Yann Collet
75c0dd504c
Merge pull request #1766 from lz4/dependabot/github_actions/github/codeql-action/upload-sarif-4.36.2
...
build(deps): bump github/codeql-action/upload-sarif from 4.35.1 to 4.39.0
2026-10-19 08:00:44 -07:00
Yann Collet
1b56026ae3
Merge pull request #1767 from lz4/dependabot/github_actions/actions/setup-python-6.3.0
...
build(deps): bump actions/setup-python from 6.2.0 to 7.0.0
2026-10-19 08:00:16 -07:00
dependabot[bot]
534645b9cb
build(deps): bump github/codeql-action/upload-sarif
...
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) from 4.35.1 to 4.39.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](c10b8064de...6f2ac81f5c )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-18 19:30:23 +00:00
dependabot[bot]
51d3d3d079
build(deps): bump actions/setup-python from 6.2.0 to 7.0.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](a309ff8b42...5fda3b95a4 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-18 19:28:25 +00:00
Yann Collet
47bed30b95
ci: bump ossf/scorecard-action to v2.5.0
...
Scorecard fails on every push: v2.4.0 pulls its image from gcr.io,
which has been retired ("denied: This API method requires billing").
The Scorecard v5.6.0 release notes ask action users to upgrade
to v2.5.0 or later, which pull from ghcr.io.
Supersedes #1659 (v2.4.3).
2026-10-18 12:03:37 -07:00
dependabot[bot]
7c4d9817a5
build(deps): bump actions/checkout from 6.0.2 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...3d3c42e5aa )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-17 22:44:35 +00:00
Yann Collet
9e60ed77ed
ci: pin cmake-test.yml actions to commit SHAs
...
cmake-test.yml was the last workflow referencing actions by tag.
They are now pinned to commit SHAs with a version comment, like in other workflows,
so Dependabot keeps updating them.
SHAs checked against upstream tags :
checkout v6.0.2, setup-msbuild v3.0.0, actions-setup-cmake v2.2.0.
oss-fuzz.yml keeps CIFuzz at @master, as documented by OSS-Fuzz :
the action builds on a floating base image (gcr.io/oss-fuzz-base/cifuzz-base),
so a pin wouldn't freeze what runs, and would silently age.
A comment now says so.
Suggested in #1785 .
2026-10-17 07:42:29 -07:00
Yann Collet
4de4d5f425
ci: test meson shared library build with MSVC
...
With MSVC, link.exe only generates the import library (lz4.lib)
when the DLL exports at least one symbol, which requires LZ4_DLL_EXPORT=1
to be defined when compiling the library sources.
The meson build computes this define, but between 6c1a39e7 and 198e5323
it was not passed to library(), resulting in a DLL without exports,
and a `meson install` failure ("File 'meson\lib\lz4.lib' could not be found").
This regression shipped in v1.9.4 and was reported in #1078 .
It went unnoticed because the only meson CI job runs on Linux,
where the define has no effect. MinGW wouldn't catch it either,
since ld exports all symbols when none are explicitly marked dllexport.
This new job builds the shared library with MSVC (--vsenv locates
Visual Studio, no VS Command Prompt needed), installs it,
and checks that lz4.lib is present.
2026-10-13 21:08:33 -07:00
Yann Collet
7b6b0e5d9a
ci: test freestanding target selection on mismatched host/target
...
The freestanding test is only valid for x86_64 Linux targets,
but tests/Makefile selects it based on the host (uname),
while freestanding.c selects its code path based on the compiler's target.
When the two disagree, the test binary is linked with -nostdlib
but without any _start, and crashes.
Add CI coverage for both mismatch scenarios:
- 32-bit target on 64-bit host (CC="$CC -m32")
- non-x86_64 cross-compiler on x86_64 host (all QEMU targets)
These tests are expected to fail until the Makefile is fixed (#1464 ).
2026-10-13 11:07:58 -07:00
Yann Collet
5ae301bb18
ci: run the OSS-Fuzz helpers unit test
...
Run `make -C ossfuzz test` in the Fuzzer Tests job.
The fuzz helpers are otherwise only compiled by OSS-Fuzz, never checked,
which is how FUZZ_dataProducer_retrieve32() returned a single byte for years.
