build-publish-images.yml

# GHA for build-*
name: Build and push images

on:
  push:
    branches:
      - master
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
  merge_group:
concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true
env:
  COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}

jobs:
  #
  #
  #
  isdraft:
    uses: ./.github/workflows/reusable-isdraft.yml
  preflight:
    needs: isdraft
    uses: ./.github/workflows/reusable-preflight.yml

  ### Build ########################

  #
  #
  #
  build-linux-stable:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    env:
      RUST_TOOLCHAIN: stable
      # Enable debug assertions since we are running optimized builds for testing
      # but still want to have debug assertions.
      RUSTFLAGS: "-Cdebug-assertions=y -Dwarnings"
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          forklift cargo build --locked --profile testnet --features pyroscope,fast-runtime --bin polkadot --bin polkadot-prepare-worker --bin polkadot-execute-worker
          ROCOCO_EPOCH_DURATION=10 ./polkadot/scripts/build-only-wasm.sh rococo-runtime $(pwd)/runtimes/rococo-runtime-10/
          ROCOCO_EPOCH_DURATION=100 ./polkadot/scripts/build-only-wasm.sh rococo-runtime $(pwd)/runtimes/rococo-runtime-100/
          ROCOCO_EPOCH_DURATION=600 ./polkadot/scripts/build-only-wasm.sh rococo-runtime $(pwd)/runtimes/rococo-runtime-600/
          pwd
          ls -alR runtimes
      - name: pack artifacts
        run: |
          mkdir -p ./artifacts
          VERSION="${{ needs.preflight.outputs.SOURCE_REF_SLUG }}" # will be tag or branch name
          mv ./target/testnet/polkadot ./artifacts/.
          mv ./target/testnet/polkadot-prepare-worker ./artifacts/.
          mv ./target/testnet/polkadot-execute-worker ./artifacts/.
          mv ./runtimes/ ./artifacts/.
          cd artifacts/
          sha256sum polkadot | tee polkadot.sha256
          shasum -c polkadot.sha256
          cd ../
          EXTRATAG="${{ needs.preflight.outputs.SOURCE_REF_SLUG }}-${COMMIT_SHA}"
          echo "Polkadot version = ${VERSION} (EXTRATAG = ${EXTRATAG})"
          echo -n ${VERSION} > ./artifacts/VERSION
          echo -n ${EXTRATAG} > ./artifacts/EXTRATAG
          echo -n ${GITHUB_RUN_ID} > ./artifacts/BUILD_LINUX_JOB_ID
          RELEASE_VERSION=$(./artifacts/polkadot -V | awk '{print $2}'| awk -F "-" '{print $1}')
          echo -n "v${RELEASE_VERSION}" > ./artifacts/BUILD_RELEASE_VERSION
          cp -r docker/* ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}
  #
  #
  #
  build-linux-stable-cumulus:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    env:
      RUSTFLAGS: "-Cdebug-assertions=y -Dwarnings"
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          echo "___Building a binary, please refrain from using it in production since it goes with the debug assertions.___"
          forklift cargo build --release --locked -p polkadot-parachain-bin --bin polkadot-parachain
          echo "___Packing the artifacts___"
          mkdir -p ./artifacts
          mv ./target/release/polkadot-parachain ./artifacts/.
          echo "___The VERSION is either a tag name or the curent branch if triggered not by a tag___"
          echo ${{ needs.preflight.outputs.SOURCE_REF_SLUG }} | tee ./artifacts/VERSION

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}
  #
  #
  #
  build-test-parachain:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    env:
      RUSTFLAGS: "-Cdebug-assertions=y -Dwarnings"
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          echo "___Building a binary, please refrain from using it in production since it goes with the debug assertions.___"
          forklift cargo build --release --locked -p cumulus-test-service --bin test-parachain
      - name: pack artifacts
        run: |
          echo "___Packing the artifacts___"
          mkdir -p ./artifacts
          mv ./target/release/test-parachain ./artifacts/.
          mkdir -p ./artifacts/zombienet

