# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
#
# SPDX-License-Identifier: curl

name: macOS

on:
  push:
    branches:
      - master
      - '*/ci'
    paths-ignore:
      - '**/*.md'
      - '.azure-pipelines.yml'
      - '.circleci/**'
      - '.cirrus.yml'
      - 'appveyor.*'
      - 'packages/**'
      - 'plan9/**'
      - 'projects/**'
      - 'winbuild/**'
  pull_request:
    branches:
      - master
    paths-ignore:
      - '**/*.md'
      - '.azure-pipelines.yml'
      - '.circleci/**'
      - '.cirrus.yml'
      - 'appveyor.*'
      - 'packages/**'
      - 'plan9/**'
      - 'projects/**'
      - 'winbuild/**'

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: true

permissions: {}

env:
  DEVELOPER_DIR: /Applications/Xcode.app/Contents/Developer
  MAKEFLAGS: -j 4

jobs:
  autotools:
    name: ${{ matrix.build.name }}
    runs-on: 'macos-latest'
    timeout-minutes: 90
    strategy:
      fail-fast: false
      matrix:
        build:
          - name: normal
            install: nghttp2
            configure: --without-ssl --enable-websockets
            macosx-version-min: 10.9
          - name: debug
            install: nghttp2
            configure: --enable-debug --without-ssl --enable-websockets
            macosx-version-min: 10.9
          - name: libssh2
            install: nghttp2 libssh2
            configure: --enable-debug --with-libssh2=$(brew --prefix)/opt/libssh2 --without-ssl --enable-websockets
            macosx-version-min: 10.9
          - name: libssh-c-ares
            install: openssl nghttp2 libssh
            configure: --enable-debug --with-libssh --with-openssl=$(brew --prefix)/opt/openssl --enable-ares --enable-websockets
            macosx-version-min: 10.9
          - name: libssh
            install: openssl nghttp2 libssh
            configure: --enable-debug --with-libssh --with-openssl=$(brew --prefix)/opt/openssl --enable-websockets
            macosx-version-min: 10.9
          - name: c-ares
            install: nghttp2
            configure: --enable-debug --enable-ares --without-ssl --enable-websockets
            macosx-version-min: 10.9
          - name: HTTP only
            install: nghttp2
            configure: |
              --enable-debug \
              --enable-maintainer-mode \
              --disable-alt-svc \
              --disable-dict \
              --disable-file \
              --disable-ftp \
              --disable-gopher \
              --disable-imap \
              --disable-ldap \
              --disable-pop3 \
              --disable-rtmp \
              --disable-rtsp \
              --disable-scp \
              --disable-sftp \
              --disable-shared \
              --disable-smb \
              --disable-smtp \
              --disable-telnet \
              --disable-tftp \
              --disable-unix-sockets \
              --without-brotli \
              --without-gssapi \
              --without-libidn2 \
              --without-libpsl \
              --without-librtmp \
              --without-libssh2 \
              --without-nghttp2 \
              --without-ntlm-auth \
              --without-ssl \
              --without-zlib \
              --without-zstd

            macosx-version-min: 10.15
          - name: SecureTransport http2
            install: nghttp2
            configure: --enable-debug --with-secure-transport --enable-websockets
            macosx-version-min: 10.8
          # fails now with linker error on missing symbols, macos no longer old enough?
          # - name: gcc SecureTransport
          #   configure: CC=gcc-12 --enable-debug --with-secure-transport --enable-websockets --without-libpsl
          #   macosx-version-min: 10.8
          - name: OpenSSL http2
            install: nghttp2 openssl
            configure: --enable-debug --with-openssl=$(brew --prefix)/opt/openssl --enable-websockets
            macosx-version-min: 10.9
          - name: LibreSSL http2
            install: nghttp2 libressl
            configure: --enable-debug --with-openssl=$(brew --prefix)/opt/libressl --enable-websockets
            macosx-version-min: 10.9
          - name: torture
            install: nghttp2 openssl
            configure: --enable-debug --disable-shared --disable-threaded-resolver --with-openssl=$(brew --prefix)/opt/openssl --enable-websockets
            tflags: -n -t --shallow=25 !FTP
            macosx-version-min: 10.9
          - name: torture-ftp
            install: nghttp2 openssl
            configure: --enable-debug --disable-shared --disable-threaded-resolver --with-openssl=$(brew --prefix)/opt/openssl --enable-websockets
            tflags: -n -t --shallow=20 FTP
            macosx-version-min: 10.9
          - name: macOS 10.15
            install: nghttp2 libssh2 openssl
            configure: --enable-debug --disable-ldap --with-openssl=$(brew --prefix)/opt/openssl --enable-websockets
            macosx-version-min: 10.15
    steps:
      - run: echo libtool autoconf automake pkg-config libpsl ${{ matrix.build.install }} | xargs -Ix -n1 echo brew '"x"' > /tmp/Brewfile
        name: 'brew bundle'

