Skip to content

ci: update workflows (checkout v6, recursive submodules), mbedTLS v4 compatibility, Windows fix#3529

Open
Easton97-Jens wants to merge 9 commits intoowasp-modsecurity:v3/masterfrom
Easton97-Jens:v3/master_update_workflows
Open

ci: update workflows (checkout v6, recursive submodules), mbedTLS v4 compatibility, Windows fix#3529
Easton97-Jens wants to merge 9 commits intoowasp-modsecurity:v3/masterfrom
Easton97-Jens:v3/master_update_workflows

Conversation

@Easton97-Jens
Copy link
Copy Markdown
Contributor

what

  • Integrated ci_new.yml from PR fix(ci): pin Lua version on 5.4 #3524
  • Updated ci.yml and aligned it with the new workflow structure
  • Removed GeoIP-related steps from CI
  • Unified workflows so that all jobs run consistently
  • Updated actions/checkout from v4 to v6
  • Changed submodules: true to recursive
  • Adjusted configuration for better compatibility with mbedTLS v4
  • Fixed Windows workflow so tests now pass successfully

why

  • PR fix(ci): pin Lua version on 5.4 #3524 introduces important Lua version pinning changes that must be reflected in CI
  • The previous ci.yml was not fully compatible with these updates
  • Removing GeoIP reduces CI complexity and potential failure points
  • Unified workflows improve maintainability and consistency
  • actions/checkout@v6 is the newer and recommended version
  • Using recursive ensures all submodules are properly fetched
  • Adjustments were required for compatibility with mbedTLS v4
  • Windows tests were previously failing and are now fixed

references

pull_request:

env:
LUA_VERSION: "5.4"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove all hardcoded Lua versions from all workflow. Let the system to choose the right version. I think it's a good feedback if we need to align that in the code (and the build system).

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note here, we already fixed the Lua version issue in #3525.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should the Lua version be selected dynamically by the system going forward, or do we want to keep a fixed version (at least for certain environments like Linux)?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should let the system to choose the right version. Usually, macOS uses the recent releases, which is good, because we can get notification about that.

If we use a fixed version, then we can forget to update the code.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

macOS now follows the previous behavior (using the default system setup), while Linux has been updated to dynamically detect and use the currently available Lua version.

This should give us more flexibility on Linux while keeping macOS stable and aligned with its typical environment.

Updated CI workflow to dynamically detect and install the latest Lua development package instead of using a fixed version.
@Easton97-Jens Easton97-Jens requested a review from airween March 29, 2026 16:20
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants