chore: prepare Server 1.9.0

.github/scripts/ci-affected-tasks.sh

@@ -0,0 +1,170 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="$(git rev-parse --show-toplevel)"
+cd "$repo_root"
+
+event_name="${GITHUB_EVENT_NAME:-push}"
+base_ref="${GITHUB_BASE_REF:-}"
+before="${GITHUB_EVENT_BEFORE:-}"
+zero_sha="0000000000000000000000000000000000000000"
+sha="${GITHUB_SHA:-$(git rev-parse HEAD)}"
+output_file="${GITHUB_OUTPUT:?GITHUB_OUTPUT is required}"
+task_name="${AFFECTED_GRADLE_TASK:-build}"
+case "$task_name" in
+  build|test) ;;
+  *) echo "Unsupported affected Gradle task: $task_name" >&2; exit 2 ;;
+esac
+
+emit_tasks() {
+  if [[ -z "$1" ]]; then
+    return
+  fi
+
+  {
+    echo "tasks<<EOF"
+    printf '%s\n' "$1"
+    echo "EOF"
+  } >>"$output_file"
+}
+
+if [[ "$event_name" != "push" && "$event_name" != "pull_request" ]]; then
+  emit_tasks "$task_name"
+  exit 0
+fi
+
+if [[ "$event_name" == "pull_request" ]]; then
+  if [[ -z "$base_ref" ]]; then
+    echo "Missing base ref for pull request" >&2
+    exit 1
+  fi
+
+  git fetch --no-tags origin "$base_ref"
+  base_commit="$(git rev-parse "origin/$base_ref")"
+  mapfile -d '' -t changed_files < <(
+    git diff --name-only -z "$base_commit...$sha"
+  )
+elif [[ -n "$before" && "$before" != "$zero_sha" ]] &&
+     git cat-file -e "$before^{commit}" 2>/dev/null; then
+  mapfile -d '' -t changed_files < <(
+    git diff --name-only -z "$before...$sha"
+  )
+elif git rev-parse --verify HEAD^ >/dev/null 2>&1; then
+  mapfile -d '' -t changed_files < <(
+    git diff --name-only -z "HEAD^...$sha"
+  )
+else
+  emit_tasks "$task_name"
+  exit 0
+fi
+
+is_shared_change() {
+  case "$1" in
+    .github/scripts/* | .github/workflows/ci.yml | .github/workflows/coverage.yml)
+      return 0
+      ;;
+    .github/workflows/openapi.yml)
+      return 0
+      ;;
+    build.gradle.kts | settings.gradle.kts | gradle.properties | gradlew | gradle/*)
+      return 0
+      ;;
+    openapi.yaml | openapi/* | src/*)
+      return 0
+      ;;
+    Dockerfile)
+      return 0
+      ;;
+  esac
+
+  return 1
+}
+
+is_ignored_change() {
+  case "$1" in
+    *.md | *.png | *.svg | .gitignore | .editorconfig | LICENSE*)
+      return 0
+      ;;
+    docs/* | .github/ISSUE_TEMPLATE/*)
+      return 0
+      ;;
+  esac
+
+  return 1
+}
+
+full_build=false
+declare -A changed_modules=()
+
+for file in "${changed_files[@]}"; do
+  if is_ignored_change "$file"; then
+    continue
+  fi
+
+  if is_shared_change "$file"; then
+    full_build=true
+    continue
+  fi
+
+  if [[ "$file" == server-*/* ]]; then
+    module="${file%%/*}"
+    changed_modules["$module"]=1
+  else
+    full_build=true
+  fi
+done
+
+if [[ "$full_build" == true ]]; then
+  emit_tasks "$task_name"
+  exit 0
+fi
+
+if [[ ${#changed_modules[@]} -eq 0 ]]; then
+  exit 0
+fi
+
+declare -A dependents_by_module=()
+for build_file in server-*/build.gradle.kts; do
+  module="${build_file%/*}"
+  while IFS= read -r line; do
+    if [[ "$line" =~ project\(\":([A-Za-z0-9_-]+)\"\) ]]; then
+      dependency="${BASH_REMATCH[1]}"
+      dependents_by_module["$dependency"]+="$module "
+    fi
+  done <"$build_file"
+done
+
+declare -A affected_modules=()
+
+mark_affected() {
+  local module="$1"
+
+  if [[ -n "${affected_modules[$module]:-}" ]]; then
+    return
+  fi
+
+  affected_modules["$module"]=1
+
+  local dependent
+  for dependent in ${dependents_by_module["$module"]:-}; do
+    mark_affected "$dependent"
+  done
+}
+
+for module in "${!changed_modules[@]}"; do
+  if [[ ! -f "$module/build.gradle.kts" ]]; then
+    echo "Changed module no longer exists: $module" >&2
+    emit_tasks "$task_name"
+    exit 0
+  fi
+
+  mark_affected "$module"
+done
+
+module_tasks="$(
+  for module in "${!affected_modules[@]}"; do
+    printf ':%s:%s\n' "$module" "$task_name"
+  done | sort
+)"
+
+emit_tasks "$module_tasks"

.github/workflows/ci.yml

@@ -18,6 +18,8 @@ jobs:
     runs-on: ${{ github.event_name == 'pull_request' && 'ubuntu-24.04' || fromJSON('["self-hosted","Linux","X64","ci-stack"]') }}
     steps:
       - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
 
       - name: Isolate Gradle user home
         run: echo "GRADLE_USER_HOME=${RUNNER_TEMP}/gradle-user-home" >> "$GITHUB_ENV"
@@ -29,5 +31,19 @@ jobs:
 