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}
  #
  #
  #
  build-test-collators:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          forklift cargo build --locked --profile testnet -p test-parachain-adder-collator
          forklift cargo build --locked --profile testnet -p test-parachain-undying-collator
      - name: pack artifacts
        run: |
          mkdir -p ./artifacts
          mv ./target/testnet/adder-collator ./artifacts/.
          mv ./target/testnet/undying-collator ./artifacts/.
          echo -n "${{ needs.preflight.outputs.SOURCE_REF_SLUG }}" > ./artifacts/VERSION
          echo -n "${{ needs.preflight.outputs.SOURCE_REF_SLUG }}-${COMMIT_SHA}" > ./artifacts/EXTRATAG
          echo "adder-collator version = $(cat ./artifacts/VERSION) (EXTRATAG = $(cat ./artifacts/EXTRATAG))"
          echo "undying-collator version = $(cat ./artifacts/VERSION) (EXTRATAG = $(cat ./artifacts/EXTRATAG))"
          cp -r ./docker/* ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}
  #
  #
  #
  build-malus:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          forklift cargo build --locked --profile testnet -p polkadot-test-malus --bin malus --bin polkadot-prepare-worker --bin polkadot-execute-worker
      - name: pack artifacts
        run: |
          mkdir -p ./artifacts
          mv ./target/testnet/malus ./artifacts/.
          mv ./target/testnet/polkadot-execute-worker ./artifacts/.
          mv ./target/testnet/polkadot-prepare-worker ./artifacts/.
          echo -n "${{ needs.preflight.outputs.SOURCE_REF_SLUG }}" > ./artifacts/VERSION
          echo -n "${{ needs.preflight.outputs.SOURCE_REF_SLUG }}-${COMMIT_SHA}" > ./artifacts/EXTRATAG
          echo "polkadot-test-malus = $(cat ./artifacts/VERSION) (EXTRATAG = $(cat ./artifacts/EXTRATAG))"
          cp -r ./docker/* ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}
  #
  #
  #
  build-linux-substrate:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          mkdir -p ./artifacts/substrate/
          WASM_BUILD_NO_COLOR=1 forklift cargo build --locked --release -p staging-node-cli
          ls -la target/release/
      - name: pack artifacts
        shell: bash
        run: |
          mv target/release/substrate-node ./artifacts/substrate/substrate
          echo -n "Substrate version = "
          if [[ "${{ github.ref }}" == "refs/tags/"* ]]; then
          echo "${{ github.ref_name }}" | tee ./artifacts/substrate/VERSION;
          else
          ./artifacts/substrate/substrate --version |
          cut -d ' ' -f 2 | tee ./artifacts/substrate/VERSION;
          fi
          sha256sum ./artifacts/substrate/substrate | tee ./artifacts/substrate/substrate.sha256
          cp -r ./docker/dockerfiles/substrate_injected.Dockerfile ./artifacts/substrate/

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}
  #
  #
  #
  build-templates-node:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        id: required
        run: |
          forklift cargo build --locked --package parachain-template-node --release
          forklift cargo build --locked --package minimal-template-node --release
          forklift cargo build --locked --package solochain-template-node --release
      - name: pack artifacts
        run: |
          mkdir -p ./artifacts
          mv ./target/release/parachain-template-node ./artifacts/.
          mv ./target/release/minimal-template-node ./artifacts/.
          mv ./target/release/solochain-template-node ./artifacts/.
          echo -n "${{ needs.preflight.outputs.SOURCE_REF_SLUG }}" > ./artifacts/VERSION
          echo -n "${{ needs.preflight.outputs.SOURCE_REF_SLUG }}-${COMMIT_SHA}" > ./artifacts/EXTRATAG
          echo "polkadot-test-malus = $(cat ./artifacts/VERSION) (EXTRATAG = $(cat ./artifacts/EXTRATAG))"

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1
      - name: Stop all workflows if failed
        if: ${{ failure() && steps.required.conclusion == 'failure' && !github.event.pull_request.head.repo.fork }}
        uses: ./.github/actions/workflow-stopper
        with:
          app-id: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_ID }}
          app-key: ${{ secrets.WORKFLOW_STOPPER_RUNNER_APP_KEY }}


  ### Build zombienet test artifacts ########################

  #
  #
  #
  prepare-bridges-zombienet-artifacts:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        run: |
          forklift cargo build --locked --profile testnet -p polkadot-test-malus --bin malus --bin polkadot-prepare-worker --bin polkadot-execute-worker
      - name: pack artifacts
        run: |
          mkdir -p ./artifacts/bridges-polkadot-sdk/bridges
          cp -r bridges/testing ./artifacts/bridges-polkadot-sdk/bridges/testing

