Commit Graph

704 Commits

Author SHA1 Message Date
Fabio Baltieri
f19e7fdaf9 github: hello_world_multiplatform: switch to python 3.12
Switch the workflow to setup python 3.12, not sure why this was left
out.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-06-13 11:12:32 +02:00
Alberto Escolar Piedras
3b1cf79f62 ci: bsim tests: Trigger on any change on tests/bluetooth
As time passes we are adding more babblesim tests which depend on code/
tests from tests/bluetooth just like we have many based on samples from
samples/bluetooth.
Let's also trigger the Babblesim CI job when anything changes in
tests/bluetooth, instead of trying to pinpoint the specific folders we
use, as otherwise every now and then we have coverage holes and issues
are introduced in main.

Signed-off-by: Alberto Escolar Piedras <alberto.escolar.piedras@nordicsemi.no>
2025-06-11 08:20:19 +02:00
dependabot[bot]
3172f85b08 ci: github: bump the actions-deps group across 1 directory with 8 updates
Bumps the actions-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `9` | `10` |
| [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.19.0` | `2.20.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.1.0` | `4.2.1` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.4.2` | `5.4.3` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.17` | `3.28.18` |
| [zephyrproject-rtos/action-zephyr-setup](https://github.com/zephyrproject-rtos/action-zephyr-setup) | `1.0.6` | `1.0.7` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `3.0.24` | `3.0.25` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.4.2` |



Updates `dawidd6/action-download-artifact` from 9 to 10
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](07ab29fd4a...4c1e823582)

Updates `EnricoMi/publish-unit-test-result-action` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](afb2984f4d...3a74b29574)

Updates `aws-actions/configure-aws-credentials` from 4.1.0 to 4.2.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](ececac1a45...b475783126)

Updates `codecov/codecov-action` from 5.4.2 to 5.4.3
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](ad3126e916...18283e04ce)

Updates `github/codeql-action` from 3.28.17 to 3.28.18
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](60168efe1c...ff0a06e83c)

Updates `zephyrproject-rtos/action-zephyr-setup` from 1.0.6 to 1.0.7
- [Commits](f7b70269a8...b2453c7296)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 3.0.24 to 3.0.25
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](2d6823da40...fc87bb5b5a)

Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](f49aabe0b5...05b42c6244)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '10'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: codecov/codecov-action
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: zephyrproject-rtos/action-zephyr-setup
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 3.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-10 08:51:26 +02:00
David Brown
c05bcee41d Revert "ci: exclude rust temporarily [REVERT ME]"
This reverts commit 1207880355.

Re-enable Rust CI after bringing in fixes.

Signed-off-by: David Brown <david.brown@linaro.org>
2025-06-04 15:49:27 -04:00
Anas Nashif
1207880355 ci: exclude rust temporarily [REVERT ME]
Compat issues with optional module, exclude for now until issues are
fixed.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-06-04 08:38:44 -04:00
Fabio Baltieri
124af38a1d github: hello_world_multiplatform: set the toolchain list
The SDK is growing bigger and bigger, set the toolchain list so we only
fetch the ones needed by the tests we run, save some disk space,
apparently this workflow is getting close.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-06-02 20:23:22 +02:00
Anas Nashif
450345aea3 ci: move weekly build back to sunday night
Now that we have faster runners, we can move this back to the night and
be productive during the day :)

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-05-31 11:31:21 -04:00
Carles Cufi
c2c1495b4c actions: manifest: Handle binary blobs
Update to a revision of the manifest action that includes:
https://github.com/zephyrproject-rtos/action-manifest/pull/21

Also add the corresponding binary blobs labels parameters to the
workflow.

Signed-off-by: Carles Cufi <carles.cufi@nordicsemi.no>
2025-05-26 19:41:09 -04:00
Anas Nashif
732c80f3e9 ci: use new docker image v0.28.0.20250523
New docker image with SDK 0.17.1 and update docker base is (ubuntu
24.04).

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-05-23 17:41:40 -04:00
Fabio Baltieri
649eb6280d ci: pr_metadata_check: convert DNM logic to python
GitHub seems to have issue with workflow state caching that causes the
DNM step to not work properly in few cases and not detecting changes in
the DNM tag, forcing people to mess with tags or close/opening PRs,
which in turns restarts all workflows.

