K Framework Release v7.1.325 #1699
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 'Release' | |
| run-name: K Framework Release ${{ github.ref_name }} | |
| on: | |
| release: | |
| types: | |
| - prereleased | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| jobs: | |
| set-release-id: | |
| name: 'Set Release ID' | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: 'Get release_id' | |
| run: echo "release_id=$(jq --raw-output '.release.id' "$GITHUB_EVENT_PATH")" >> "${GITHUB_OUTPUT}" | |
| id: release | |
| outputs: | |
| release_id: ${{ steps.release.outputs.release_id }} | |
| source-tarball: | |
| name: 'Create source tarball' | |
| runs-on: ubuntu-24.04 | |
| environment: production | |
| steps: | |
| - name: 'Check out code' | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: 'Create source tarball' | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.JENKINS_GITHUB_PAT }} | |
| run: | | |
| set -x | |
| version=$(cat package/version) | |
| tarball=kframework-${version}-src.tar.gz | |
| # shellcheck disable=SC2038 | |
| find . -name .git | xargs rm -r | |
| CURDIR=$(pwd) | |
| cd .. | |
| tar czvf "${tarball}" "$(basename "${CURDIR}")" | |
| mv "${tarball}" "${CURDIR}/" | |
| cd "${CURDIR}" | |
| gh release upload --repo runtimeverification/k --clobber "v${version}" "${tarball}" | |
| cachix-release: | |
| name: 'k-framework-binary cachix release' | |
| strategy: | |
| matrix: | |
| include: | |
| - runner: ubuntu-24.04 | |
| os: ubuntu-24.04 | |
| # Using macos-latest (public runner) instead of self-macos-latest (self-hosted) | |
| # because the public runner has proven more reliable for large file uploads. | |
| # The condition !startsWith(matrix.os, 'self') ensures Nix/Cachix are installed | |
| # on public runners (they're pre-installed on self-hosted runners). | |
| - runner: macos-latest | |
| os: macos-15 | |
| runs-on: ${{ matrix.runner }} | |
| timeout-minutes: 120 | |
| steps: | |
| - name: 'Check out code' | |
| uses: actions/checkout@v4 | |
| - name: 'Install Nix' | |
| if: ${{ !startsWith(matrix.os, 'self') }} | |
| uses: cachix/install-nix-action@v31.5.1 | |
| with: | |
| install_url: https://releases.nixos.org/nix/nix-2.30.1/install | |
| extra_nix_config: | | |
| access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} | |
| substituters = http://cache.nixos.org | |
| trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= | |
| - name: 'Install Cachix' | |
| if: ${{ !startsWith(matrix.os, 'self') }} | |
| uses: cachix/cachix-action@v14 | |
| with: | |
| name: k-framework-binary | |
| - name: 'Publish K to k-framework-binary cache' | |
| uses: workflow/nix-shell-action@v3.3.2 | |
| env: | |
| CACHIX_AUTH_TOKEN: '${{ secrets.CACHIX_PRIVATE_KFB_TOKEN }}' | |
| GC_DONT_GC: '1' | |
| OWNER_REPO: ${{ github.repository }} | |
| REV: ${{ github.sha }} | |
| with: | |
| packages: jq | |
| script: | | |
| # Install kup | |
| export PATH="$(nix build github:runtimeverification/kup --no-link --json | jq -r '.[].outputs | to_entries[].value')/bin:$PATH" | |
| # Publish all three package variants using kup publish | |
| # Using public macOS runner has proven reliable for large file uploads | |
| kup publish --verbose k-framework-binary .#k --keep-days 180 || true | |
| kup publish --verbose k-framework-binary .#k.openssl.secp256k1 --keep-days 180 || true | |
| kup publish --verbose k-framework-binary .#k.openssl.procps.secp256k1 --keep-days 180 || true | |
| # kup/cachix pin visibility can be flaky; verify pins and narinfo via public API | |
| bash .github/scripts/check-cachix-pin.sh | |
| cachix-release-dependencies: | |
| name: 'k-framework cachix release' | |
| strategy: | |
| matrix: | |
| include: | |
| - runner: ubuntu-24.04 | |
| os: ubuntu-24.04 | |
| - runner: macos-latest | |
| os: macos-15 | |
| runs-on: ${{ matrix.runner }} | |
| timeout-minutes: 120 | |
