config.yml

version: 2.1

# Our CircleCI dependencies
orbs:
  rust: circleci/rust@1.6.1
  secops: apollo/circleci-secops-orb@2.0.7

release: &release
  filters:
    branches:
      ignore: /.*/
    tags: # To trigger a release, push a tag with the format `package-name@vversion`. Like `apollo-composition@v0.1.0`
      only: /(apollo-federation-types@v.*)|(apollo-composition@v.*)/

parameters:
  # we can't easily pin on osx
  linux_cmake_version:
    type: string
    default: '3.27.3'

# The main workflows executed for federation-rs
workflows:
  lint:
    jobs:
      - lint
  test:
    jobs:
      - test:
          name: Run cargo tests on << matrix.platform >>
          matrix:
            parameters:
              platform: [ amd_ubuntu, arm_ubuntu, arm_macos ]

  release:
    jobs:
      - test:
          name: Run cargo tests on << matrix.platform >>
          matrix:
            parameters:
              platform: [ amd_ubuntu, arm_ubuntu, arm_macos ]
          <<: *release

      - publish_release:
          name: Publish to crates.io
          requires:
            - "Run cargo tests on amd_ubuntu"
            - "Run cargo tests on arm_ubuntu"
            - "Run cargo tests on arm_macos"
          <<: *release

  security-scans:
    jobs:
      - secops/gitleaks:
          context:
            - platform-docker-ro
            - github-orb
            - secops-oidc
          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>
          git-revision: << pipeline.git.revision >>

      - secops/semgrep:
          context:
            - secops-oidc
            - github-orb
          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>
jobs:
  lint:
    executor: amd_ubuntu
    steps:
      - checkout
      - install_system_deps:
          platform: amd_ubuntu
      - run:
          name: Check Rust formatting
          command: cargo fmt --all -- --check
      - run:
          name: Check Rust lints
          command: cargo clippy --all-features -- -D warnings

  test:
    parameters:
      platform:
        type: executor
    executor: << parameters.platform >>
    steps:
      - checkout
      - install_system_deps:
          platform: << parameters.platform >>
      - run:
          name: Run cargo tests
          command: cargo test

  publish_release:
    executor: minimal_linux
    steps:
      - checkout
      - rust/install
      - run:
          name: Publish to crates.io
          command: |
            # The tag looks like `<package-name>@v<version>`, but cargo wants `<package-name>@<version>`
            CARGO_VERSION=$(echo $CIRCLE_TAG | sed 's/@v/@/')
            cargo publish -p $CARGO_VERSION

# The machines we use to run our workflows on
executors:
  arm_macos: &arm_macos_executor
    macos:
      xcode: "15.4.0"
    resource_class: macos.m1.medium.gen1
    environment:
      RUSTUP_TARGET: "aarch64-apple-darwin"
      APPLE_TEAM_ID: "YQK948L752"
      APPLE_USERNAME: "opensource@apollographql.com"
      MACOS_PRIMARY_BUNDLE_ID: com.apollographql.supergraph

  amd_ubuntu:
    machine:
      image: ubuntu-2004:current
    resource_class: xlarge
    environment:
      RUSTUP_TARGET: "x86_64-unknown-linux-gnu"
  arm_ubuntu:
    machine:
      image: ubuntu-2004:current
    resource_class: arm.large
    environment:
      RUSTUP_TARGET: "aarch64-unknown-linux-gnu"

  minimal_linux:
    docker:
      - image: cimg/base:stable
    resource_class: small
    environment:
      RUSTUP_TARGET: "x86_64-unknown-linux-gnu"

# reusable command snippets can be referred to in any `steps` object
commands:
  install_system_deps:
    parameters:
      platform:
        type: executor
    steps:
      - when:
          condition:
            equal: [ *arm_macos_executor, << parameters.platform >> ]
          steps:
            - run:
                name: Install CMake
                command: brew install cmake

      - install_rust_toolchain:
          platform: << parameters.platform >>

  install_rust_toolchain:
    parameters:
      platform:
        type: executor
    steps:
      - rust/install
      - run:
          name: Adds rust target
          command: rustup target add $RUSTUP_TARGET
      - run:
          name: Set default rustc version
          command: |
            rustup install stable
            rustup default stable