nightly-rust-coverage.yml

name: Nightly Rust coverage

on:
  schedule:
    - cron: "17 19 * * *"
  workflow_dispatch:

concurrency:
  group: nightly-rust-coverage
  cancel-in-progress: true

permissions:
  contents: read

env:
  CARGO_INCREMENTAL: "0"
  CARGO_LLVM_COV_VERSION: "0.8.7"
  CARGO_PROFILE_DEV_DEBUG: "0"
  CARGO_PROFILE_TEST_DEBUG: "0"
  CARGO_TERM_COLOR: always

jobs:
  plan:
    name: Plan Rust coverage shards
    runs-on: ubuntu-24.04
    outputs:
      matrix: ${{ steps.matrix.outputs.matrix }}
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          persist-credentials: false
          submodules: false

      - name: Build coverage matrix from the CI shard inventory
        id: matrix
        run: python3 .github/scripts/nightly_rust_coverage.py

  rust:
    name: Rust coverage (${{ matrix.name }})
    needs: plan
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    permissions:
      contents: read
      id-token: write
    strategy:
      fail-fast: false
      max-parallel: 4
      matrix: ${{ fromJSON(needs.plan.outputs.matrix) }}
    env:
      CARGO_TARGET_DIR: target/nightly-rust-coverage
      COVERAGE_ALL_FEATURES: ${{ matrix.all_features }}
      COVERAGE_FEATURES: ${{ matrix.features }}
      COVERAGE_PACKAGES: ${{ matrix.packages }}
    # The platform shard's --all-features build enables the dispatch and
    # activation PostgreSQL tests, which fail rather than skip without their
    # disposable database. The other shards start the service and leave it
    # unused, so this definition stays identical to platform-coverage in
    # ci.yml, which .github/scripts/test_ci_changes.py holds.
    services:
      postgres:
        image: docker.io/library/postgres:17.11@sha256:67f41722b7a8cbdb868a44a4995c846eddfdc2973bccb291ce937dce88ad5675
        env:
          POSTGRES_DB: dispatch
          POSTGRES_USER: dispatch
          POSTGRES_PASSWORD: dispatch_test
        options: >-
          --health-cmd "pg_isready -U dispatch -d dispatch"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432/tcp
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          fetch-depth: 0
          persist-credentials: false
          submodules: false

      - name: Cache Cargo registry
        uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2
        with:
          shared-key: workspace-registry
          cache-targets: false
          save-if: false

      - name: Install pinned coverage tool
        uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31
        with:
          tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }}

      - name: Run shard with coverage
        shell: bash
        env:
          DISPATCH_TEST_DATABASE_URL: postgresql://dispatch:dispatch_test@localhost:${{ job.services.postgres.ports['5432'] }}/dispatch
          ACTIVATION_TEST_DATABASE_URL: postgresql://dispatch:dispatch_test@localhost:${{ job.services.postgres.ports['5432'] }}/dispatch
        run: |
          set -euo pipefail

          read -r -a packages <<< "${COVERAGE_PACKAGES}"
          package_args=()
          for package in "${packages[@]}"; do
            package_args+=(-p "${package}")
          done

          feature_args=()
          if [[ "${COVERAGE_ALL_FEATURES}" == "true" ]]; then
            feature_args+=(--all-features)
          elif [[ -n "${COVERAGE_FEATURES}" ]]; then
            feature_args+=(--features "${COVERAGE_FEATURES//[[:space:]]/}")
          fi

          cargo llvm-cov clean --workspace
          cargo llvm-cov --locked \
            "${package_args[@]}" \
            "${feature_args[@]}" \
            --no-report

      - name: Export shard coverage
        shell: bash
        run: |
          set -euo pipefail

          read -r -a packages <<< "${COVERAGE_PACKAGES}"
          package_args=()
          for package in "${packages[@]}"; do
            package_args+=(-p "${package}")
          done

          coverage_dir="${CARGO_TARGET_DIR}/coverage"
          mkdir -p "${coverage_dir}"
          cargo llvm-cov report --locked "${package_args[@]}"
          cargo llvm-cov report --locked \
            "${package_args[@]}" \
            --lcov \
            --output-path "${coverage_dir}/${{ matrix.name }}.lcov"

      - name: Upload shard coverage artifact
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: nightly-rust-${{ matrix.name }}-coverage
          path: target/nightly-rust-coverage/coverage/${{ matrix.name }}.lcov
          if-no-files-found: error
          retention-days: 7

      - name: Upload shard coverage to Codecov
        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
        with:
          disable_search: true
          fail_ci_if_error: true
          files: target/nightly-rust-coverage/coverage/${{ matrix.name }}.lcov
          flags: ${{ matrix.flag }}
          name: nightly-${{ matrix.name }}
          plugins: noop
          use_oidc: true
          version: v11.3.1

      - name: Report disk usage
        if: always()
        run: |
          df -h /
          du -sh "${CARGO_TARGET_DIR}" 2>/dev/null || true