ci.yml

name: CI

on:
  push:
    branches:
      - master
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+"
  pull_request:
    branches:
      - master

concurrency:
  group: ${{ github.ref_name }}-ci
  cancel-in-progress: true

jobs:
  release-notes:
    name: Create/Update release notes
    runs-on: ubuntu-24.04
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Create/Update Draft
        uses: lucacome/draft-release@v1.1.1
        with:
          minor-label: "enhancement"
          major-label: "change"
          publish: ${{ github.ref_type == 'tag' }}
          collapse-after: 50
        if: github.event_name != 'pull_request'

  build-binaries:
    name: Build Binaries
    runs-on: ubuntu-24.04
    needs: release-notes
    strategy:
      matrix:
        nginx_version:
          [
            1.15.12,
            1.16.1,
            1.17.10,
            1.18.0,
            1.19.10,
            1.20.2,
            1.21.6,
            1.22.1,
            1.23.4,
            1.24.0,
            1.25.5,
            1.26.0,
            1.26.1,
            1.26.2,
            1.27.0,
            1.27.1,
            1.27.2,
          ]
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build binary
        uses: docker/build-push-action@v6
        with:
          pull: true
          push: false
          file: build/Dockerfile
          tags: ${{ matrix.nginx_version }}
          cache-from: type=gha,scope=${{ matrix.nginx_version }}
          cache-to: type=gha,scope=${{ matrix.nginx_version }},mode=max
          platforms: linux/amd64
          provenance: mode=max
          sbom: true
          target: export
          build-args: NGINX_VERSION=${{ matrix.nginx_version }}
          outputs: type=local,dest=out

      - name: Compress output
        run: |
          tar -czf linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.tgz -C out/ ngx_http_opentracing_module.so
          cp out/provenance.json linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.provenance.json
          cp out/sbom.spdx.json linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.sbom.spdx.json

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: nginx-opentracing-modules-${{ matrix.nginx_version }}
          path: linux-*-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.*

      - name: Upload binaries on release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        if: github.ref_type == 'tag'
        run: |
          gh release upload ${{ github.ref_name }} linux-*-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.* --clobber