      # Run this command with retries because of spurious failures seen
      # while running the tests, for example
      # https://github.com/curl/curl/runs/4095721123?check_suite_focus=true
      - run: "while [[ $? == 0 ]]; do for i in 1 2 3; do brew update && brew bundle install --no-lock --file /tmp/Brewfile && break 2 || { echo Error: wait to try again; sleep 10; } done; false Too many retries; done"
        name: 'brew install'

      - run: |
          case "${{ matrix.build.install }}" in
            *openssl*)
              (
                cd $(brew --prefix)/opt/openssl/lib/pkgconfig/
                for i in libssl.pc libcrypto.pc; do
                  sudo cp $i $i.orig
                  sudo sed s,libdir=$(brew --prefix)'/Cellar/openssl@3/3.3.0$',libdir=$(brew --prefix)/Cellar/openssl@3/3.3.0/lib,g < $i.orig > /tmp/$i
                  sudo cp /tmp/$i $i
                  cat $i
                done
              )
              ;;
            *)
              if test -d $(brew --prefix)/include/openssl; then
                brew unlink openssl
              fi;;
          esac
        name: 'brew unlink openssl'

      - run: |
          python3 -m venv $HOME/venv
          source $HOME/venv/bin/activate
          python3 -m pip install impacket
        name: 'pip3 install'

      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4

      - run: rm -f $HOME/.curlrc
        name: remove $HOME/.curlrc

      - run: autoreconf -fi
        name: 'autoreconf'

      - run: ./configure --disable-dependency-tracking --enable-warnings --enable-werror ${{ matrix.build.configure }}
        name: 'configure'
        env:
          CFLAGS: "-mmacosx-version-min=${{ matrix.build.macosx-version-min }}"

      - run: make V=1
        name: 'make'

      - run: make V=1 examples
        name: 'make examples'

      - run: make V=1 -C tests
        name: 'make tests'

      - run: make V=1 test-ci
        name: 'run tests'
        env:
          TFLAGS: "${{ matrix.build.tflags }} ~1452"

  cmake:
    name: cmake ${{ matrix.compiler.CC }} ${{ matrix.build.name }}
    runs-on: 'macos-latest'
    env:
      CC: ${{ matrix.compiler.CC }}
      # '-Wno-deprecated-declarations' required for LDAP and BUILD_EXAMPLES
      CFLAGS: '-DCMAKE_C_FLAGS=-mmacosx-version-min=10.15 -Wno-deprecated-declarations'
    strategy:
      fail-fast: false
      matrix:
        compiler:
          - CC: clang
          - CC: gcc-12
        build:
          - name: OpenSSL
            install: nghttp2 openssl gsasl
            generate: -DOPENSSL_ROOT_DIR=$(brew --prefix)/opt/openssl -DCMAKE_OSX_DEPLOYMENT_TARGET=10.9 -DCURL_USE_GSASL=ON
          - name: LibreSSL
            install: nghttp2 libressl
            generate: -DOPENSSL_ROOT_DIR=$(brew --prefix)/opt/libressl -DCURL_DISABLE_LDAP=ON -DCURL_DISABLE_LDAPS=ON -DBUILD_EXAMPLES=ON
          - name: wolfSSL
            install: nghttp2 wolfssl
            generate: -DCURL_USE_WOLFSSL=ON -DCURL_DISABLE_LDAP=ON -DCURL_DISABLE_LDAPS=ON
          - name: libssh2
            install: nghttp2 openssl libssh2
            generate: -DOPENSSL_ROOT_DIR=$(brew --prefix)/opt/openssl -DCURL_USE_LIBSSH2=ON -DBUILD_SHARED_LIBS=ON -DBUILD_STATIC_LIBS=ON
          - name: GnuTLS
            install: gnutls
            generate: -DCURL_USE_GNUTLS=ON -DCURL_USE_OPENSSL=OFF -DCURL_DISABLE_LDAP=ON -DCURL_DISABLE_LDAPS=ON -DCMAKE_SHARED_LINKER_FLAGS=-L$(brew --prefix)/lib -DCMAKE_EXE_LINKER_FLAGS=-L$(brew --prefix)/lib
    steps:
      - run: echo libtool autoconf automake pkg-config ${{ matrix.build.install }} | xargs -Ix -n1 echo brew '"x"' > /tmp/Brewfile
        name: 'brew bundle'

      - run: "while [[ $? == 0 ]]; do for i in 1 2 3; do brew update && brew bundle install --no-lock --file /tmp/Brewfile && break 2 || { echo Error: wait to try again; sleep 10; } done; false Too many retries; done"
        name: 'brew install'

      - run: |
          case "${{ matrix.build.install }}" in
            *openssl*)
              ;;
            *)
              if test -d $(brew --prefix)/include/openssl; then
                brew unlink openssl
              fi;;
          esac
        name: 'brew unlink openssl'

      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4

      - run: cmake -B build -DCMAKE_UNITY_BUILD=ON -DCURL_WERROR=ON -DUSE_APPLE_IDN=ON ${{ matrix.build.generate }}
        name: 'cmake generate'

      - run: cmake --build build --parallel 3
        name: 'cmake build'