Repository navigation

CI for refs/pull/36/merge #195

	name: CI
	run-name: CI for ${{ github.ref }}

	# Build + test on PR and on push to main. No publishing.

	on:
	pull_request:
	push:
	branches:
	- main
	workflow_dispatch:

	# Cancel in-flight runs on the same ref when a newer one starts.
	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	binaries:
	uses: ./.github/workflows/binaries.yaml

	build-and-test:
	needs: binaries
	uses: ./.github/workflows/build-and-test.yaml

	# Also build the qemu-arch images (s390x / ppc64le) so image breakage
	# surfaces at PR time, not at release. Native arches are excluded --
	# build-and-test already builds those.
	build-oci:
	needs: binaries
	uses: ./.github/workflows/build-oci.yaml
	with:
	matrix: >-
	[{"runner": "ubuntu-24.04", "arch": "s390x", "qemu": true},
	{"runner": "ubuntu-24.04", "arch": "ppc64le", "qemu": true}]

	# Guard: inlined/*.yaml is generated from templates/ + scripts/ and also
	# committed (repo-tree consumers grab it directly). Regenerate and fail on
	# drift so a template or script edit can't land without its matching
	# inlined refresh. Ubuntu runners ship ruby, so no extra setup.
	check-inlined:
	runs-on: ubuntu-24.04
	timeout-minutes: 5
	steps:
	- name: Checkout repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- name: Assert committed inlined yamls match templates + scripts
	run: \|
	make inline
	if ! git diff --exit-code inlined/; then
	echo "::error::inlined/*.yaml is stale -- run 'make inline' and commit the result"
	exit 1
	fi