ci.yml

name: CI

on:
  push:
    branches: [main, master]
  pull_request:

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build-test:
    runs-on: ubuntu-latest
    # Dependabot PRs run with a read-only token, so packages: read is denied
    # and mirror-api can't resolve from GitHub Packages. The build is
    # re-validated on push once the bump is merged.
    if: github.actor != 'dependabot[bot]'
    permissions:
      contents: read
      packages: read
      checks: write # dorny/test-reporter publishes a check run
    steps:
      - uses: actions/checkout@v7

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: "21"

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6.4.0

      - name: Validate Gradle wrapper
        uses: gradle/actions/wrapper-validation@v6.4.0

      - name: Quality + build + test
        run: ./gradlew ktlintCheck detekt test build --stacktrace
        env:
          # mirror-api resolves from GitHub Packages (see settings.gradle.kts).
          GITHUB_ACTOR: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Publish test report
        if: always()
        uses: dorny/test-reporter@v3
        with:
          name: JUnit Tests
          path: "**/build/test-results/test/*.xml"
          reporter: java-junit
          fail-on-error: false

      - name: Upload reports
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: build-reports
          path: "**/build/reports/**"
          if-no-files-found: ignore