pull-request.yml

name: "Build and Test"

on: [workflow_dispatch, pull_request]

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  contents: read
  pull-requests: read
  checks: write
  id-token: write

jobs:
  # Code quality checks
  trunk-check:
    name: Trunk code check
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 #v5.0.0
      - name: Trunk Check
        uses: trunk-io/trunk-action@75699af9e26881e564e9d832ef7dc3af25ec031b # v1.2.4
        with:
          check-mode: pull_request
  pr-check-hadcoded-secrets:
    name: "Check PR for hardcoded secrets"
    uses: mParticle/mparticle-workflows/.github/workflows/security-hardcoded-secrets.yml@main
  pr-branch-check-name:
    name: "Check PR for semantic branch name"
    uses: mParticle/mparticle-workflows/.github/workflows/pr-branch-check-name.yml@main
  pr-title-check:
    name: "Check PR for semantic title"
    uses: mParticle/mparticle-workflows/.github/workflows/pr-title-check.yml@main

  instrumented-tests:
    name: "Instrumented Tests"
    timeout-minutes: 30
    runs-on: ubuntu-latest
    steps:
      - name: "Checkout Branch"
        uses: actions/checkout@v6.0.2
      - name: "Install JDK 17"
        uses: actions/setup-java@v5
        with:
          distribution: "zulu"
          java-version: "17"
      - name: Gradle cache
        uses: gradle/gradle-build-action@842c587ad8aa4c68eeba24c396e15af4c2e9f30a #v2.9.0
      - name: AVD cache
        uses: actions/cache@v5
        id: avd-cache
        with:
          path: |
            ~/.android/avd/*
            ~/.android/adb*
          key: avd-29
      - name: create AVD and generate snapshot for caching
        if: steps.avd-cache.outputs.cache-hit != 'true'
        uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b #v2.35.0
        with:
          api-level: 28
          force-avd-creation: false
          emulator-options: -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
          disable-animations: false
          script: echo "Generated AVD snapshot for caching."
      - name: Enable KVM group perms
        run: |
          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
          sudo udevadm control --reload-rules
          sudo udevadm trigger --name-match=kvm
      - name: "Run Instrumented Tests"
        uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b #v2.35.0
        with:
          api-level: 28
          force-avd-creation: false
          emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
          disable-animations: true
          script: |
            # Disable animations and clean up test packages
            adb shell settings put global transition_animation_scale 0.0
            adb shell settings put global animator_duration_scale 0.0

            for pkg in com.mparticle.kittests com.mparticle.kits.test com.mparticle.legacyTest com.mparticle.test; do if adb shell pm list packages | grep -q "$pkg"; then adb uninstall "$pkg"; fi; done

            ./gradlew connectedCheck --info --stacktrace

            ./gradlew :android-core:cAT -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none --info
            ./gradlew :android-kit-base:cAT -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none --info
      - name: "Archive Instrumented Tests Results"
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: "instrumented-tests-results"
          path: android-core/build/reports/androidTests/connected/**

  instrumented-orchestrator-tests:
    name: "Instrumented Orchestrator Tests"
    timeout-minutes: 30
    runs-on: ubuntu-latest
    steps:
      - name: "Checkout Branch"
        uses: actions/checkout@v6.0.2
      - name: "Install JDK 17"
        uses: actions/setup-java@v5
        with:
          distribution: "zulu"
          java-version: "17"
      - name: Gradle cache
        uses: gradle/gradle-build-action@842c587ad8aa4c68eeba24c396e15af4c2e9f30a #v2.9.0
      - name: AVD cache
        uses: actions/cache@v5
        id: avd-cache
        with:
          path: |
            ~/.android/avd/*
            ~/.android/adb*
          key: avd-29

      - name: create AVD and generate snapshot for caching
        if: steps.avd-cache.outputs.cache-hit != 'true'
        uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b #v2.35.0
        with:
          api-level: 28
          force-avd-creation: false
          emulator-options: -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
          disable-animations: false
          script: echo "Generated AVD snapshot for caching."
      - name: Enable KVM group perms
        run: |
          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
          sudo udevadm control --reload-rules
          sudo udevadm trigger --name-match=kvm
      - name: "Run Instrumented Orchestrator Tests"
        uses: reactivecircus/android-emulator-runner@b530d96654c385303d652368551fb075bc2f0b6b #v2.35.0
        with:
          api-level: 28
          force-avd-creation: false
          emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
          disable-animations: true
          script: |
            # Disable benchmark tests as they do not work on emulators
            # Disable animations and clean up test packages
            adb shell settings put global transition_animation_scale 0.0
            adb shell settings put global animator_duration_scale 0.0

            for pkg in com.mparticle.kittests com.mparticle.kits.test com.mparticle.legacyTest com.mparticle.test; do if adb shell pm list packages | grep -q "$pkg"; then adb uninstall "$pkg"; fi; done