| steps: | |
| - name: 'Check out code' | |
| uses: actions/checkout@v4 | |
| - name: 'Install Nix' | |
| if: ${{ !startsWith(matrix.os, 'self') }} | |
| uses: cachix/install-nix-action@v31.5.1 | |
| with: | |
| install_url: https://releases.nixos.org/nix/nix-2.30.1/install | |
| extra_nix_config: | | |
| access-tokens = github.com=${{ secrets.GITHUB_TOKEN }} | |
| substituters = http://cache.nixos.org | |
| trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= | |
| - name: 'Install Cachix' | |
| if: ${{ !startsWith(matrix.os, 'self') }} | |
| uses: cachix/cachix-action@v14 | |
| with: | |
| name: k-framework-binary | |
| - name: 'Build and cache K and K dependencies' | |
| uses: workflow/nix-shell-action@v3 | |
| env: | |
| GC_DONT_GC: 1 | |
| CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_PUBLIC_TOKEN }} | |
| with: | |
| packages: jq | |
| script: | | |
| K=$(nix build --extra-experimental-features 'nix-command flakes' .#k --json | jq -r '.[].outputs | to_entries[].value') | |
| DRV_K=$(nix-store --query --deriver ${K}) | |
| nix-store --query --requisites --include-outputs ${DRV_K} | cachix push k-framework | |
| K_OPENSSL_SECP256K1=$(nix build --extra-experimental-features 'nix-command flakes' .#k.openssl.secp256k1 --json | jq -r '.[].outputs | to_entries[].value') | |
| DRV_K_OPENSSL_SECP256K1=$(nix-store --query --deriver ${K_OPENSSL_SECP256K1}) | |
| nix-store --query --requisites --include-outputs ${DRV_K_OPENSSL_SECP256K1} | cachix push k-framework | |
| K_OPENSSL_PROCPS_SECP256K1=$(nix build --extra-experimental-features 'nix-command flakes' .#k.openssl.procps.secp256k1 --json | jq -r '.[].outputs | to_entries[].value') | |
| DRV_K_OPENSSL_PROCPS_SECP256K1=$(nix-store --query --deriver ${K_OPENSSL_PROCPS_SECP256K1}) | |
| nix-store --query --requisites --include-outputs ${DRV_K_OPENSSL_PROCPS_SECP256K1} | cachix push k-framework | |
| pyk-build-wheel: | |
| name: 'Pyk: Build Python wheel' | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 10 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: 'Get uv release' | |
| id: uv_release | |
| run: | | |
| echo "uv_version=$(cat deps/uv_release)" >> "${GITHUB_OUTPUT}" | |
| - name: 'Install uv' | |
| uses: astral-sh/setup-uv@v6 | |
| with: | |
| version: ${{ steps.uv_release.outputs.uv_version }} | |
| - name: 'Build kframework wheel' | |
| run: | | |
| uv build --project pyk | |
| cp pyk/dist/kframework-*.whl ./ | |
| - name: 'Upload kframework package wheel as artifact to the Summary Page' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: kframework.whl | |
| path: kframework-*.whl | |
| if-no-files-found: error | |
| retention-days: 1 | |
| ubuntu-noble: | |
| name: 'K Ubuntu Noble Package' | |
| runs-on: [self-hosted, linux, normal] | |
| needs: 'pyk-build-wheel' | |
| timeout-minutes: 90 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: 'Build and Test Package' | |
| uses: ./.github/actions/test-package | |
| with: | |
| os: ubuntu | |
| distro: noble | |
| llvm: 17 | |
| jdk: 21 | |
| pkg-name: kframework_amd64_ubuntu_noble.deb | |
| build-package: package/debian/build-package noble kframework | |
| test-package: package/debian/test-package | |
| - name: 'Upload the package built to the Summary Page' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: kframework_amd64_ubuntu_noble.deb | |
| path: kframework_amd64_ubuntu_noble.deb | |
| if-no-files-found: error | |
| retention-days: 1 | |
| - name: 'Upload Package to Release' | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.JENKINS_GITHUB_PAT }} | |
| run: | | |
| set -x | |
| version=$(cat package/version) | |
| cp kframework_amd64_ubuntu_noble.deb "kframework_${version}_amd64_ubuntu_noble.deb" | |
| gh release upload --repo runtimeverification/k --clobber "v${version}" "kframework_${version}_amd64_ubuntu_noble.deb" | |