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1

  #
  #
  #
  prepare-polkadot-zombienet-artifacts:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        run: |
          forklift cargo nextest --manifest-path polkadot/zombienet-sdk-tests/Cargo.toml archive --locked --features zombie-metadata,zombie-ci --archive-file polkadot-zombienet-tests.tar.zst
      - name: pack artifacts
        run: |
          mkdir -p artifacts
          cp polkadot-zombienet-tests.tar.zst ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1

  #
  #
  #
  prepare-substrate-zombienet-artifacts:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        run: |
          forklift cargo nextest --manifest-path substrate/zombienet/zombienet-sdk/Cargo.toml archive --locked --features zombie-ci --archive-file substrate-zombienet-tests.tar.zst
      - name: pack artifacts
        run: |
          mkdir -p artifacts
          cp substrate-zombienet-tests.tar.zst ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1

  #
  #
  #
  prepare-cumulus-zombienet-artifacts:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        run: |
          forklift cargo nextest --manifest-path cumulus/zombienet/zombienet-sdk/Cargo.toml archive --locked --features zombie-ci --archive-file cumulus-zombienet-tests.tar.zst
      - name: pack artifacts
        run: |
          mkdir -p artifacts
          cp cumulus-zombienet-tests.tar.zst ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1

  prepare-parachain-templates-zombienet-artifacts:
    needs: [preflight]
    runs-on: ${{ needs.preflight.outputs.RUNNER }}
    timeout-minutes: 60
    container:
      image: ${{ needs.preflight.outputs.IMAGE }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: build
        run: |
          forklift cargo nextest --manifest-path templates/zombienet/Cargo.toml archive --locked --features zombienet --archive-file parachain-templates-zombienet-tests.tar.zst
      - name: pack artifacts
        run: |
          mkdir -p artifacts
          cp parachain-templates-zombienet-tests.tar.zst ./artifacts

      - name: tar
        run: tar -cvf artifacts.tar artifacts

      - name: upload artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ github.job }}-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
          path: artifacts.tar
          retention-days: 1

  ### Publish ########################

  #
  #
  #
  build-push-image-test-parachain:
    needs: [preflight, build-test-parachain]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-test-parachain-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

      - name: tar
        run: tar -xvf artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "test-parachain"
          dockerfile: "docker/dockerfiles/test-parachain_injected.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  #
  #
  #
  build-push-image-polkadot-debug:
    needs: [preflight, build-linux-stable]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-linux-stable-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

      - name: tar
        run: tar -xvf artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "polkadot-debug"
          dockerfile: "docker/dockerfiles/polkadot/polkadot_injected_debug.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  #
  #
  #
  build-push-image-colander:
    needs: [preflight, build-test-collators]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-test-collators-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

      - name: tar
        run: tar -xvf artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "colander"
          dockerfile: "docker/dockerfiles/collator_injected.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  #
  #
  #
  build-push-image-malus:
    needs: [preflight, build-malus]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-malus-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

      - name: tar
        run: tar -xvf artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "malus"
          dockerfile: "docker/dockerfiles/malus_injected.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  #
  #
  #
  build-push-image-substrate-pr:
    needs: [preflight, build-linux-substrate]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-linux-substrate-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

      - name: tar
        run: tar -xvf artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "substrate"
          dockerfile: "docker/dockerfiles/substrate_injected.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  #
  #
  #
  # unlike other images, bridges+zombienet image is based on Zombienet image that pulls required binaries
  # from other fresh images (polkadot and cumulus)
  build-push-image-bridges-zombienet-tests:
    needs:
      [
        preflight,
        build-linux-stable,
        build-linux-stable-cumulus,
        prepare-bridges-zombienet-artifacts,
      ]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-linux-stable-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
      - name: tar
        run: |
          tar -xvf artifacts.tar
          rm artifacts.tar

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-linux-stable-cumulus-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
      - name: tar
        run: |
          tar -xvf artifacts.tar
          rm artifacts.tar