Convert the script to Python so that the tag data is guaranteed to be
fresh.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-05-20 10:17:19 +02:00
Lukasz Mrugala
d2ebe9c6de ci: Expand BBox tests with Twister runs
Blackbox tests now shall include smoke tests,
that is Twister calls in the environment.

Additionally, those smoke tests will run
on multiple platforms.

Signed-off-by: Lukasz Mrugala <lukaszx.mrugala@intel.com>
2025-05-16 12:36:35 +02:00
Fabio Baltieri
ea16d0e25d Revert "ci: workflows: check for manifest dnm in the manifest workflow"
This reverts commit 370e0882cb, the
condition is evaluated at workout creation time so this does not work at
all, plus some conditions don't have a label removal logic so pairing
this with the manifest run does not work anyway.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-05-08 19:46:03 +02:00
dependabot[bot]
f59a054ad7 ci: github: bump the actions-deps group across 1 directory with 8 updates
Bumps the actions-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.4.0` | `5.6.0` |
| [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.18.0` | `2.19.0` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `46.0.3` | `46.0.5` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.2.1` | `4.3.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.4.0` | `5.4.2` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.13` | `3.28.17` |
| [carpentries/actions](https://github.com/carpentries/actions) | `0.14.0` | `0.15.0` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `3.0.23` | `3.0.24` |



Updates `actions/setup-python` from 5.4.0 to 5.6.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5.4.0...a26af69be951a213d495a4c3e4e4022e16d87065)

Updates `EnricoMi/publish-unit-test-result-action` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](170bf24d20...afb2984f4d)

Updates `tj-actions/changed-files` from 46.0.3 to 46.0.5
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](823fcebdb3...ed68ef82c0)

Updates `actions/download-artifact` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](95815c38cf...d3f86a106a)

Updates `codecov/codecov-action` from 5.4.0 to 5.4.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](0565863a31...ad3126e916)

Updates `github/codeql-action` from 3.28.13 to 3.28.17
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1b549b9259...60168efe1c)

Updates `carpentries/actions` from 0.14.0 to 0.15.0
- [Release notes](https://github.com/carpentries/actions/releases)
- [Commits](e27aa6c531...2e20fd5ee5)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 3.0.23 to 3.0.24
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](4830be28ce...2d6823da40)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: tj-actions/changed-files
  dependency-version: 46.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: codecov/codecov-action
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 3.28.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: carpentries/actions
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 3.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-07 21:21:05 +02:00
Fabio Baltieri
370e0882cb ci: workflows: check for manifest dnm in the manifest workflow
The current CI setup sets the manifest DNM label in a workflow and
checks it in a different workflow. The one performing the check is
configured to rerun on label changes but it's been reported few times
that the rerun logic does not seem to always run effectively and there's
been cases where the manifest has been fixed but the label has not been
removed by the automation, resulting in a stale PR.

Since the manifest has its own dedicated label, fix this race condition
by checking for that label specifically in the manifest workflow rather
than in a separate one, this means that the check is always performed
after the script that sets the label.

It also means that on manifest changes the manifest step itself will
fail rather than the PR metadata check one.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-04-29 19:06:55 +02:00
Alberto Escolar Piedras
09137d16ac ci: bsim-tests: Add missing path to trigger BT tests
Also trigger the bluetooth tests if tests/bluetooth/common/testlib/
is changed.

Signed-off-by: Alberto Escolar Piedras <alberto.escolar.piedras@nordicsemi.no>
2025-04-21 12:42:43 +02:00
Maciej Perkowski
2f9faa0a93 ci: workflows: Align used host
Ubuntu-24.04 is the version to be used as default in all
gh workflows

Signed-off-by: Maciej Perkowski <maciej.perkowski@nordicsemi.no>
2025-04-17 17:24:39 +02:00
Okan Sahin
bacb99da6d ci: doc: github: Require update for python version
Require latest python version for Setup Zephyr Project
step.

Signed-off-by: Okan Sahin <Okan.Sahin@analog.com>
2025-04-14 23:07:04 +02:00
Anas Nashif
130f2ce641 ci: twister: set number of jobs to use
We want to control the number of jobs we run in parallel. Detection on
some runners can be wrong.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-04-05 22:30:26 +09:00
Lukasz Mrugala
cf87f97824 ci: Run all Blackbox tests
We've previously restricted Blackbox test
runs to just one test file - test_output.py.
That was a mistake.