| - name: 'Download kframework.whl' | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: kframework.whl | |
| - name: 'Build, Test, and Push Dockerhub Image' | |
| shell: bash {0} | |
| env: | |
| DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| DOCKERHUB_REPO: runtimeverificationinc/kframework-k | |
| run: | | |
| set -euxo pipefail | |
| version=$(cat package/version) | |
| version_tag=ubuntu-noble-${version} | |
| docker login --username rvdockerhub --password "${DOCKERHUB_PASSWORD}" | |
| docker image build . --file package/docker/Dockerfile.ubuntu-noble --tag "${DOCKERHUB_REPO}:${version_tag}" | |
| docker run --name "k-package-docker-test-noble-${GITHUB_SHA}" --rm -it --detach "${DOCKERHUB_REPO}:${version_tag}" | |
| docker exec -t "k-package-docker-test-noble-${GITHUB_SHA}" bash -c 'cd ~ && echo "module TEST imports BOOL endmodule" > test.k' | |
| docker exec -t "k-package-docker-test-noble-${GITHUB_SHA}" bash -c 'cd ~ && kompile test.k --backend llvm' | |
| docker exec -t "k-package-docker-test-noble-${GITHUB_SHA}" bash -c 'cd ~ && kompile test.k --backend haskell' | |
| docker exec -t "k-package-docker-test-noble-${GITHUB_SHA}" bash -c 'cd ~ && pyk kompile test.k --backend llvm' | |
| docker exec -t "k-package-docker-test-noble-${GITHUB_SHA}" bash -c 'cd ~ && pyk kompile test.k --backend haskell' | |
| docker image push "${DOCKERHUB_REPO}:${version_tag}" | |
| - name: 'Clean up Docker Container' | |
| if: always() | |
| run: | | |
| docker stop --time=0 "k-package-docker-test-noble-${GITHUB_SHA}" | |
| - name: On Failure, Upload the kore-exec.tar.gz file to the Summary Page | |
| if: failure() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: kore-exec.tar.gz | |
| path: | | |
| **/kore-exec.tar.gz | |
| ubuntu-jammy: | |
| name: 'K Ubuntu Jammy Package' | |
| runs-on: [self-hosted, linux, normal] | |
| needs: 'pyk-build-wheel' | |
| timeout-minutes: 90 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: 'Build and Test Package' | |
| uses: ./.github/actions/test-package | |
| with: | |
| os: ubuntu | |
| distro: jammy | |
| llvm: 15 | |
| pkg-name: kframework_amd64_ubuntu_jammy.deb | |
| build-package: package/debian/build-package jammy kframework | |
| test-package: package/debian/test-package | |
| - name: 'Upload the package built to the Summary Page' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: kframework_amd64_ubuntu_jammy.deb | |
| path: kframework_amd64_ubuntu_jammy.deb | |
| if-no-files-found: error | |
| retention-days: 1 | |
| - name: 'Upload Package to Release' | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.JENKINS_GITHUB_PAT }} | |
| run: | | |
| set -x | |
| version=$(cat package/version) | |
| cp kframework_amd64_ubuntu_jammy.deb "kframework_${version}_amd64_ubuntu_jammy.deb" | |
| gh release upload --repo runtimeverification/k --clobber "v${version}" "kframework_${version}_amd64_ubuntu_jammy.deb" | |
| - name: 'Download kframework.whl' | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: kframework.whl | |
| - name: 'Build, Test, and Push Dockerhub Image' | |
| shell: bash {0} | |
| env: | |
| DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| DOCKERHUB_REPO: runtimeverificationinc/kframework-k | |
| run: | | |
| set -euxo pipefail | |
| version=$(cat package/version) | |
| version_tag=ubuntu-jammy-${version} | |
| docker login --username rvdockerhub --password "${DOCKERHUB_PASSWORD}" | |
| docker image build . --file package/docker/Dockerfile.ubuntu-jammy --tag "${DOCKERHUB_REPO}:${version_tag}" | |
| docker run --name "k-package-docker-test-jammy-${GITHUB_SHA}" --rm -it --detach "${DOCKERHUB_REPO}:${version_tag}" | |
| docker exec -t "k-package-docker-test-jammy-${GITHUB_SHA}" bash -c 'cd ~ && echo "module TEST imports BOOL endmodule" > test.k' | |
| docker exec -t "k-package-docker-test-jammy-${GITHUB_SHA}" bash -c 'cd ~ && kompile test.k --backend llvm' | |
