sync

.bazelignore

@@ -0,0 +1,8 @@
+tools/
+dependencies/
+docker/
+etc/
+jenkins/
+docs/
+
+

.bazelrc

@@ -0,0 +1,2 @@
+build --incompatible_strict_action_env
+try-import %workspace%/user.bazelrc

.bazelversion

@@ -0,0 +1 @@
+8.6.0

.dockerignore

@@ -10,6 +10,11 @@ flow/reports
 flow/objects
 flow/tech
 
+bazel-bin/
+bazel-obj/
+bazel-OpenROAD-flow-scripts/
+bazel-testlogs/
+
 # Tar archives
 flow/*tar.gz
 flow/run-me*.sh

.gitattributes

@@ -1,2 +1,3 @@
 # Make Github ignore the designs folder when determining repo language
 flow/designs/src/* linguist-vendored
+flow/scripts/variables.json linguist-generated=true

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/black.yaml

@@ -1,11 +1,9 @@
 name: Lint Python
 
 on: [push, pull_request]
-
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - uses: psf/black@stable
-

.github/workflows/github-actions-cron-sync-fork-from-upstream.yml

@@ -14,7 +14,7 @@ on:
 jobs:
   Sync-Branch-From-Upstream:
     name: Automatic sync 'master' from The-OpenROAD-Project/OpenROAD-flow-scripts
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
 
     # Only allow one action to run at a time.
     concurrency: sync-branch-from-upstream

.github/workflows/github-actions-cron-test-installer.yml

@@ -27,10 +27,10 @@ jobs:
       fail-fast: false
       matrix:
         os: ["ubuntu20.04", "ubuntu22.04"]
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
           submodules: recursive

.github/workflows/github-actions-cron-update-OR.yml

@@ -7,10 +7,10 @@ on:
 
 jobs:
   update:
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Check out repository code recursively
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           submodules: recursive
       - name: Pull changes in OpenROAD submodule
@@ -24,12 +24,16 @@ jobs:
           git pull
       - if: "steps.remote-update.outputs.has_update != ''"
         name: Create Draft PR
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ github.token }}
           signoff: true
           delete-branch: true
           title: 'Update OpenROAD submodule'
+          body: |
+            Automated action to update tools/OpenROAD submodule and tighten CI rule checking.
+            [ci:rules-tighten]
+          labels: UpdateRules
           reviewers: |
             vvbandeira
             maliberty

.github/workflows/github-actions-cron-update-yosys.yml

@@ -8,10 +8,10 @@ on:
 
 jobs:
   update:
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Check out repository code recursively
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           submodules: recursive
           fetch-depth: 0
@@ -28,7 +28,7 @@ jobs:
           git checkout ${latesttag}
       - if: "steps.remote-update.outputs.has_update != ''"
         name: Create Draft PR
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ github.token }}
           signoff: true

.github/workflows/github-actions-cron-util-test.yml

@@ -4,23 +4,23 @@ on:
   - cron: "0 8 * * SUN"
   push:
     paths:
-      - 'flow/util/genElapsedTime.py'
-      - 'flow/test/test_genElapsedTime.py'
+      - 'flow/util/*.py'
+      - 'flow/test/test_*.py'
   pull_request:
     paths:
-      - 'flow/util/genElapsedTime.py'
-      - 'flow/test/test_genElapsedTime.py'
+      - 'flow/util/*.py'
+      - 'flow/test/test_*.py'
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
-jobs:     
+jobs:
   testUtilScripts:
     strategy:
       fail-fast: false
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
           submodules: recursive
@@ -33,4 +33,4 @@ jobs:
           cd flow/test
           for file in *.py; do
               python "$file"
-          done
+          done

.github/workflows/github-actions-lint-tcl.yml

@@ -0,0 +1,29 @@
+name: Lint Tcl code
+
+on:
+  push:
+    branches:
+    - master
+  pull_request:
+    branches:
+    - master
+
+jobs:
+  Tclint:
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Install Dependencies
+        run: |
+          python3 -m venv venv
+          venv/bin/pip install tclint==0.7.0
+
+      - name: Lint
+        run: |
+          source venv/bin/activate
+          tclfmt --version
+          tclfmt --in-place .
+          git diff --exit-code
+          tclint .

.github/workflows/github-actions-manual-update-rules.yml

@@ -9,28 +9,30 @@ on:
 
 jobs:
   update:
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     strategy:
       fail-fast: false
     steps:
       - name: Check out repository code recursively
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.10"
       - name: Install Python Packages
         run: |
-          pip install firebase-admin
+          python3 -m venv venv
+          venv/bin/pip install firebase-admin
       - name: Execute Python Script Update
         env:
           CREDS_FILE: ${{ secrets.CREDS_FILE }}
           API_BASE_URL: ${{ secrets.API_BASE_URL }}
         run: |
+          source venv/bin/activate
           if [[ "${{ github.event.inputs.type }}" == "overwrite" ]]; then
             python flow/util/updateRules.py --keyFile "${CREDS_FILE}" --apiURL ${API_BASE_URL} --commitSHA $(git rev-parse HEAD) --overwrite
-          else 
+          else
             python flow/util/updateRules.py --keyFile "${CREDS_FILE}" --apiURL ${API_BASE_URL} --commitSHA $(git rev-parse HEAD)
           fi
       - name: Push updated rules

.github/workflows/github-actions-on-delete-cleanup.yml

@@ -12,7 +12,7 @@ jobs:
   Delete-From-Staging:
     name: Delete branch from staging
 
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
 
     permissions:
       # Read-only access so we don't accidentally try to push to *this* repository.

.github/workflows/github-actions-on-label-create.yml

@@ -12,7 +12,7 @@ env:
 jobs:
   Push-To-Staging:
     name: Push to staging
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
 
     permissions:
       # Read-only access so we don't accidentally try to push to *this* repository.

.github/workflows/github-actions-on-push.yml

@@ -8,12 +8,9 @@ on:
 
 jobs:
   scan:
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
       - name: run security_scan_on_push
         uses: The-OpenROAD-Project/actions/security_scan_on_push@main
-
-
-

.github/workflows/github-actions-publish-docker-images.yml

@@ -27,27 +27,27 @@ on:
 
 jobs:
   buildCodespaceImage:
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     timeout-minutes: 600
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set environment variables
         run: echo "IMAGE=ghcr.io/$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry (GHCR)
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: gha
           password: ${{ github.token }}
 
       - name: Build and export codespaces image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: true
@@ -61,10 +61,10 @@ jobs:
       fail-fast: false
       matrix:
         os: [["ubuntu20.04", "ubuntu:20.04"], ["ubuntu22.04", "ubuntu:22.04"]]
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.USE_SELF_HOSTED == 'true' && 'self-hosted' || 'ubuntu-latest' }}
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
           submodules: recursive
@@ -74,11 +74,11 @@ jobs:
           echo "IMAGE_DEPS=ghcr.io/$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')-dev/${{ matrix.os[0] }}" >> $GITHUB_ENV
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry (GHCR)
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v2
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: gha
@@ -88,7 +88,7 @@ jobs:
         run: cp tools/OpenROAD/etc/DependencyInstaller.sh etc/InstallerOpenROAD.sh
 
       - name: Build and export dependencies image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: etc
           push: true
@@ -113,7 +113,7 @@ jobs:
           tool-cache: false
 
       - name: Check out repository code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
           submodules: recursive
@@ -125,18 +125,18 @@ jobs:
           echo "NUM_THREADS=$(nproc)" >> $GITHUB_ENV
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry (GHCR)
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v2
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: gha
           password: ${{ github.token }}
 
       - name: Build and export ORFS image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: true