2026-10-08 13:40:08 -07:00
Yann Collet
2cc0d16e2e
ci: let CMake select the Visual Studio generator on windows-latest
...
The windows-latest runner label now resolves to the windows-2025-vs2026
image, which ships Visual Studio 2026 only, so configuring with the
hard-coded "Visual Studio 17 2022" generator fails with
"could not find any instance of Visual Studio".
Drop the explicit -G and keep -A x64: without -G, CMake selects the
newest Visual Studio installed, so the job follows future runner image
updates without further edits.
2026-10-07 14:39:46 -07:00
dependabot[bot]
d8de8ef382
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](bbbca2ddaa...043fb46d1a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-01 07:32:27 +00:00
Yann Collet
9da37b2eeb
Merge pull request #1730 from lz4/dependabot/github_actions/microsoft/setup-msbuild-3
...
build(deps): bump microsoft/setup-msbuild from 2 to 3
2026-04-01 15:56:39 -07:00
dependabot[bot]
4128b88130
build(deps): bump github/codeql-action from 4.32.4 to 4.35.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.4 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](89a39a4e59...c10b8064de )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-01 07:06:23 +00:00
dependabot[bot]
49e9cd5994
build(deps): bump microsoft/setup-msbuild from 2 to 3
...
Bumps [microsoft/setup-msbuild](https://github.com/microsoft/setup-msbuild ) from 2 to 3.
- [Release notes](https://github.com/microsoft/setup-msbuild/releases )
- [Commits](https://github.com/microsoft/setup-msbuild/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: microsoft/setup-msbuild
dependency-version: '3'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-01 07:06:13 +00:00
Yann Collet
bd3351792f
Merge pull request #1718 from lz4/dependabot/github_actions/github/codeql-action-4.32.4
...
build(deps): bump github/codeql-action from 4.31.2 to 4.32.4
2026-03-01 08:09:22 -08:00
dependabot[bot]
4113c6768e
build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b7c566a772...bbbca2ddaa )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-01 06:42:26 +00:00
dependabot[bot]
7ff996b3ae
build(deps): bump github/codeql-action from 4.31.2 to 4.32.4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.2 to 4.32.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](0499de31b9...89a39a4e59 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-01 06:42:20 +00:00
Yann Collet
b40122c688
Merge pull request #1710 from lz4/dependabot/github_actions/actions/checkout-6.0.2
...
build(deps): bump actions/checkout from 6.0.1 to 6.0.2
2026-01-26 09:05:37 -08:00
dependabot[bot]
ce191b2dc1
build(deps): bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-26 04:41:41 +00:00
dependabot[bot]
6b538f9889
build(deps): bump actions/setup-python from 6.1.0 to 6.2.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](83679a892e...a309ff8b42 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-26 04:41:27 +00:00
Yann Collet
726e927dc4
narrow concurrency groups
...
so that 2 PRs do not just cancel each other
2026-01-25 20:04:38 -08:00
Yann Collet
a606dd0a0a
fix wrong test
...
relying on linear single thread build
2026-01-25 12:07:16 -08:00
dependabot[bot]
23d32f0b1b
build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.2 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](ea165f8d65...b7c566a772 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 06:02:34 +00:00
dependabot[bot]
147270761c
build(deps): bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6...v6.0.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 06:03:03 +00:00
dependabot[bot]
46af48bb7c
build(deps): bump actions/setup-python from 6.0.0 to 6.1.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](e797f83bcb...83679a892e )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-01 06:25:18 +00:00
dependabot[bot]
ea6dc9b608
build(deps): bump actions/checkout from 5.0.0 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 06:04:07 +00:00
dependabot[bot]
c5e9dc7e74
build(deps): bump github/codeql-action from 3.30.1 to 4.31.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.1 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f1f6e5f6af...0499de31b9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-03 06:03:44 +00:00
Yann Collet
8e51a91d32
Merge pull request #1651 from lz4/dependabot/github_actions/github/codeql-action-3.30.1
...
