java.yaml

# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: Java
on: [push, pull_request, merge_group]
permissions:
  contents: read
jobs:
  build-and-test:
    name: ${{ matrix.job-name }}
    runs-on: ubuntu-24.04
    # Presubmit jobs must complete within 5 minutes. Integration might take longer.
    timeout-minutes: ${{ matrix.timeout }}
    # Skip integration test unless it's a push to main
    strategy:
      fail-fast: false
      matrix:
        include:
          - job-name: 'Unit Tests'
            task: 'unit-test'
            timeout: 5
            sparse: true
          - job-name: 'Smoke Test'
            task: 'smoke-test'
            timeout: 5
            sparse: true
          - job-name: 'Integration Test'
            task: 'integration'
            timeout: 60
            sparse: false
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false
      - uses: ./.github/actions/setup-librarian
      - name: Checkout google-cloud-java (Sparse)
        if: matrix.sparse == true
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          repository: googleapis/google-cloud-java
          path: google-cloud-java
          persist-credentials: false
          sparse-checkout-cone-mode: false
          sparse-checkout: |
            librarian.yaml
            pom.xml
            sdk-platform-java/
            java-shared-config/
            google-auth-library-java/
            java-common-protos/
            gapic-libraries-bom/pom.xml
            google-cloud-jar-parent/pom.xml
            google-cloud-pom-parent/pom.xml
            grpc-gcp-java/pom.xml
            java-*/pom.xml
            # Note: If changing the target of the smoke test below, update this sparse checkout rule.
            java-secretmanager/
      - name: Checkout google-cloud-java (Full)
        if: matrix.sparse == false
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          repository: googleapis/google-cloud-java
          path: google-cloud-java
          persist-credentials: false
      - name: Display Go version
        run: go version
      - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
        with:
          java-version: "17"
          distribution: "temurin"
          cache: "maven"
      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
        with:
          python-version: "3.12"
      - name: Cache Librarian Tools & Venv
        id: cache-tools
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: |
            ~/.cache/librarian
            venv
          key: librarian-java-tools-v2-${{ runner.os }}-${{ hashFiles('internal/config/**/*.go') }}-${{ hashFiles('google-cloud-java/librarian.yaml', 'google-cloud-java/sdk-platform-java/gapic-generator-java/**', 'google-cloud-java/sdk-platform-java/hermetic_build/library_generation/**') }}
      - name: Create Python virtual environment
        if: steps.cache-tools.outputs.cache-hit != 'true'
        run: python3 -m venv venv
      - name: Activate virtual environment
        run: echo "$GITHUB_WORKSPACE/venv/bin" >> $GITHUB_PATH
      - name: Verify Java and Maven installation
        if: steps.cache-tools.outputs.cache-hit != 'true'
        run: |
          java -version
          if ! command -v mvn &> /dev/null; then
            sudo apt-get update && sudo apt-get install -y maven
          fi
          mvn -version
      - name: Add Java tools to PATH
        run: echo "$HOME/.cache/librarian/bin/java_tools/bin" >> $GITHUB_PATH
      - name: Run librarian install
        if: steps.cache-tools.outputs.cache-hit != 'true'
        working-directory: google-cloud-java
        run: |
          librarian install
      - name: Verify tools
        run: |
          protoc --version
          google-java-format --version
          # Verify plugins are executable (they don't support --version)
          test -x "$(which protoc-gen-java_grpc)"
          test -x "$(which protoc-gen-java_gapic)"
      - name: Run internal/librarian/java tests and check coverage
        if: matrix.task == 'unit-test'
        run: go run ./tool/cmd/coverage ./internal/librarian/java
      - name: Generate a single library (smoke test)
        if: matrix.task == 'smoke-test' && !(github.event_name == 'push' && github.ref == 'refs/heads/main')
        working-directory: google-cloud-java
        env:
          PYTHONPATH: ${{ github.workspace }}/google-cloud-java/sdk-platform-java/hermetic_build/library_generation/owlbot
        run: librarian generate secretmanager
      - name: Run librarian generate all (integration test)
        if: matrix.task == 'integration' && github.event_name == 'push' && github.ref == 'refs/heads/main'
        working-directory: google-cloud-java
        env:
          PYTHONPATH: ${{ github.workspace }}/google-cloud-java/sdk-platform-java/hermetic_build/library_generation/owlbot
        run: librarian generate --all
  create-issue-on-failure:
    needs: [build-and-test]
    permissions:
      contents: read
      issues: write
    if: ${{ always() && contains(needs.*.result, 'failure') && github.event_name == 'push' && github.ref == 'refs/heads/main' }}
    uses: ./.github/workflows/create-issue-on-failure.yaml
    with:
      language: Java
      repository: google-cloud-java