Repository navigation

build(deps): bump github/codeql-action from 3 to 4 #15

	name: CI

	on:
	push:
	branches: [main, master]
	pull_request:

	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	build-test:
	runs-on: ubuntu-latest
	# Dependabot PRs run with a read-only token, so packages: read is denied
	# and mirror-api can't resolve from GitHub Packages. The build is
	# re-validated on push once the bump is merged.
	if: github.actor != 'dependabot[bot]'
	permissions:
	contents: read
	packages: read
	steps:
	- uses: actions/checkout@v6

	- name: Set up JDK 21
	uses: actions/setup-java@v5
	with:
	distribution: temurin
	java-version: "21"

	- name: Set up Gradle
	uses: gradle/actions/setup-gradle@v6

	- name: Validate Gradle wrapper
	uses: gradle/actions/wrapper-validation@v6

	- name: Quality + build + test
	run: ./gradlew ktlintCheck detekt test build --stacktrace
	env:
	# mirror-api resolves from GitHub Packages (see settings.gradle.kts).
	GITHUB_ACTOR: ${{ github.actor }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Upload reports
	if: always()
	uses: actions/upload-artifact@v7
	with:
	name: build-reports
	path: "/build/reports/"
	if-no-files-found: ignore