build(deps): bump github/codeql-action from 3.29.1 to 3.30.1
2025-09-08 12:18:47 -07:00
dependabot[bot]
9ae57d6e0a
build(deps): bump github/codeql-action from 3.29.1 to 3.30.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.1 to 3.30.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](39edc492db...f1f6e5f6af )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-08 06:03:14 +00:00
dependabot[bot]
5b53668d45
build(deps): bump actions/setup-python from 5.6.0 to 6.0.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.6.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](a26af69be9...e797f83bcb )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-08 06:03:08 +00:00
dependabot[bot]
f46b9690aa
build(deps): bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-18 09:41:38 +00:00
dependabot[bot]
7335859602
build(deps): bump github/codeql-action from 3.28.5 to 3.29.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.5 to 3.29.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f6091c0113...39edc492db )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-30 07:51:37 +00:00
Yann Collet
69505fc4e2
remove reference to x32 tests
...
this ABI is no longer supported by Github Actions
2025-05-27 02:17:34 +00:00
Yann Collet
64231b7b5f
reorganize Github Actions CI script
...
improved modularity for better readability
2025-05-27 02:11:38 +00:00
Yann Collet
1cc2834a59
ci: reduce OSS-Fuzz runtime from 300s to 100s per sanitizer
...
- Reduces total OSS-Fuzz CI time from 15 minutes to 5 minutes
- 100 seconds is sufficient to validate OSS-Fuzz integration scripts
- Saves ~10 minutes per CI run while maintaining functionality
2025-05-26 22:46:52 +00:00
Yann Collet
5d825d23e0
reduced compiler test matrix
2025-05-26 22:10:09 +00:00
Yann Collet
58d3acb530
remove redundant tests
2025-05-26 19:39:51 +00:00
Yann Collet
01d0e07607
Simplify CMake workflow by removing redundancies
...
- Consolidated 6 jobs into 3 jobs for better maintainability
- Removed duplicate CMake version testing, integration tests, and build configurations
- Maintained all essential test coverage while reducing CI runtime
- Simplified matrix configuration with explicit generator values for all entries
2025-05-25 23:03:14 +00:00
Yann Collet
21aeb60f6e
transfer cmake CI tests into cmake-test.yml
2025-05-25 14:13:28 -07:00
Yann Collet
3ae1482cc6
fix integration tests
2025-05-25 15:41:31 +00:00
Yann Collet
51540061ea
reduced cmake tests
...
reduced redundancy and complexity.
2025-05-25 15:06:36 +00:00
Yann Collet
280f21bbd3
fix cmake on Windows
2025-05-25 14:55:21 +00:00
Yann Collet
444fcfe868
fix directory name in cmake version test
2025-05-25 06:31:49 +00:00
Yann Collet
f6f8860132
removed cmake 3.5.x tests
...
badly supported by Github Actions runner.
2025-05-25 06:29:18 +00:00
Yann Collet
c45ffe5380
Check and fix "Verify installation structure" test
2025-05-25 05:24:05 +00:00
Yann Collet
31f3538b83
attempt to run cmake version tests on ubuntu 22.04
...
since ubuntu 20.04 is deprecated
2025-05-25 04:46:29 +00:00
Yann Collet
7e0a8d1cbf
Add comprehensive CMake build system testing workflow
...
- Validates CMake improvements across multiple platforms and versions
- Tests default build type configuration (Release as default)
- Tests configurable LZ4_DEBUG_LEVEL (0-8) with CMake GUI support
- Tests Debug builds default to LZ4_DEBUG_LEVEL=1, Release to 0
- Tests parallel build race condition fixes for symlink creation
- Tests installation and package config generation
- Tests external project integration via find_package()
- Ensures CMake version compatibility (3.5 to latest)
- Provides comprehensive regression testing for CMake changes
Triggers on pushes to 'dev', 'release', and any branch containing 'cmake'
2025-05-25 03:50:12 +00:00
Yann Collet
0944754f4c
improve propagation test of standard Makefile variable
2025-04-30 19:31:09 -07:00
dependabot[bot]
813711e057
build(deps): bump actions/setup-python from 5.5.0 to 5.6.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.5.0 to 5.6.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](8d9ed9ac5c...a26af69be9 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 5.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-28 06:39:20 +00:00