Initialize nix setup for the repo

renovate.json → .github/renovate.json

@@ -1,7 +1,7 @@
 {
   "$schema": "http://json.schemastore.org/renovate",
   "extends": [
-    "github>sourcegraph/renovate-config"
+    "config:recommended"
   ],
   "semanticCommits": false
 }

.github/workflows/ci.yml

@@ -18,21 +18,14 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v4
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: "temurin"
-          cache: "sbt"
-          java-version: ${{ matrix.java }}
+          summarize: false
 
-      - uses: sbt/setup-sbt@v1
-
-      - name: Setup Gradle 8.10
-        uses: gradle/actions/setup-gradle@v4
-        with:
-          gradle-version: '8.10' 
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
       - name: Main project tests
-        run: sbt test 
+        run: nix develop .#jdk${{ matrix.java }} --command sbt test
 
   docker_test:
     runs-on: ${{ matrix.os }}
@@ -42,30 +35,28 @@ jobs:
       matrix:
         os: [ubuntu-latest]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: "temurin"
-          cache: "sbt"
-          java-version: 17
+          summarize: false
 
-      - uses: sbt/setup-sbt@v1
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
       - name: Build Dockerised CLI
-        run: DOCKER_BUILDKIT=0 sbt cli/docker
+        run: nix develop --command bash -c "DOCKER_BUILDKIT=0 sbt cli/docker"
 
       - name: Test repos
         shell: bash
         run: |
           set -eu
           check_repo() {
             REPO=$1
-            mkdir -p .repos/$REPO
-            git clone https://github.com/$REPO.git .repos/$REPO && cd .repos/$REPO && git submodule update --init
+            mkdir -p ".repos/$REPO"
+            git clone "https://github.com/$REPO.git" ".repos/$REPO" && cd ".repos/$REPO" && git submodule update --init
 
-            docker run -v $PWD/.repos/$REPO:/sources -w /sources sourcegraph/scip-java:latest scip-java index
-            file .repos/$REPO/index.scip || (echo "$REPO SCIP index doesn't exist!"; exit 1)
+            docker run -v "$PWD/.repos/$REPO:/sources" -w /sources sourcegraph/scip-java:latest scip-java index
+            file ".repos/$REPO/index.scip" || (echo "$REPO SCIP index doesn't exist!"; exit 1)
           }
 
           sudo apt install parallel
@@ -76,41 +67,48 @@ jobs:
   bazel:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - run: yarn global add @bazel/bazelisk
-      - run: bazel build //... --//semanticdb-javac:enabled=true
-      - run: bazel run scip-semanticdb:bazel -- --sourceroot "$PWD"
+      - uses: actions/checkout@v4
+
+      - uses: DeterminateSystems/nix-installer-action@v22
+        with:
+          summarize: false
+
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
+
+      - run: nix develop --command bazelisk build //... --//semanticdb-javac:enabled=true
+      - run: nix develop --command bazelisk run scip-semanticdb:bazel -- --sourceroot "$PWD"
       - run: du -h index.scip
-      - run: bazel build //... --@scip_java//semanticdb-javac:enabled=true
+      - run: nix develop "$GITHUB_WORKSPACE" --command bazelisk build //... --@scip_java//semanticdb-javac:enabled=true
         working-directory: examples/bazel-example
-      - run: bazel run @scip_java//scip-semanticdb:bazel -- --sourceroot "$PWD"
+      - run: nix develop "$GITHUB_WORKSPACE" --command bazelisk run @scip_java//scip-semanticdb:bazel -- --sourceroot "$PWD"
         working-directory: examples/bazel-example
       - run: du -h index.scip
         working-directory: examples/bazel-example
 
   bazel_aspect:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - run: yarn global add @bazel/bazelisk
+      - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: "temurin"
-          cache: "sbt"
-          java-version: 17
+          summarize: false
 
-      - uses: sbt/setup-sbt@v1
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
-      - run: sbt build
-      - run: echo "$PWD/out/bin" >> $GITHUB_PATH
+      - run: nix develop --command sbt build
+      - run: echo "$PWD/out/bin" >> "$GITHUB_PATH"
       - name: Auto-index scip-java codebase
         run: |
-          scip-java index --build-tool=bazel --bazel-scip-java-binary=$(which scip-java)
+          # shellcheck disable=SC2016
+          nix develop --command bash -c \
+            'scip-java index --build-tool=bazel --bazel-scip-java-binary=$(which scip-java)'
       - run: du -h index.scip
       - name: Auto-index example/bazel-workspace
         run: |
-          scip-java index --build-tool=bazel --bazel-scip-java-binary=$(which scip-java)
+          # shellcheck disable=SC2016
+          nix develop "$GITHUB_WORKSPACE" --command bash -c \
+            'scip-java index --build-tool=bazel --bazel-scip-java-binary=$(which scip-java)'
         working-directory: examples/bazel-example
       - run: du -h index.scip
         working-directory: examples/bazel-example
@@ -121,19 +119,17 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v4
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: "temurin"
-          cache: "sbt"
-          java-version: 11
+          summarize: false
 
-      - uses: sbt/setup-sbt@v1
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
       - name: semanticdb-kotlinc tests
-        run: sbt semanticdbKotlinc/test
+        run: nix develop --command sbt semanticdbKotlinc/test
 
       - name: Kotlin snapshots
-        run: sbt semanticdbKotlincMinimized/kotlincSnapshots
+        run: nix develop --command sbt semanticdbKotlincMinimized/kotlincSnapshots
 