| docker exec -t "k-package-docker-test-jammy-${GITHUB_SHA}" bash -c 'cd ~ && kompile test.k --backend haskell' | |
| docker exec -t "k-package-docker-test-jammy-${GITHUB_SHA}" bash -c 'cd ~ && pyk kompile test.k --backend llvm' | |
| docker exec -t "k-package-docker-test-jammy-${GITHUB_SHA}" bash -c 'cd ~ && pyk kompile test.k --backend haskell' | |
| docker image push "${DOCKERHUB_REPO}:${version_tag}" | |
| - name: 'Clean up Docker Container' | |
| if: always() | |
| run: | | |
| docker stop --time=0 "k-package-docker-test-jammy-${GITHUB_SHA}" | |
| - name: On Failure, Upload the kore-exec.tar.gz file to the Summary Page | |
| if: failure() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: kore-exec.tar.gz | |
| path: | | |
| **/kore-exec.tar.gz | |
| release: | |
| name: 'Publish Release' | |
| runs-on: [self-hosted, linux, normal] | |
| environment: production | |
| needs: [cachix-release, cachix-release-dependencies, source-tarball, ubuntu-jammy, ubuntu-noble, set-release-id] | |
| steps: | |
| - name: 'Check out code' | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| - name: Set up Java for publishing to GitHub Maven Packages | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '11' | |
| distribution: 'adopt' | |
| overwrite-settings: true | |
| server-id: runtime.verification.snapshots | |
| server-username: MAVEN_USERNAME | |
| server-password: MAVEN_PASSWORD | |
| # Build and Run Tests in Docker | |
| - name: 'Set up Docker' | |
| uses: ./.github/actions/with-docker | |
| with: | |
| tag: k-release-ci-${{ github.sha }} | |
| os: ubuntu | |
| distro: jammy | |
| llvm: 15 | |
| - name: 'Push Maven Packages' | |
| shell: bash {0} | |
| continue-on-error: true | |
| env: | |
| MAVEN_USERNAME: devops@runtimeverification.com | |
| MAVEN_PASSWORD: ${{ secrets.CLOUDREPO_PASSWORD }} | |
| run: | | |
| cat ~/.m2/settings.xml | |
| docker exec -t "k-release-ci-${GITHUB_SHA}" bash -c 'mkdir -p /home/github-runner/.m2' | |
| docker cp ~/.m2/settings.xml "k-release-ci-${GITHUB_SHA}:/tmp/settings.xml" | |
| docker exec -t "k-release-ci-${GITHUB_SHA} bash" -c 'mv /tmp/settings.xml /home/github-runner/.m2/settings.xml' | |
| docker exec -e MAVEN_USERNAME -e MAVEN_PASSWORD -t "k-release-ci-${GITHUB_SHA}" bash -c "mvn --batch-mode deploy" | |
| - name: 'Tear down Docker' | |
| if: always() | |
| run: | | |
| docker stop --time=0 "k-release-ci-${GITHUB_SHA}" | |
| docker container rm --force "k-release-ci-${GITHUB_SHA}" || true | |
| - name: Publish release | |
| uses: actions/github-script@v7 | |
| with: | |
| github-token: ${{secrets.GITHUB_TOKEN}} | |
| script: | | |
| const { owner, repo } = context.repo | |
| await github.rest.repos.updateRelease({ owner, repo, release_id: ${{ needs.set-release-id.outputs.release_id }}, prerelease: false }) | |
| pyk-publish: | |
| name: 'Publish pyk' | |
| runs-on: ubuntu-24.04 | |
| environment: production | |
| permissions: | |
| id-token: write | |
| needs: release | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.10' | |
| - name: 'Get uv release' | |
| id: uv_release | |
| run: | | |
| echo "uv_version=$(cat deps/uv_release)" >> "${GITHUB_OUTPUT}" | |
| - name: 'Install uv' | |
| uses: astral-sh/setup-uv@v6 | |
| with: | |
| version: ${{ steps.uv_release.outputs.uv_version }} | |
| - name: Build pyk | |
| working-directory: pyk | |
| run: | | |
| make build | |
| - name: Publish pyk to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| packages-dir: pyk/dist | |
| user: __token__ | |
| password: ${{ secrets.PYPI_TOKEN }} | |
| - name: Wait for PyPi to publish Pyk | |
| run: | | |
| while true; do | |
| VERSION=$(cat package/version) | |
| if curl --fail --silent --location --head "https://pypi.org/project/kframework/$VERSION"; then | |
| break | |
| fi | |
| sleep 10 | |
| done | |
| notify-dependents: | |
| name: 'Notify Dependents' | |
| runs-on: ubuntu-24.04 | |