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: prepare-bridges-zombienet-artifacts-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}
      - name: tar
        run: |
          tar -xvf artifacts.tar
          rm artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "bridges-zombienet-tests"
          dockerfile: "docker/dockerfiles/bridges_zombienet_tests_injected.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  #
  #
  #
  build-push-image-polkadot-parachain-debug:
    needs: [preflight, build-linux-stable-cumulus]
    runs-on: ${{ needs.preflight.outputs.RUNNER_DEFAULT }}
    timeout-minutes: 60
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: build-linux-stable-cumulus-${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

      - name: tar
        run: tar -xvf artifacts.tar

      - name: build and push image
        uses: ./.github/actions/build-push-image
        with:
          image-name: "polkadot-parachain-debug"
          dockerfile: "docker/dockerfiles/polkadot-parachain/polkadot-parachain-debug_unsigned_injected.Dockerfile"
          username: ${{ secrets.PARITYPR_DOCKERHUB_USERNAME }}
          password: ${{ secrets.PARITYPR_DOCKERHUB_PASSWORD }}

  confirm-required-build-jobs-passed:
    runs-on: ubuntu-latest
    name: All builds passed
    # If any new job gets added, be sure to add it to this array
    needs:
      - build-linux-stable
      - build-linux-stable-cumulus
      - build-test-parachain
      - build-test-collators
      - build-malus
      - build-linux-substrate
      - build-templates-node
    if: always() && !cancelled()
    outputs:
      build_success: ${{ steps.check_success.outputs.build_success }}
    steps:
      - name: Check build success
        id: check_success
        run: |
          tee resultfile <<< '${{ toJSON(needs) }}'
          FAILURES=$(cat resultfile | grep -E '"result": "(failure|cancelled)"' | wc -l)
          if [ $FAILURES -gt 0 ]; then
            echo "### At least one required job failed ❌" >> $GITHUB_STEP_SUMMARY
            echo "build_success=false" >> $GITHUB_OUTPUT
            exit 1
          else
            echo '### Good job! All the required jobs passed 🚀' >> $GITHUB_STEP_SUMMARY
            echo "build_success=true" >> $GITHUB_OUTPUT
          fi

  trigger-zombienet-polkadot:
    needs: [preflight, confirm-required-build-jobs-passed]
    if: ${{ needs.confirm-required-build-jobs-passed.outputs.build_success == 'true' }}
    uses: ./.github/workflows/zombienet_polkadot.yml
    with:
      build_run_id: ${{ github.run_id }}
      ref_slug: ${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

  trigger-zombienet-cumulus:
    needs: [preflight, confirm-required-build-jobs-passed]
    if: ${{ needs.confirm-required-build-jobs-passed.outputs.build_success == 'true' }}
    uses: ./.github/workflows/zombienet_cumulus.yml
    with:
      build_run_id: ${{ github.run_id }}
      ref_slug: ${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

  trigger-zombienet-substrate:
    needs: [preflight, confirm-required-build-jobs-passed]
    if: ${{ needs.confirm-required-build-jobs-passed.outputs.build_success == 'true' }}
    uses: ./.github/workflows/zombienet_substrate.yml
    with:
      build_run_id: ${{ github.run_id }}
      ref_slug: ${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

  trigger-zombienet-parachain-template:
    needs: [preflight, confirm-required-build-jobs-passed]
    if: ${{ needs.confirm-required-build-jobs-passed.outputs.build_success == 'true' }}
    uses: ./.github/workflows/zombienet_parachain-template.yml
    with:
      build_run_id: ${{ github.run_id }}
      ref_slug: ${{ needs.preflight.outputs.SOURCE_REF_SLUG }}

  confirm-zombienet-tests-passed:
    runs-on: ubuntu-latest
    name: All zombienet tests passed
    needs:
      # Disabled until zombienet polkadot/cumulus flows are stable
      # - trigger-zombienet-polkadot
      # - trigger-zombienet-cumulus
      - trigger-zombienet-substrate
      - trigger-zombienet-parachain-template
    if: always() && !cancelled()
    steps:
      - name: Check zombienet success
        id: check_success
        run: |
          tee resultfile <<< '${{ toJSON(needs) }}'
          FAILURES=$(cat resultfile | grep -E '"result": "(failure|cancelled)"' | wc -l)
          if [ "$FAILURES" -gt 0 ]; then
            echo "### At least one zombienet job failed ❌" >> $GITHUB_STEP_SUMMARY
            exit 1
          else
            echo '### Good job! All zombienet jobs passed 🚀' >> $GITHUB_STEP_SUMMARY
          fi