deps-submission.yml

name: Submit Gradle dependencies

on:
  push:
    branches: [ main ]
    paths-ignore:
      - '**-check.yml'
      - '**-validation.yml'
      - '**.*ignore'
      - '**.api'
      - '**.kt'
      - '**.main.kts'
      - '**.md'
      - '**.pro'
      - '**.xml'
      - '**benchmark.yml'
      - '**build.yml'

permissions:
  contents: read

jobs:
  submit:
    name: Dependencies
    runs-on: ubuntu-latest
    if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
    permissions: # The Dependency Submission API requires write permission
      contents: write
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@0c6ab70129fa3660acd9cd2b51e8685d619cd613
        with:
          disable-sudo: true
          egress-policy: audit

      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: Wandalen/wretry.action@v1.3.0
        timeout-minutes: 5
        with:
          action: actions/setup-java@v3
          with: |
            cache: gradle
            distribution: temurin
            java-version: 17
          attempt_limit: 3
          attempt_delay: 2000

      - name: Disable configuration cache
        run: sed -i 's/org.gradle.configuration-cache=true/org.gradle.configuration-cache=false/' gradle.properties

      - name: Setup Gradle
        uses: gradle/gradle-build-action@v2
        with:
          cache-read-only: true
          gradle-home-cache-cleanup: true

      - name: Submit Gradle Dependency Graph
        uses: mikepenz/gradle-dependency-submission@v0.9.0
        with:
          gradle-build-module: |-
            :
            :fluxo-common
            :fluxo-core
            :fluxo-data
            :plugins
            :benchmarks:jmh
          include-build-environment: false
          sub-module-mode: INDIVIDUAL_DEEP