            ./gradlew connectedCheck --stacktrace
            ./gradlew -Porchestrator=true :android-core:cAT -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none
      - name: "Archive Instrumented Orchestrator Tests Results"
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: "instrumented-orchestrator-tests-results"
          path: android-core/build/orchestrator/**
  unit-tests:
    name: "Unit Tests"
    timeout-minutes: 15
    runs-on: ubuntu-latest
    steps:
      - name: "Checkout Branch"
        uses: actions/checkout@v6.0.2
      - name: "Install JDK 17"
        uses: actions/setup-java@v5
        with:
          distribution: "zulu"
          java-version: "17"
      - name: "Run Unit Tests"
        run: ./gradlew test
      - name: "Print Android Unit Tests Report"
        uses: asadmansr/android-test-report-action@384cd31388782f4106dc4a1b37eea2ff02e0aad7 #v1.2.0
        if: always()
      - name: "Archive Unit Test Results"
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: "unit-tests-results"
          path: ./**/build/reports/**

  lint-checks:
    name: "Lint Checks"
    timeout-minutes: 15
    runs-on: macos-latest
    steps:
      - name: "Checkout Branch"
        uses: actions/checkout@v6.0.2
        with:
          submodules: recursive
      - name: "Install JDK 17"
        uses: actions/setup-java@v5
        with:
          distribution: "zulu"
          java-version: "17"
      - name: "Run Android Core SDK Lint"
        run: ./gradlew lint
      - name: "Archive Lint Test Results"
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: "lint-results"
          path: ./**/build/reports/**

  kotlin-lint-checks:
    name: "Kotlin Lint Checks"
    timeout-minutes: 15
    runs-on: macos-latest
    steps:
      - name: "Checkout Branch"
        uses: actions/checkout@v6.0.2
        with:
          submodules: recursive
      - name: "Install JDK 17"
        uses: actions/setup-java@v5
        with:
          distribution: "zulu"
          java-version: "17"
      - name: "Run Android Core SDK Kotlin Lint"
        run: ./gradlew ktlintCheck
      - name: "Archive Kotlin Lint Test Results"
        uses: actions/upload-artifact@v7
        if: always()
        with:
          name: "kotlin-lint-results"
          path: ./**/build/reports/**

  security-checks:
    name: "Security Lint Checks"
    uses: mparticle/mparticle-workflows/.github/workflows/security-checks.yml@main
    with:
      base_branch: main

  kit-compatibility-test:
    name: "Kit Compatibility Test"
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request'
    steps:
      - name: "Checkout Branch"
        uses: actions/checkout@v6.0.2
        with:
          submodules: recursive
          fetch-depth: 0
      - name: "Install JDK 17"
        uses: actions/setup-java@v5
        with:
          distribution: "zulu"
          java-version: "17"
      - name: "Get Latest Kits"
        run: git submodule foreach "git rebase main"
      - name: "Generate Core Release Build"
        run: ./gradlew -PisRelease=true publishLocal
      - name: "Run Kit-Base Release Tests and Build"
        run: ./gradlew -PisRelease=true :android-kit-base:testRelease
      - name: "Run Kit Release Tests and Build"
        run: ./gradlew -PisRelease=true -p kits testRelease -c ../settings-kits.gradle
      - name: "Run Isolated Kit Compatibility Tests (urbanairship-kit)"
        working-directory: kits/urbanairship-kit
        run: ./gradlew -PisRelease=true testRelease

  automerge-dependabot:
    name: "Save PR Number for Dependabot Automerge"
    needs:
      [
        instrumented-tests,
        instrumented-orchestrator-tests,
        unit-tests,
        lint-checks,
        kotlin-lint-checks,
        kit-compatibility-test,
      ]
    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-save-pr-number.yml@main

  pr-notify:
    if: >
      github.event_name == 'pull_request' &&
      github.event.pull_request.draft == false
    needs:
      - instrumented-tests
      - unit-tests
      - lint-checks
      - kotlin-lint-checks
      - security-checks
    name: Notify GChat
    uses: ROKT/rokt-workflows/.github/workflows/oss_pr_opened_notification.yml@main
    secrets:
      gchat_webhook: ${{ secrets.GCHAT_PRS_WEBHOOK }}