| needs: pyk-publish | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: 'Update dependents' | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.JENKINS_GITHUB_PAT }} | |
| run: | | |
| set -x | |
| VERSION=$(cat package/version) | |
| curl --fail \ | |
| -X POST \ | |
| -H "Accept: application/vnd.github+json" \ | |
| -H "Authorization: Bearer ${GITHUB_TOKEN}" \ | |
| -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| https://api.github.com/repos/runtimeverification/devops/dispatches \ | |
| -d '{"event_type":"on-demand-test","client_payload":{"repo":"runtimeverification/k","version":"'"${VERSION}"'"}}' | |
| pyk-build-docs: | |
| name: 'Build Pyk Documentation' | |
| needs: ubuntu-jammy | |
| runs-on: [self-hosted, linux, normal] | |
| timeout-minutes: 30 | |
| steps: | |
| - name: 'Check out code' | |
| uses: actions/checkout@v4 | |
| - name: 'Download K package from the Summary Page' | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: kframework_amd64_ubuntu_jammy.deb | |
| - name: 'Set up Docker' | |
| uses: ./.github/actions/with-k-docker | |
| with: | |
| container-name: k-pyk-docs-${{ github.sha }} | |
| k-deb-path: kframework_amd64_ubuntu_jammy.deb | |
| install-backend-debs: false | |
| - name: 'Build documentation in Docker container' | |
| run: docker exec -u user k-pyk-docs-${{ github.sha }} make docs | |
| - name: 'Copy documentation from Docker container' | |
| run: docker cp k-pyk-docs-${{ github.sha }}:/home/user/docs/build pyk-docs | |
| - name: 'Upload pyk documentation to the Summary Page' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: pyk-docs | |
| path: pyk-docs | |
| if-no-files-found: error | |
| retention-days: 1 | |
| - name: 'Tear down Docker' | |
| if: always() | |
| run: docker stop --time=0 k-pyk-docs-${{ github.sha }} | |
| gh-pages: | |
| name: 'GitHub Pages deployment' | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 30 | |
| needs: [pyk-build-docs, pyk-publish] | |
| steps: | |
| - name: 'Install pandoc/texlive/calibre' | |
| run: | | |
| sudo apt update --yes | |
| sudo apt install --yes wget texlive-xetex libegl1 libopengl0 | |
| sudo wget -nv -O- https://download.calibre-ebook.com/linux-installer.sh | sh /dev/stdin version=6.29.0 | |
| sudo wget https://github.com/jgm/pandoc/releases/download/2.18/pandoc-2.18-1-amd64.deb -O /tmp/pandoc.deb | |
| sudo dpkg -i /tmp/pandoc.deb | |
| - name: 'Checkout code and set up web build' | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| path: gh-pages | |
| token: ${{ secrets.JENKINS_GITHUB_PAT }} | |
| fetch-depth: 0 | |
| - name: 'Checkout PL Tutorial code' | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: runtimeverification/pl-tutorial | |
| path: gh-pages/k-distribution/pl-tutorial | |
| token: ${{ secrets.JENKINS_GITHUB_PAT }} | |
| - working-directory: gh-pages | |
| run: | | |
| git config --global user.name rv-jenkins | |
| git config --global user.email devops@runtimeverification.com | |
| git checkout --orphan gh-pages origin/master | |
| - name: 'Build webpage' | |
| working-directory: gh-pages | |
| run: | | |
| export PATH="$PATH":/opt/calibre | |
| cd web | |
| npm install | |
| npm run build | |
| npm run build-book | |
| npm run build-sitemap | |
| cd - | |
| mv web/public_content ./ | |
| # shellcheck disable=SC2046 | |
| rm -rf $(find . -maxdepth 1 -not -name public_content -a -not -name .git -a -not -path . -a -not -path .. -a -not -name CNAME) | |
| mv public_content/* ./ | |
| rm -rf public_content | |
| touch .nojekyll | |
| - name: 'Download pyk documentation from the Summary Page' | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: pyk-docs | |
| path: gh-pages/pyk | |
| - name: 'Push gh-pages branch' | |
| working-directory: gh-pages | |
| run: | | |
| set -x | |
| git add ./ | |
| git commit -m 'gh-pages: Updated the website' | |
| git push --force origin gh-pages |