This commit makes the relevant workflow run
all of the blackbox test files again.

Signed-off-by: Lukasz Mrugala <lukaszx.mrugala@intel.com>
2025-04-03 11:06:44 +02:00
Anas Nashif
f61c94bb1b ci: codecov: remove bsim step from workflow
This is not needed for this specific workflow. We do not do anything
with bsim here.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-04-01 16:26:22 +02:00
Anas Nashif
4d2ddf06c1 ci: codecov: install pinned python environment
Need gcovr for coverage generation.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-04-01 16:26:22 +02:00
Benjamin Cabé
6f4bb7ef62 ci: github: bump the actions-deps group across 1 directory with 8 updates
Bumps the actions-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.7` | `4.2.2` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.4.0` | `5.5.0` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `8` | `9` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `46.0.1` | `46.0.3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.5` | `4.6.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.9` | `4.2.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.11` | `3.28.13` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `3.0.22` | `3.0.23` |

Updates `actions/checkout` from 4.1.7 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.7...11bd71901bbe5b1630ceea73d27597364c9af683)

Updates `actions/setup-python` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](42375524e2...8d9ed9ac5c)

Updates `dawidd6/action-download-artifact` from 8 to 9
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](20319c5641...07ab29fd4a)

Updates `tj-actions/changed-files` from 46.0.1 to 46.0.3
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](2f7c5bfce2...823fcebdb3)

Updates `actions/upload-artifact` from 4.3.5 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.3.5...ea165f8d65b6e75b540449e92b4886f43607fa02)

Updates `actions/download-artifact` from 4.1.9 to 4.2.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](cc20338598...95815c38cf)

Updates `github/codeql-action` from 3.28.11 to 3.28.13
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3.28.11...1b549b9259bda1cb5ddde3b41741a82a2d15a841)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 3.0.22
to 3.0.23
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](25ed13d062...4830be28ce)

---

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-31 20:16:41 -04:00
Benjamin Cabé
454a1c8844 ci: bsim-tests: Exclude .rst files from path patterns
Updated the bsim-tests workflow to exclude all .rst files.

As per GitHub docs:

The order that you define paths patterns matters:

A matching negative pattern (prefixed with !) after a positive match
will exclude the path.
A matching positive pattern after a negative match will include the path
again.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-31 22:00:55 +02:00
Benjamin Cabé
8e90ba4af9 ci: github: bump action-first-interaction to v1.1.1+zephyr.6
No functional change. This is only so as to adopt a versioning scheme
where the Zephyr version of the action is considered more recent than
the upstream version (here, v1.1.1) by means of using dots instead of
dashes.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-31 22:00:46 +02:00
Pieter De Gendt
6f6a687934 ci: compliance: Exclude the Identity check for dependabot
The identity check for dependabot will always fail, skip it for PRs
created by dependabot.

Signed-off-by: Pieter De Gendt <pieter.degendt@basalte.be>
2025-03-31 14:32:25 +02:00
Anas Nashif
06f42f6bfa twister: Move prep stage to a github runner
Speed things up by using GH runners, we do not need the power of our own
runners to create the test plan. This also simplifies the workflow
considerably.

PRs now will get queued immediately, ie. no need to wait for a Zephyr
hosted runner to create the plan and then wait again for another round
to get more runners for execution.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-31 11:29:31 +02:00
Anas Nashif
2faf62c35c ci: overhaul and pin dependencies on twister_tests_blackbox
Pin dependencies on the workflow and move it from using docker to the
zephyr setup action.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-29 07:44:46 -04:00
Anas Nashif
11ece85d1b ci: workflows: pin python dependencies
Pin python dependencies to hashes and cleanup/unify python setup steps in
various workflows.

We now have one dependency file containing all requirements for github
actions that is managed centrally with hashes. No direct pip installs
are needed in workflow files and everything shall go via the
requirements file.

