Run tests and build on GitHub Actions

Author: michaelmior

.github/workflows/ci.yml

@@ -0,0 +1,82 @@
+name: CI
+on:
+  push:
+    branches:
+      - '*'
+    tags:
+      - 'v*'
+  pull_request:
+    branches:
+      - main
+jobs:
+  test:
+    runs-on: blacksmith-2vcpu-ubuntu-2204
+    env:
+        ENABLE_ASSERTIONS: 1
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+    - name: Coursier cache
+      uses: useblacksmith/coursier-cache-action@v6
+    - uses: coursier/setup-action@v1
+      with:
+        jvm: zulu:11.0.10
+        apps: sbt scala
+    - name: dynver check
+      run: sbt dynverAssertVersion
+    - name: Scalafmt
+      run: sbt scalafmtCheck test:scalafmtCheck
+    - name: Test
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: sbt coverage test coverageReport
+    - name: Upload coverage
+      uses: codecov/codecov-action@v5
+      if: ${{ github.actor != 'dependabot[bot]' }}
+      with:
+        token: ${{ secrets.CODECOV_TOKEN }}
+        fail_ci_if_error: true
+    - name: Clean up
+      run: |
+        rm -rf "$HOME/.ivy2/local" || true
+        find $HOME/Library/Caches/Coursier/v1        -name "ivydata-*.properties" -delete || true
+        find $HOME/.ivy2/cache                       -name "ivydata-*.properties" -delete || true
+        find $HOME/.cache/coursier/v1                -name "ivydata-*.properties" -delete || true
+        find $HOME/.sbt                              -name "*.lock"               -delete || true
+
+  assemble:
+    needs: [test]
+    runs-on: blacksmith-2vcpu-ubuntu-2204
+    permissions:
+      id-token: write
+      attestations: write
+      contents: read
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+    - name: Coursier cache
+      uses: useblacksmith/coursier-cache-action@v6
+    - uses: taiki-e/install-action@parse-changelog
+    - name: Set build timestamp
+      run:  echo "SOURCE_DATE_EPOCH=$(date -d $(parse-changelog CHANGELOG.md -t | rev | cut -d' ' -f1 | rev) '+%s')" >> "$GITHUB_ENV"
+    - uses: coursier/setup-action@v1
+      with:
+        jvm: zulu:11.0.10
+        apps: sbt scala
+    - name: Assemble
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      run: sbt assembly
+    - name: Upload JAR
+      uses: actions/upload-artifact@v4
+      with:
+        name: jsonoid-server.jar
+        if-no-files-found: error
+        path: target/scala-2.13/jsonoid-server*.jar
+    - name: Attest build provenance
+      uses: actions/attest-build-provenance@v2
+      if: ${{ github.event_name != 'pull_request' }}
+      with:
+        subject-path: 'target/scala-2.13/jsonoid-server*.jar'

build.sbt

@@ -57,3 +57,17 @@ lazy val root = (project in file("."))
   )
 
 enablePlugins(PlayScala)
+
+ThisBuild / assemblyShadeRules := Seq(
+  ShadeRule.rename("org.apache.commons.logging.**" -> "shadelogging.@1").inAll
+)
+
+assembly / assemblyMergeStrategy := {
+  case "module-info.class"                     => MergeStrategy.discard
+  case "META-INF/versions/9/module-info.class" => MergeStrategy.discard
+  case PathList("shadelogging", xs @ _*)       => MergeStrategy.discard
+  case "play/reference-overrides.conf"         => MergeStrategy.concat
+  case x =>
+    val oldStrategy = (assembly / assemblyMergeStrategy).value
+    oldStrategy(x)
+}

conf/application.conf

@@ -2,3 +2,10 @@
 play.filters.hosts {
   allowed = ["."]
 }
+
+## Secret key
+# http://www.playframework.com/documentation/latest/ApplicationSecret
+# ~~~~~
+# The secret key is used to sign Play's session cookie.
+# This must be changed for production, but we don't recommend you change it in this file.
+play.http.secret.key=${?APPLICATION_SECRET}

project/plugins.sbt

@@ -1,4 +1,5 @@
 addSbtPlugin("ch.epfl.scala" % "sbt-scalafix" % "0.14.2")
+addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.3.1")
 addSbtPlugin("com.eed3si9n" % "sbt-buildinfo" % "0.13.1")
 addSbtPlugin("com.github.sbt" % "sbt-dynver" % "5.1.0")
 addSbtPlugin("com.github.sbt" % "sbt-git" % "2.1.0")