testing.yaml

---
# SPDX-License-Identifier: Apache-2.0
# SPDX-FileCopyrightText: 2026 The Linux Foundation

# Exercises the reusable workflows in this repository against three of the
# largest downstream Python consumers, in parallel, to prove the reusable
# workflows function end-to-end:
#   * dependamerge  (standard single-arch) -> build-test.yaml
#   * lftools-uv    (standard single-arch) -> build-test.yaml
#   * python-nss-ng (multi-arch C build)   -> build-test-multiarch.yaml
#
# The reusable workflows are referenced by LOCAL path so this always
# validates the current branch's workflows. The standard targets are
# checked out at their default/HEAD branch; the python-nss-ng leg is
# pinned to the v1.2.0 release commit (see ref: below).
name: 'Testing 🧪'

# yamllint disable-line rule:truthy
on:
  workflow_dispatch:
  pull_request:
    branches: ['main']

concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true

permissions: {}

jobs:
  # Standard single-arch consumers, fanned out in parallel via a matrix.
  standard:
    name: 'Standard'
    strategy:
      fail-fast: false
      matrix:
        repository:
          - lfreleng-actions/dependamerge
          - lfreleng-actions/lftools-uv
    permissions:
      contents: read
      pull-requests: read  # Reusable workflow reads PR metadata
    uses: ./.github/workflows/build-test.yaml
    with:
      repository: ${{ matrix.repository }}

  # Multi-arch C consumer (runs in parallel with the standard matrix).
  #
  # python-nss-ng provides the committed native setup script
  # (.github/scripts/setup-nss.sh) consumed via the setup_script input.
  # Pinned to the v1.2.0 release commit of the upstream repository.
  multiarch:
    name: 'Multi-Arch'
    permissions:
      contents: read
      pull-requests: read  # Reusable workflow reads PR metadata
    uses: ./.github/workflows/build-test-multiarch.yaml
    with:
      repository: lfreleng-actions/python-nss-ng
      ref: e6e197516189faac861f191a6a48f0e1d993ef3d  # v1.2.0
      make: true
      make_args: 'deps-nss env-github-actions'
      setup_script: '.github/scripts/setup-nss.sh'