fix: reject a request body on a body-forbidden method (GET/HEAD/TRACE) #123
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| # Run the full Gradle build on every pull request and on pushes to main. | |
| # `./gradlew build` runs the complete quality gate: tests, ktlint, detekt, | |
| # apiCheck (binary-compatibility), explicit-API strict mode, allWarningsAsErrors, | |
| # and the aggregate 80% Kover line-coverage floor. | |
| on: | |
| pull_request: | |
| push: | |
| branches: [main] | |
| # Cancel superseded runs on the same ref so only the latest commit of a branch/PR builds. | |
| concurrency: | |
| group: ci-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@v4 | |
| with: | |
| # The styleguide directory is a git submodule; fetch it so the working tree matches local checkouts. | |
| submodules: recursive | |
| # Install a single Temurin JDK 21. The build's Gradle daemon runs on this JVM, and the | |
| # foojay-resolver-convention plugin (settings.gradle.kts) auto-provisions the JDK 8 and | |
| # JDK 11 toolchains the Java-8 and JDK-11 modules require. JDK 21 also satisfies the | |
| # virtual-threads module's toolchain. JDK 21 (rather than the newest LTS) is deliberate: | |
| # detekt 1.23.x crashes on JDK 25+, so keeping the daemon on 21 keeps the detekt gate green. | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: '21' | |
| # Built-in Gradle dependency and build caching, plus wrapper validation. | |
| - name: Set up Gradle | |
| uses: gradle/actions/setup-gradle@v4 | |
| - name: Build | |
| run: ./gradlew build | |
| # TEMP DIAGNOSTIC: capture JUnit reports when the build fails. The Gradle console | |
| # log shows only a failed test's name and source location, not its assertion message | |
| # or stack trace, so an environment-specific failure that does not reproduce locally | |
| # cannot be diagnosed from the log alone. The XML report carries the full | |
| # <failure> message + stack trace (incl. the "Caused by" chain). Remove once diagnosed. | |
| - name: Upload test reports on failure | |
| if: ${{ failure() }} | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: test-results | |
| path: | | |
| **/build/test-results/**/*.xml | |
| **/build/reports/tests/** | |
| if-no-files-found: ignore | |
| retention-days: 3 |