From 6c532ed0eaf41b8f5015e611a8374716c16ae2af Mon Sep 17 00:00:00 2001 From: Marco Edoardo Santimaria Date: Thu, 10 Sep 2026 09:11:07 +0200 Subject: [PATCH 1/3] Update CI/CD for security fixes --- .github/workflows/ci-tests.yaml | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci-tests.yaml b/.github/workflows/ci-tests.yaml index 2aa0a918f..907443867 100644 --- a/.github/workflows/ci-tests.yaml +++ b/.github/workflows/ci-tests.yaml @@ -120,16 +120,17 @@ jobs: - gcc:14 - gcc:15 - gcc:16 - - zhongruoyu/llvm-ports:13.0-trixie - - zhongruoyu/llvm-ports:14.0-trixie - - zhongruoyu/llvm-ports:15.0-trixie - - zhongruoyu/llvm-ports:16.0-trixie - - zhongruoyu/llvm-ports:17.0-trixie + - zhongruoyu/llvm-ports:13-trixie + - zhongruoyu/llvm-ports:14-trixie + - zhongruoyu/llvm-ports:15-trixie + - zhongruoyu/llvm-ports:16-trixie + - zhongruoyu/llvm-ports:17-trixie - zhongruoyu/llvm-ports:18-trixie - - zhongruoyu/llvm-ports:19.1-bullseye - - zhongruoyu/llvm-ports:20.1-bullseye - - zhongruoyu/llvm-ports:21.1-bullseye - + - zhongruoyu/llvm-ports:19-trixie + - zhongruoyu/llvm-ports:20-trixie + - zhongruoyu/llvm-ports:21-trixie + - zhongruoyu/llvm-ports:22-trixie + - zhongruoyu/llvm-ports:23-trixie container: image: ${{ matrix.compiler }} From 97ff131edc91c0a9f7f7f21dd3837cbdb49fec60 Mon Sep 17 00:00:00 2001 From: Marco Edoardo Santimaria Date: Thu, 10 Sep 2026 09:22:27 +0200 Subject: [PATCH 2/3] Dropped old gcc compilers Dropped old gcc compilers --- .github/workflows/ci-tests.yaml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/.github/workflows/ci-tests.yaml b/.github/workflows/ci-tests.yaml index 907443867..8258f2e20 100644 --- a/.github/workflows/ci-tests.yaml +++ b/.github/workflows/ci-tests.yaml @@ -112,9 +112,6 @@ jobs: - Debug - Release compiler: - - gcc:9 - - gcc:10 - - gcc:11 - gcc:12 - gcc:13 - gcc:14 @@ -140,7 +137,7 @@ jobs: - name: "Install gfortran (OpenMPI dependency)" if: ${{ startsWith(matrix.compiler, 'gcc:') }} run: | - apt update + apt update -o Acquire::Check-Valid-Until=false apt install -y gfortran || true update-alternatives --install /usr/bin/gfortran gfortran /usr/bin/gfortran-* 100 From 643007645821dd45da9e4bd7055761409c4a392e Mon Sep 17 00:00:00 2001 From: Marco Edoardo Santimaria Date: Thu, 10 Sep 2026 09:46:15 +0200 Subject: [PATCH 3/3] Added retry action step to ensure that compilation is not failing due to issues out of our control --- .github/workflows/ci-tests.yaml | 72 +++++++++++++++++++-------------- 1 file changed, 41 insertions(+), 31 deletions(-) diff --git a/.github/workflows/ci-tests.yaml b/.github/workflows/ci-tests.yaml index 8258f2e20..2859a1735 100644 --- a/.github/workflows/ci-tests.yaml +++ b/.github/workflows/ci-tests.yaml @@ -142,38 +142,48 @@ jobs: update-alternatives --install /usr/bin/gfortran gfortran /usr/bin/gfortran-* 100 - name: "Install packages" - run: | - apt update - apt install -y \ - openmpi-bin \ - libopenmpi-dev \ - ninja-build \ - cmake \ - make \ - sudo \ - bash \ - git \ - jq \ - pkg-config \ - build-essential \ - wget \ - tar \ - python3 \ - python3-pip \ - python3-venv + uses: nick-fields/retry@v3 + with: + command: | + apt update + apt install -y \ + openmpi-bin \ + libopenmpi-dev \ + ninja-build \ + cmake \ + make \ + sudo \ + bash \ + git \ + jq \ + pkg-config \ + build-essential \ + wget \ + tar \ + python3 \ + python3-pip \ + python3-venv + max_attempts: 3 + retry_wait_seconds: 10 + timeout_minutes: 10 - name: "Run CMake" - shell: bash - run: | - cmake -DCMAKE_BUILD_TYPE=${{ matrix.build_type }} \ - -DCAPIO_LOG=${{ matrix.build_type == 'Debug' && 'ON' || 'OFF' }} \ - -DENABLE_COVERAGE=${{ matrix.build_type == 'Debug' && 'ON' || 'OFF' }} \ - -DCAPIO_BUILD_TESTS=ON \ - -G Ninja \ - -B ../build \ - -S ${GITHUB_WORKSPACE} - cmake --build ../build -j $(nproc) - sudo cmake --install ../build --prefix /usr/local + uses: nick-fields/retry@v3 + with: + command: | + cmake -DCMAKE_BUILD_TYPE=${{ matrix.build_type }} \ + -DCAPIO_LOG=${{ matrix.build_type == 'Debug' && 'ON' || 'OFF' }} \ + -DENABLE_COVERAGE=${{ matrix.build_type == 'Debug' && 'ON' || 'OFF' }} \ + -DCAPIO_BUILD_TESTS=ON \ + -G Ninja \ + -B ../build \ + -S ${GITHUB_WORKSPACE} + cmake --build ../build -j $(nproc) + sudo cmake --install ../build --prefix /usr/local + max_attempts: 3 + retry_wait_seconds: 10 + timeout_minutes: 30 + - name: "Run tests" id: run-tests shell: bash @@ -262,4 +272,4 @@ jobs: uses: codecov/codecov-action@v6 with: fail_ci_if_error: true - token: ${{ secrets.CODECOV_TOKEN }} \ No newline at end of file + token: ${{ secrets.CODECOV_TOKEN }}