Pinning to specific version and hashes helps with preventing supply
chain attacks.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-29 07:44:46 -04:00
Anas Nashif
7f62d193fc ci: use gh managed tokens in workflows
Do not use custom tokens, rely on GH provided and managed tokens.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-26 00:46:32 +01:00
Anas Nashif
f812de81e6 ci: workflows: rename do_not_merge workflow
Add more functionality to the workflow, it is not only about not-merging
anymore.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-26 00:46:20 +01:00
Anas Nashif
7b1e610cc7 ci: move PR body check to a different workflow
Move PR body check to a workflow that monitors editing of PRs.
Avoids rerunnin compliance check and other heavy weights workflows on
just an edit of the PR body.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-26 00:46:20 +01:00
Anas Nashif
66fa04962f ci: twister: convert to pull_request
Convert twister workflow to use pull_request.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-26 00:46:20 +01:00
Benjamin Cabé
9b60782ac8 ci: github: Add workflow to ensure all GH actions are pinned
This commit introduces a new workflow that checks for SHA-pinned GitHub
Actions on pull requests.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-25 22:16:32 +01:00
Anas Nashif
be18415fc3 ci: codeql: enable on PRs
Enable CodeQL on PRs to catch issues before they are merged.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-24 12:17:19 +01:00
Anas Nashif
961593d152 Revert "ci: twister: move weekly to sunday [REVERT ME]"
This reverts commit c99325a8a5.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-23 10:24:07 -04:00
Anas Nashif
c99325a8a5 ci: twister: move weekly to sunday [REVERT ME]
Previous job failed, let's give it another try.

Should be reverted once workflow has started.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-23 10:15:49 -04:00
Anas Nashif
3b6fe8677b ci: Add codeql workflow for python, actions, js
Integrate codeql code scanning from github to do basic static code
analysis on python, actions, js.

c/cpp to be added later.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-21 14:39:50 -04:00
Benjamin Cabé
911d803291 doc: ci: github: Require hashes during pip install
require hashes in doc ci workflow

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-21 14:39:29 -04:00
Benjamin Cabé
d794fe42f9 ci: doc: github: drop unused env variable
We get West from the action-zephyr-setup action

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-21 14:39:29 -04:00
Benjamin Cabé
df2bdb9a6f ci: doc: github: Build PDF from vanilla ubuntu
Moved away from a texlive docker container to a vanilla ubuntu runner
so that we can better track the actual dependencies a user needs to
build the PDF rather than relying on the gigabytes of random stuff
that the texlive docker container pulls in.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-21 14:39:29 -04:00
Benjamin Cabé
d161e29a12 ci: doc: update documentation dependencies to include coverxygen
Removed coverxygen installation from the CI workflow and added it to the
requirements.txt/.in files and make it easier for anyone to potentially
use it locally.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-21 14:39:29 -04:00
Benjamin Cabé
1185942575 ci: doc: github: check Doxygen MD5 checksum
Add a check that we're installing a legit Doxygen binary

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-21 14:39:29 -04:00
Benjamin Cabé
c9a149349a ci: Update GitHub Actions workflows to follow principle of least privilege
Default to `permissions: read-all` in all workflows and then add
additional permissions as needed at the job level

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-19 18:53:52 -04:00
Benjamin Cabé
f254b5775a ci: doc: do not prevent running doc CI in forks
Building docs just works on vanilla GH runner so it can be convenient
to not prevent the workflow to run on forks.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-19 18:50:30 -04:00
Benjamin Cabé
e82ab80574 doc: do not trigger doc-build on PR touching tests/
There is no need to trigger a doc build when tests are being
changed.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-19 18:50:30 -04:00
Benjamin Cabé
8ce24da0cf ci: doc: bump and pin tj-actions/changed-files action
Ensure we run the latest version of this action (and align with what is
already used for bsim-tests)

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-19 18:50:30 -04:00
Benjamin Cabé
2eec91d527 ci: doc: pin actions/checkout GH action
Following the revert in the previous commit, pin the actions/checkout
action to align with what is now the accepted practice in the project.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-19 18:50:30 -04:00
Benjamin Cabé
1baaaafabd Revert "ci: doc-build: do not check for changed files"
This reverts commit b80526658c
and restores the original use of looking for changed files
before triggering a documentation build.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-03-19 18:50:30 -04:00
Anas Nashif
d13ccfd74c ci: clang: add workflow on push
Change workflow to work on push events.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-19 08:55:43 -04:00
Anas Nashif
ed222a9f1f Revert "ci: drop clang workflow, use main twister flow instead"
This reverts commit ecaa30329e.

Restore as a push workflow.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-03-19 08:55:43 -04:00