Jon Chery
90be5839ab
Phase 26 — platform-pipelines-and-release-automation: - platform-test.yml: PR pipeline (lint + unit-test + integration-test + schema-validation) replacing ci.yml for PRs; integration-test runs run_platform.sh --check-only for every contracts/*.yaml - primitives-plan.yml: PR pipeline with matrix over all 9 L1 primitives (s3, vpc, ecs-cluster, ecs-service, iam-role, alb, ecr, cloudfront, waf) - patterns-plan.yml: PR pipeline with matrix over all 2 L2 modules (static-assets, microservice) - release.yml: push-to-main pipeline computing next semver tag (PATCH for regular phases, MINOR for milestone completions), updating floating MAJOR.MINOR + MAJOR tags, and creating GitHub releases - run_primitive_plan.sh: plan-only/check-only runner for a single L1 primitive (adapter compile + structure validation offline) - run_pattern_plan.sh: plan-only/check-only runner for a single L2 pattern (environment check + contract validate + resolve + adapter + structure validation offline) - contracts/microservice.yaml: sample consumer contract for the microservice L2 module (schema-compliant scalar inputs) - instance.json for 8 L1 primitives (vpc, ecs-cluster, ecs-service, iam-role, alb, ecr, cloudfront, waf) so the primitives-plan matrix can run the adapter offline; s3 already had one - tests/test_release_logic.py: unit test for semver computation (PATCH bump, MINOR bump on milestone, floating tag format) - tests/test_pipeline_contract.py: 19 new tests validating the 4 platform workflows exist and conform (stages, matrices, triggers, permissions) DEVIATION: The microservice pattern (run_pattern_plan.sh --check-only microservice + run_platform.sh --check-only contracts/microservice.yaml) fails at the adapter stage due to a pre-existing resolver ref-id mismatch for multi-resource L1s (resolver emits ref:vpc.subnet_ids but the expanded resource id is vpc-subnet). This predates Phase 26 and is out of scope for pipeline automation; the static-assets pattern passes end-to-end. The microservice contract is schema-valid and resolves correctly (11 resources); only the adapter compilation of multi-resource L1 refs fails. VERIFICATION: - bash scripts/run_ci.sh: PASS (lint + test + check-only) - python3 -m pytest tests/ -v: 266 passed - bash scripts/run_primitive_plan.sh --check-only s3: PASS - bash scripts/run_pattern_plan.sh --check-only static-assets: PASS - All 9 primitives pass run_primitive_plan.sh --check-only - All instance.json validate against stack.schema.json ---ci--- project: acdl phase: 26 milestone: v1.7 status: execute ---/ci---
92 lines
3.4 KiB
YAML
92 lines
3.4 KiB
YAML
# ACDL Release Pipeline — GitHub Actions (production)
|
|
#
|
|
# Runs on push to main. Computes the next semver tag from the latest tag +
|
|
# commit history, creates the tag, updates floating MAJOR.MINOR and MAJOR tags,
|
|
# and creates a GitHub release with auto-generated notes.
|
|
#
|
|
# Semver policy:
|
|
# - Regular phase commit -> bump PATCH (v1.6.0 -> v1.6.1)
|
|
# - Milestone completion ("docs(milestone): complete") -> bump MINOR (v1.6.1 -> v1.7.0)
|
|
# - Major bumps are manual (not implemented here).
|
|
name: acdl-release
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
release:
|
|
name: Compute semver + update tags
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # need full history for tag computation
|
|
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.12"
|
|
|
|
- name: Compute next version
|
|
id: version
|
|
run: |
|
|
# Get the latest tag
|
|
LATEST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "v0.0.0")
|
|
echo "Latest tag: $LATEST_TAG"
|
|
|
|
# Parse the version
|
|
MAJOR=$(echo "$LATEST_TAG" | sed -n 's/v\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\)/\1/p')
|
|
MINOR=$(echo "$LATEST_TAG" | sed -n 's/v\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\)/\2/p')
|
|
PATCH=$(echo "$LATEST_TAG" | sed -n 's/v\([0-9]*\)\.\([0-9]*\)\.\([0-9]*\)/\3/p')
|
|
|
|
# Check if this is a milestone completion (look for "docs(milestone): complete" in the latest commits)
|
|
if git log --format='%s' -5 | grep -q 'docs(milestone): complete'; then
|
|
# Milestone completion -> bump minor
|
|
MINOR=$((MINOR + 1))
|
|
PATCH=0
|
|
else
|
|
# Regular phase -> bump patch
|
|
PATCH=$((PATCH + 1))
|
|
fi
|
|
|
|
NEW_TAG="v${MAJOR}.${MINOR}.${PATCH}"
|
|
MAJOR_MINOR_TAG="v${MAJOR}.${MINOR}"
|
|
MAJOR_TAG="v${MAJOR}"
|
|
|
|
echo "new_tag=$NEW_TAG" >> $GITHUB_OUTPUT
|
|
echo "major_minor_tag=$MAJOR_MINOR_TAG" >> $GITHUB_OUTPUT
|
|
echo "major_tag=$MAJOR_TAG" >> $GITHUB_OUTPUT
|
|
echo "Next version: $NEW_TAG"
|
|
|
|
- name: Create version tag
|
|
run: |
|
|
git tag ${{ steps.version.outputs.new_tag }}
|
|
git push origin ${{ steps.version.outputs.new_tag }}
|
|
|
|
- name: Update floating MAJOR.MINOR tag
|
|
run: |
|
|
git tag -f ${{ steps.version.outputs.major_minor_tag }} ${{ steps.version.outputs.new_tag }}
|
|
git push origin ${{ steps.version.outputs.major_minor_tag }} --force
|
|
|
|
- name: Update floating MAJOR tag
|
|
run: |
|
|
git tag -f ${{ steps.version.outputs.major_tag }} ${{ steps.version.outputs.new_tag }}
|
|
git push origin ${{ steps.version.outputs.major_tag }} --force
|
|
|
|
- name: Create GitHub release
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
# Generate release body from commit history since last tag
|
|
PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
|
|
if [ -n "$PREV_TAG" ]; then
|
|
BODY=$(git log --format='- %s' "$PREV_TAG"..HEAD)
|
|
else
|
|
BODY=$(git log --format='- %s' HEAD)
|
|
fi
|
|
gh release create ${{ steps.version.outputs.new_tag }} \
|
|
--title "ACDL ${{ steps.version.outputs.new_tag }}" \
|
|
--notes "$BODY" \
|
|
--generate-notes || true |