       - name: Check snapshot drift
         run: |
@@ -143,20 +139,18 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: "temurin"
-          java-version: 11
-          cache: "sbt"
+          summarize: false
 
-      - uses: sbt/setup-sbt@v1
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
-      - run: sbt --client checkAll
+      - run: nix develop --command sbt --client checkAll
 
       - name: Run sample benchmarks
-        run: sbt --client 'bench/Jmh/run -i 1 -f1 -t1 -foe true'
+        run: nix develop --command sbt --client 'bench/Jmh/run -i 1 -f1 -t1 -foe true'
 
 
   maven:
@@ -169,30 +163,29 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-java@v4
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: "temurin"
-          cache: "sbt"
-          java-version: ${{ matrix.java }}
+          summarize: false
 
-      - uses: sbt/setup-sbt@v1
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
       - run: |
-          sbt build publishM2 publishLocal dumpScipJavaVersion
-          echo "SCIP_JAVA_VERSION=$(cat VERSION)" >> $GITHUB_ENV
-          echo "SCIP_JAVA_CLI=$PWD/out/bin/scip-java" >> $GITHUB_ENV
+          nix develop .#jdk${{ matrix.java }} --command sbt build publishM2 publishLocal dumpScipJavaVersion
+          echo "SCIP_JAVA_VERSION=$(cat VERSION)" >> "$GITHUB_ENV"
+          echo "SCIP_JAVA_CLI=$PWD/out/bin/scip-java" >> "$GITHUB_ENV"
 
       - run: |
-          mvn clean verify -DskipTests -Dscip-java.version=$SCIP_JAVA_VERSION sourcegraph:sourcegraphDependencies
+          nix develop "$GITHUB_WORKSPACE#jdk${{ matrix.java }}" --command \
+            mvn clean verify -DskipTests "-Dscip-java.version=$SCIP_JAVA_VERSION" sourcegraph:sourcegraphDependencies
         working-directory: examples/maven-example
 
-      - run: $SCIP_JAVA_CLI index-semanticdb target/semanticdb-targetroot
+      - run: nix develop "$GITHUB_WORKSPACE#jdk${{ matrix.java }}" --command "$SCIP_JAVA_CLI" index-semanticdb target/semanticdb-targetroot
         working-directory: examples/maven-example
 
       - run: |
           set -e
           grep org.hamcrest target/semanticdb-targetroot/*dependencies.txt
-          grep $PWD/src/main/java target/semanticdb-targetroot/*dependencies.txt
+          grep "$PWD/src/main/java" target/semanticdb-targetroot/*dependencies.txt
         working-directory: examples/maven-example
 
       - run: du -h index.scip

.github/workflows/mdoc.yml

@@ -7,15 +7,13 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-java@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: 'temurin'
-          java-version: 11
-          cache: 'sbt'
-      - uses: sbt/setup-sbt@v1
-      - run: sbt docs/docusaurusPublishGhpages
+          summarize: false
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
+      - run: nix develop --command sbt docs/docusaurusPublishGhpages
         env:
           GIT_DEPLOY_KEY: ${{ secrets.GIT_DEPLOY_KEY }}

.github/workflows/release-cli.yml

@@ -13,18 +13,19 @@ permissions:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: nix develop --command bash -e {0}
     steps:
-      - uses: actions/setup-java@v4
-        with:
-          distribution: 'temurin'
-          java-version: 11
+      - uses: actions/checkout@v4
 
-      - uses: coursier/setup-action@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          apps: ''
+          summarize: false
+
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
 
       - name: Build standalone launcher
-        shell: bash
         env:
           OUT_DIR: ${{ runner.temp }}/release-cli
           TAG: ${{ inputs.tag }}
@@ -67,7 +68,6 @@ jobs:
 
       - name: Check for GitHub release
         id: release
-        shell: bash
         env:
           GH_TOKEN: ${{ github.token }}
           TAG: ${{ inputs.tag }}
@@ -83,7 +83,6 @@ jobs:
 
       - name: Upload release assets
         if: steps.release.outputs.exists == 'true'
-        shell: bash
         env:
           OUT_DIR: ${{ runner.temp }}/release-cli
           GH_TOKEN: ${{ github.token }}

.github/workflows/release-docker.yml

@@ -8,19 +8,17 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-java@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: 'temurin'
-          java-version: 11
-          cache: 'sbt'
-      - uses: sbt/setup-sbt@v1
-      - uses: docker/setup-buildx-action@v1
+          summarize: false
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
+      - uses: docker/setup-buildx-action@v3
       - name: Login to DockerHub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      - run: DOCKER_BUILDKIT=0 sbt cli/dockerBuildAndPush
+      - run: nix develop --command bash -c "DOCKER_BUILDKIT=0 sbt cli/dockerBuildAndPush"

.github/workflows/release-maven.yml

@@ -8,17 +8,15 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-java@v3
+      - uses: DeterminateSystems/nix-installer-action@v22
         with:
-          distribution: 'temurin'
-          java-version: 11
-          cache: 'sbt'
-      - uses: sbt/setup-sbt@v1
+          summarize: false
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
       - name: Publish ${{ github.ref }}
-        run: sbt ci-release
+        run: nix develop --command sbt ci-release
         env:
           PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
           PGP_SECRET: ${{ secrets.PGP_SECRET }}