Reduce total CI duration

.github/actions/build-resolc/action.yml

@@ -0,0 +1,86 @@
+name: Build resolc
+description: Cache-aware resolc build for a single target.
+
+inputs:
+  target:
+    description: "Target triple (e.g., x86_64-unknown-linux-musl)"
+    required: true
+  build-type:
+    description: "'native' or 'musl'"
+    required: true
+  retention-days:
+    description: "Artifact retention in days"
+    required: false
+    default: "1"
+
+outputs:
+  url:
+    description: "Uploaded artifact URL"
+    value: ${{ steps.upload.outputs.artifact-url }}
+  sha:
+    description: "Uploaded artifact digest"
+    value: ${{ steps.upload.outputs.artifact-digest }}
+
+runs:
+  using: composite
+  steps:
+    - name: Check Build Cache
+      id: cache
+      uses: actions/cache@v5
+      with:
+        # Use glob to match binaries with and without extensions.
+        path: resolc-${{ inputs.target }}*
+        key: build-${{ inputs.target }}-${{ github.sha }}
+
+    - name: Set Up Rust Toolchain
+      if: ${{ steps.cache.outputs.cache-hit != 'true' }}
+      uses: actions-rust-lang/setup-rust-toolchain@v1
+      with:
+        rustflags: ""
+        cache-key: ${{ inputs.target }}
+
+    - name: Download LLVM
+      if: ${{ steps.cache.outputs.cache-hit != 'true' }}
+      uses: ./.github/actions/get-llvm
+      with:
+        target: ${{ inputs.target }}
+
+    - name: Build (Native)
+      if: ${{ steps.cache.outputs.cache-hit != 'true' && inputs.build-type == 'native' }}
+      shell: bash
+      run: |
+        export LLVM_SYS_221_PREFIX=$PWD/llvm-${{ inputs.target }}
+        make install-bin
+        mv target/release/resolc resolc-${{ inputs.target }} || mv target/release/resolc.exe resolc-${{ inputs.target }}.exe
+
+    - name: Build (MUSL)
+      if: ${{ steps.cache.outputs.cache-hit != 'true' && inputs.build-type == 'musl' }}
+      shell: bash
+      run: |
+        docker run -v $PWD:/opt/revive $RUST_MUSL_CROSS_IMAGE /bin/bash -c "
+         cd /opt/revive
+         chown -R root:root .
+         apt update && apt upgrade -y && apt install -y pkg-config
+         export LLVM_SYS_221_PREFIX=/opt/revive/llvm-${{ inputs.target }}
+         make install-bin
+         mv target/${{ inputs.target }}/release/resolc resolc-${{ inputs.target }}
+         "
+        sudo chown -R $(id -u):$(id -g) .
+
+    - name: Install Solc
+      uses: ./.github/actions/get-solc
+
+    - name: Basic Sanity Check
+      shell: bash
+      run: |
+        result=$(./resolc-${{ inputs.target }} --bin crates/integration/contracts/flipper.sol)
+        echo $result
+        if [[ $result == *'50564d'* ]]; then exit 0; else exit 1; fi
+
+    - name: Upload Artifact
+      id: upload
+      uses: actions/upload-artifact@v6
+      with:
+        name: resolc-${{ inputs.target }}
+        path: resolc-${{ inputs.target }}*
+        retention-days: ${{ inputs.retention-days }}

.github/actions/get-llvm/action.yml

@@ -4,43 +4,52 @@
 #           target: x86_64-unknown-linux-gnu
 
 name: "Download LLVM"
+description: "Downloads a prebuilt LLVM release for a specific target."
+
 inputs:
   target:
+    description: "Target triple (e.g., x86_64-unknown-linux-musl)"
     required: true
-  version:
-    description: "LLVM release version (e.g., 'llvm-18.1.8'). If not specified, uses the latest published LLVM release. To test a specific draft release, use the full name (e.g. 'llvm-21.1.8-revive.0f80912')."
-    required: false
-    default: ""
 
 runs:
   using: "composite"
   steps:
     - name: detect llvm version from submodule
       id: detect-version
       shell: bash
+      env:
+        # To test a draft LLVM release across every CI workflow, set this to the full
+        # draft name (e.g. "llvm-21.1.8-revive.0f80912") and revert to "" before merging.
+        OVERRIDE_VERSION: ""
       run: |
-        if [ -z "${{ inputs.version }}" ]; then
-          # Get the full version from the LLVM submodule.
-          git submodule update --init --recursive
-          cd llvm
-          # Try to get the most recent tag (e.g., "llvmorg-18.1.8")
-          LLVM_TAG=$(git describe --tags --abbrev=0 2>/dev/null)
-          if [ -n "$LLVM_TAG" ]; then
-            echo "Detected LLVM version from submodule: $LLVM_TAG"
-            # Convert "llvmorg-x.y.z" to "llvm-x.y.z"
-            LLVM_VERSION=$(echo "$LLVM_TAG" | sed 's/^llvmorg-/llvm-/')
-            echo "Detected LLVM version from submodule: $LLVM_VERSION"
-            echo "version_prefix=$LLVM_VERSION" >> $GITHUB_OUTPUT
-          else
-            echo "Could not detect LLVM version from submodule, will use latest release"
-            echo "version_prefix=" >> $GITHUB_OUTPUT
-          fi
-          cd ..
-        else
-          echo "Using explicitly provided version: ${{ inputs.version }}"
-          echo "version_prefix=${{ inputs.version }}" >> $GITHUB_OUTPUT
+        set -euo pipefail
+
+        if [ -n "${OVERRIDE_VERSION}" ]; then
+          echo "Using override version: ${OVERRIDE_VERSION}"
+          echo "version_prefix=${OVERRIDE_VERSION}" >> "$GITHUB_OUTPUT"
+          exit 0
+        fi
+
+        LLVM_SHA=$(git ls-tree HEAD llvm | awk '{print $3}')
+        echo "LLVM_SHA: $LLVM_SHA"
+        LLVM_URL=$(git config -f .gitmodules submodule.llvm.url)
+        echo "LLVM_URL: $LLVM_URL"
+        if [ -z "$LLVM_SHA" ] || [ -z "$LLVM_URL" ]; then
+          echo "::error::Could not resolve LLVM submodule SHA or URL from this repo." >&2
+          exit 1
         fi
 
