vault/.github/workflows/test.yml at main · supabase/vault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
name: Tests

permissions:
  contents: read

on:
  pull_request:
  push:
    branches:
      - main

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - pg-version: '19'
            cassert: false
          - pg-version: '18'
            cassert: false
          - pg-version: '17'
            cassert: true
          - pg-version: '16'
            cassert: false
          - pg-version: '15'
            cassert: false
          - pg-version: '14'
            cassert: false


    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

    - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
      with:
        nix_path: nixpkgs=channel:nixos-unstable

    - name: Use Cachix Cache
      uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
      with:
        name: nxpg
        authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

    - name: Run tests
      run: nix-shell --argstr pgVersion "${{ matrix.pg-version }}" --arg cassert "${{ matrix.cassert }}" --run "xpg -v ${{ matrix.pg-version }} test"

  style:

    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Install Nix
        uses: cachix/install-nix-action@96951a368ba55167b55f1c916f7d416bac6505fe # v31.10.3
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - name: Use Cachix Cache
        uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
        with:
          name: nxpg
          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

      - name: Run style check
        run: nix-shell --run "vault-style-check"

  test-on-macos:
    runs-on: macos-26

    strategy:
      matrix:
        pg-version: ['17', '18', '19']

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: install nix
        uses: cachix/install-nix-action@96951a368ba55167b55f1c916f7d416bac6505fe # v31.10.3
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - name: use cachix cache
        uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
        with:
          name: nxpg
          authtoken: ${{ secrets.cachix_auth_token }}

      - name: clang analyze
        run: |
          nix-shell --run "CPPFLAGS='--analyze -Xanalyzer  -analyzer-werror' xpg --cassert -v ${{ matrix.pg-version }} build"
          rm -rf ./build-${{ matrix.pg-version }}

      - name: build
        run: nix-shell --run "xpg --cassert -v ${{ matrix.pg-version }} build"

      - name: run tests
        run: nix-shell --run "xpg --cassert -v ${{ matrix.pg-version }} test"

      - if: ${{ failure() }}
        run: cat regression.diffs

  validate-sql-snapshot:
    runs-on: macos-15
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Install Nix
        uses: cachix/install-nix-action@c134e4c9e34bac6cab09cf239815f9339aaaf84e # v31.5.1
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - name: Use Cachix Cache
        uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
        with:
          name: nxpg
          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

      - name: Run snapshot
        run: nix develop --command "./scripts/dump_extension.sh"

      - name: Check for diffs in supabase_vault.sql snapshot
        run: nix-shell --run "git diff --exit-code ./supabase_vault.sql"