if (v >= 80) print "brightgreen"
            else if (v >= 60) print "green"
            else if (v >= 40) print "yellow"
            else print "red"
          }'
        }

        # Convert decimal to percentage and round to 1 decimal place
        COVERAGE=$(awk -v cov="${{ steps.jacoco.outputs.coverage }}" 'BEGIN { printf "%.2f", cov * 100 }')
        BRANCHES=$(awk -v br="${{ steps.jacoco.outputs.branches }}" 'BEGIN { printf "%.2f", br * 100 }')

        # Check if base coverage artifact was downloaded and calculate deltas
        HAS_DELTA=false
        if [ -f "base-coverage/jacoco.csv" ]; then
          echo "Found base branch coverage from artifact"
          BASE_COVERAGE=$(parse_coverage "base-coverage/jacoco.csv" 4 5)
          BASE_BRANCHES=$(parse_coverage "base-coverage/jacoco.csv" 6 7)

          if [ -n "$BASE_COVERAGE" ] && [ -n "$BASE_BRANCHES" ]; then
            COV_DELTA=$(awk -v curr="$COVERAGE" -v base="$BASE_COVERAGE" 'BEGIN { printf "%.3f", curr - base }')
            BR_DELTA=$(awk -v curr="$BRANCHES" -v base="$BASE_BRANCHES" 'BEGIN { printf "%.3f", curr - base }')

            IFS='|' read -r COV_DELTA_STR COV_DELTA_EMOJI <<< "$(format_delta "$COV_DELTA")"
            IFS='|' read -r BR_DELTA_STR BR_DELTA_EMOJI <<< "$(format_delta "$BR_DELTA")"

            HAS_DELTA=true
          fi
        fi

        # Determine badge colors
        COV_COLOR=$(get_color "$COVERAGE")
        BR_COLOR=$(get_color "$BRANCHES")

        # Build coverage table with or without deltas
        if [ "$HAS_DELTA" = "true" ]; then
          COVERAGE_TABLE="| Metric | Coverage | Change |
        |--------|----------|--------|
        | **Instructions** | ![coverage](https://img.shields.io/badge/coverage-${COVERAGE}%25-${COV_COLOR}) **${COVERAGE}%** | ${COV_DELTA_EMOJI} **${COV_DELTA_STR}** |
        | **Branches** | ![branches](https://img.shields.io/badge/branches-${BRANCHES}%25-${BR_COLOR}) **${BRANCHES}%** | ${BR_DELTA_EMOJI} **${BR_DELTA_STR}** |"
        else
          COVERAGE_TABLE="| Metric | Coverage |
        |--------|----------|
        | **Instructions** | ![coverage](https://img.shields.io/badge/coverage-${COVERAGE}%25-${COV_COLOR}) **${COVERAGE}%** |
        | **Branches** | ![branches](https://img.shields.io/badge/branches-${BRANCHES}%25-${BR_COLOR}) **${BRANCHES}%** |"
        fi

        COMMENT_BODY="## :test_tube: Code Coverage Report

        $COVERAGE_TABLE

        > Coverage data generated from JaCoCo test results

        <!-- jacoco-coverage-comment -->"

        # Save comment for the workflow_run
        mkdir -p pr-comment
        echo "${{ github.event.pull_request.number }}" > pr-comment/pr-number.txt
        echo "$COMMENT_BODY" > pr-comment/comment-body.txt
    - name: Upload PR comment
      if: ${{ matrix.release_build && github.event_name == 'pull_request' }}
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: pr-comment
        path: pr-comment/
        retention-days: 1

  trigger-dep-build-v2:
    name: Trigger v2 dep builds
    needs: [build]
    # Only for pushes to 2.x (next 2.x being developed) branch on main repository
    if: ${{ github.event_name == 'push' && github.ref_name == '2.x' && github.repository == 'FasterXML/jackson-databind' }}
    uses: ./.github/workflows/trigger_dep_builds_v2.yml
    secrets:
      token: ${{ secrets.REPO_DISPATCH }}

  trigger-dep-build-v3:
    name: Trigger v3 dep builds
    needs: [build]
    # Only for pushes to 3.x branch on main repository
    if: ${{ github.event_name == 'push' && github.ref_name == '3.x' && github.repository == 'FasterXML/jackson-databind' }}
    uses: ./.github/workflows/trigger_dep_builds_v3.yml
    secrets:
      token: ${{ secrets.REPO_DISPATCH }}