+        # Do a treeless clone to avoid unnecessarily fetching source files.
+        git clone --filter=tree:0 --no-checkout "$LLVM_URL" llvm-tmp
+        # Try to get the most recent tag (e.g., "llvmorg-18.1.8").
+        LLVM_TAG=$(git -C llvm-tmp describe --tags --abbrev=0 "$LLVM_SHA")
+        rm -rf llvm-tmp
+
+        # Convert "llvmorg-x.y.z" to "llvm-x.y.z".
+        LLVM_VERSION=$(echo "$LLVM_TAG" | sed 's/^llvmorg-/llvm-/')
+        echo "Detected LLVM version from submodule pin: $LLVM_VERSION"
+        echo "version_prefix=$LLVM_VERSION" >> "$GITHUB_OUTPUT"
+
     - name: find asset
       id: find
       uses: actions/github-script@v7
@@ -56,6 +65,11 @@ runs:
           let target = process.env.target
           let versionPrefix = process.env.version_prefix
 
+          if (!versionPrefix) {
+            core.setFailed("version_prefix env is missing");
+            return;
+          }
+
           // Fetch all releases from all pages
           core.info('Fetching releases from revive repository...');
           let hasMorePages = true;
@@ -88,43 +102,24 @@ runs:
             core.info(`  - ${r.tag_name} (published: ${r.published_at})`);
           });
 
-          // Find the appropriate LLVM release
-          let llvmRelease;
-          if (versionPrefix) {
-            // Search for latest release matching the version prefix
-            llvmRelease = llvmReleases.find(release => {
-              return release.tag_name.startsWith(versionPrefix);
-            });
-            if (llvmRelease) {
-              core.info(`Selected LLVM release matching prefix '${versionPrefix}': ${llvmRelease.tag_name}`);
-            }
-          } else {
-            // Find latest LLVM release (first in sorted list)
-            llvmRelease = llvmReleases[0];
-            if (llvmRelease) {
-              core.info(`Selected latest LLVM version: ${llvmRelease.tag_name}`);
-            }
+          // Find the latest LLVM release matching the version prefix.
+          const llvmRelease = llvmReleases.find(release => release.tag_name.startsWith(versionPrefix));
+          if (!llvmRelease) {
+            core.setFailed(`No LLVM releases matching prefix '${versionPrefix}' found! Please check the version, or first release LLVM`);
+            return;
           }
 
-          if (llvmRelease) {
-            let asset = llvmRelease.assets.find(asset => {
-              return asset.name.includes(target);
-            });
-            if (!asset) {
-              core.setFailed(`Artifact for '${target}' not found in release ${llvmRelease.tag_name} (${llvmRelease.html_url})`);
-              process.exit();
-            }
-            // Use the API URL (rather than `browser_download_url`) so that
-            // the authorization header is respected for draft releases.
-            return asset.url;
-          }
+          core.info(`Selected LLVM release matching prefix '${versionPrefix}': ${llvmRelease.tag_name}`);
 
-          if (versionPrefix) {
-            core.setFailed(`No LLVM releases matching prefix '${versionPrefix}' found! Please check the version.`);
-          } else {
-            core.setFailed(`No LLVM releases found! Please release LLVM before running this workflow.`);
+          const asset = llvmRelease.assets.find(asset => asset.name.includes(target));
+          if (!asset) {
+            core.setFailed(`Artifact for '${target}' not found in release ${llvmRelease.tag_name} (${llvmRelease.html_url})`);
+            return;
           }
-          process.exit();
+
+          // Use the API URL (rather than `browser_download_url`) so that
+          // the authorization header is respected for draft releases.
+          return asset.url;
 
     - name: download
       shell: bash

.github/workflows/benchmark.yml

@@ -29,7 +29,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout Commit Before Changes
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.ref_before }}
 
@@ -158,7 +158,7 @@ jobs:
 
       - name: Upload Benchmark Results
         if: ${{ !inputs.pr_number }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: benchmark-report
           path: BENCHMARK_REPORT.md

.github/workflows/book.yml

@@ -22,7 +22,7 @@ jobs:
   check-docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with: { fetch-depth: 0 }
 
       - name: Install and test the mdBook