scripts: nrfutil device 2.20.0 and pip requirements upgrades #128076
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Compliance | |
| on: pull_request | |
| permissions: | |
| contents: read | |
| jobs: | |
| compliance_job: | |
| runs-on: ubuntu-24.04 | |
| name: Run compliance checks on patch series (PR) | |
| steps: | |
| - name: Update PATH for west | |
| run: | | |
| echo "$HOME/.local/bin" >> $GITHUB_PATH | |
| - name: Checkout sources | |
| uses: nrfconnect/action-checkout-west-update@main | |
| with: | |
| git-fetch-depth: 0 | |
| git-ref: ${{ github.event.pull_request.head.sha }} | |
| rebase: true | |
| - name: cache-pip | |
| uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4 | |
| with: | |
| path: ~/.cache/pip | |
| key: ${{ runner.os }}-doc-pip | |
| - name: Install python dependencies | |
| working-directory: ncs/nrf | |
| run: | | |
| pip3 install -U pip | |
| pip3 install -U wheel | |
| grep -E "^setuptools" scripts/requirements-fixed.txt | cut -d ' ' -f '1' | xargs pip3 install -U | |
| grep -E "^python-magic=|^junitparser|^lxml|^gitlint|^pylint|^pykwalify|^yamllint|^unidiff|^vermin|^python-dotenv|^tabulate|^ruff|^reuse" scripts/requirements-fixed.txt | cut -d ' ' -f '1' | xargs pip3 install -U | |
| grep -E "^west" scripts/requirements-fixed.txt | cut -d ' ' -f '1' | xargs pip3 install -U | |
| pip3 show -f west | |
| - name: Setup Node.js | |
| uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 | |
| with: | |
| node-version: "lts/*" | |
| cache: npm | |
| check-latest: true | |
| cache-dependency-path: ./ncs/zephyr/scripts/ci/package-lock.json | |
| - name: Install Node dependencies | |
| run: npm --prefix ./ncs/zephyr/scripts/ci ci | |
| - name: Run merge commits test | |
| env: | |
| BASE_REF: ${{ github.base_ref }} | |
| working-directory: ncs/nrf | |
| run: | | |
| # Ensure there's no merge commits in the PR | |
| [[ "$(git rev-list --merges --count origin/${BASE_REF}..)" == "0" ]] || \ | |
| (echo "::error ::Merge commits not allowed, rebase instead";false) | |
| - name: Run CODEOWNERS test | |
| id: codeowners | |
| env: | |
| BASE_REF: ${{ github.base_ref }} | |
| working-directory: ncs/nrf | |
| if: contains(github.event.pull_request.user.login, 'dependabot[bot]') != true | |
| run: | | |
| ./scripts/ci/codeowners.py -c origin/${BASE_REF}.. | |
| - name: Run Compliance Tests | |
| continue-on-error: true | |
| id: compliance | |
| env: | |
| BASE_REF: ${{ github.base_ref }} | |
| working-directory: ncs/nrf | |
| if: contains(github.event.pull_request.user.login, 'dependabot[bot]') != true | |
| run: | | |
| export ZEPHYR_BASE="$(dirname "$(pwd)")/zephyr" | |
| # debug | |
| ls -la | |
| git log --pretty=oneline | head -n 10 | |
| $ZEPHYR_BASE/scripts/ci/check_compliance.py --annotate \ | |
| -e KconfigBasicNoModules -e ClangFormat -e SysbuildKconfigBasicNoModules \ | |
| -e LicenseAndCopyrightCheck -c origin/${BASE_REF}.. | |
| - name: upload-results | |
| uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4 | |
| continue-on-error: true | |
| if: contains(github.event.pull_request.user.login, 'dependabot[bot]') != true | |
| with: | |
| name: compliance.xml | |
| path: ncs/nrf/compliance.xml | |
| overwrite: true | |
| - name: check-warns | |
| working-directory: ncs/nrf | |
| if: contains(github.event.pull_request.user.login, 'dependabot[bot]') != true | |
| run: | | |
| export ZEPHYR_BASE="$(dirname "$(pwd)")/zephyr" | |
| if [[ ! -s "compliance.xml" ]]; then | |
| exit 1; | |
| fi | |
| files=($($ZEPHYR_BASE/scripts/ci/check_compliance.py -l)) | |
| for file in "${files[@]}"; do | |
| f="${file}.txt" | |
| if [[ -s $f ]]; then | |
| errors=$(cat $f) | |
| errors="${errors//'%'/'%25'}" | |
| errors="${errors//$'\n'/'%0A'}" | |
| errors="${errors//$'\r'/'%0D'}" | |
| echo "::error file=${f}::$errors" | |
| exit=1 | |
| fi | |
| done | |
| if [ "${exit}" == "1" ]; then | |
| exit 1; | |
| fi | |
| - name: Check added or updated links | |
| working-directory: ncs/nrf | |
| run: | | |
| RE='.. _`(.*)`: (.*)' | |
| LINKS=$(git diff --unified=0 "${{ github.event.pull_request.base.sha }}..HEAD" -- "doc/nrf/links.txt" | \ | |
| grep "^+" | grep -Ev "^\+\+\+" || true) | |
| while IFS= read -r link; do | |
| link="${link#+}" | |
| if [[ $link =~ $RE ]]; then | |
| NAME=${BASH_REMATCH[1]} | |
| URL=${BASH_REMATCH[2]} | |
| echo -n "Checking URL for '$NAME' ($URL)... " | |
| if [[ "$URL" == *"nordicsemi.com"* ]]; then | |
| # Nordic hosts often reject HEAD from CI; /bundle/ URLs redirect to /r/ | |
| status=$(curl --write-out "%{http_code}" --output /dev/null --silent --location \ | |
| --user-agent "NCS-compliance-link-check" "$URL" || true) | |
| else | |
| status=$(curl --write-out "%{http_code}" --output /dev/null --silent --location --head \ | |
| "$URL" || true) | |
| fi | |
| if [[ "$status" -ne 200 ]]; then | |
| echo "FAIL (HTTP code: ${status})" | |
| exit 1 | |
| else | |
| echo "OK" | |
| fi | |
| fi | |
| done <<< "$LINKS" |