       - uses: gradle/actions/setup-gradle@v6
 
-      - name: Build
-        run: ./gradlew build --max-workers=8
+      - name: Detect affected Gradle modules
+        id: affected
+        run: bash .github/scripts/ci-affected-tasks.sh
+
+      - name: Build affected modules
+        env:
+          TASKS: ${{ steps.affected.outputs.tasks }}
+        run: |
+          if [[ -z "$TASKS" ]]; then
+            echo "No Gradle compilation or tests are required."
+            exit 0
+          fi
+
+          readarray -t task_args <<<"$TASKS"
+          printf 'Running:\n%s\n' "$TASKS"
+          ./gradlew "${task_args[@]}" --parallel --max-workers=32

.github/workflows/coverage.yml

@@ -16,6 +16,8 @@ jobs:
     runs-on: ${{ github.event_name == 'pull_request' && 'ubuntu-24.04' || fromJSON('["self-hosted","Linux","X64","ci-stack"]') }}
     steps:
       - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
 
       - name: Isolate Gradle user home
         run: echo "GRADLE_USER_HOME=${RUNNER_TEMP}/gradle-user-home" >> "$GITHUB_ENV"
@@ -28,18 +30,35 @@ jobs:
 
       - uses: gradle/actions/setup-gradle@v6
 
-      - name: Run tests and coverage report
-        run: ./gradlew test jacocoTestReport jacocoTestCoverageVerification
+      - name: Detect affected test modules
+        id: affected
+        env:
+          AFFECTED_GRADLE_TASK: test
+        run: bash .github/scripts/ci-affected-tasks.sh
+
+      - name: Run affected tests and coverage report
+        if: steps.affected.outputs.tasks != ''
+        env:
+          TASKS: ${{ steps.affected.outputs.tasks }}
+        run: |
+          readarray -t task_args <<<"$TASKS"
+          printf 'Running affected tests:\n%s\n' "$TASKS"
+          ./gradlew "${task_args[@]}" --parallel --max-workers=32
+          ./gradlew jacocoTestReport jacocoTestCoverageVerification --parallel --max-workers=32
+
+      - name: No coverage required
+        if: steps.affected.outputs.tasks == ''
+        run: echo "No source or build changes require coverage."
 
       - name: Upload coverage HTML report
-        if: always()
+        if: always() && steps.affected.outputs.tasks != ''
         uses: actions/upload-artifact@v7
         with:
           name: jacoco-html-report
           path: build/reports/jacoco/test/html
 
       - name: Upload coverage XML report
-        if: always()
+        if: always() && steps.affected.outputs.tasks != ''
         uses: actions/upload-artifact@v7
         with:
           name: jacoco-xml-report

.github/workflows/docker.yml

@@ -5,6 +5,10 @@ on:
     branches:
       - main
       - dev
+    paths-ignore:
+      - "**.md"
+      - "docs/**"
+      - ".github/ISSUE_TEMPLATE/**"
     tags:
       - "v*"
   workflow_dispatch:
@@ -29,6 +33,7 @@ jobs:
       image: ${{ steps.build-info.outputs.image }}
       labels: ${{ steps.meta.outputs.labels }}
       metadata-json: ${{ steps.meta.outputs.json }}
+      platform-matrix: ${{ steps.build-info.outputs.platform-matrix }}
       version: ${{ steps.build-info.outputs.version }}
 
     steps:
@@ -50,10 +55,16 @@ jobs:
           else
             image="${REGISTRY}/${GITHUB_REPOSITORY,,}"
           fi
+          if [[ "$GITHUB_REF_NAME" == "dev" ]]; then
+            platform_matrix='{"include":[{"platform":"linux/amd64","arch":"amd64"}]}'
+          else
+            platform_matrix='{"include":[{"platform":"linux/amd64","arch":"amd64"},{"platform":"linux/arm64","arch":"arm64"}]}'
+          fi
           {
             echo "image=$image"
             echo "version=$version"
             echo "build-time=$(date -u +'%Y-%m-%dT%H:%M:%SZ')"
+            echo "platform-matrix=$platform_matrix"
           } >> "$GITHUB_OUTPUT"
 
       - name: Extract metadata
@@ -83,12 +94,7 @@ jobs:
       packages: write
     strategy:
       fail-fast: false
-      matrix:
-        include:
-          - platform: linux/amd64
-            arch: amd64
-          - platform: linux/arm64
-            arch: arm64
+      matrix: ${{ fromJSON(needs.prepare-image.outputs.platform-matrix) }}
 
     steps:
       - name: Checkout
@@ -191,8 +197,12 @@ jobs:
         run: |
           cd "$DIGEST_DIR"
           mapfile -t digests < <(find . -maxdepth 1 -type f -printf '%f\n' | sort)
-          if [[ "${#digests[@]}" -ne 2 ]]; then
-            echo "Expected two platform digests, found ${#digests[@]}"
+          expected_digest_count=2
+          if [[ "$GITHUB_REF_NAME" == "dev" ]]; then
+            expected_digest_count=1
+          fi
+          if [[ "${#digests[@]}" -ne "$expected_digest_count" ]]; then
+            echo "Expected $expected_digest_count platform digest(s), found ${#digests[@]}"
             exit 1
           fi
 
@@ -227,8 +237,13 @@ jobs:
           VERSION: ${{ needs.prepare-image.outputs.version }}
         run: |
           platforms="$(docker buildx imagetools inspect "$IMAGE:$VERSION" --format '{{json .Manifest}}' | jq -r '.manifests[].platform | "\(.os)/\(.architecture)"' | sort -u)"
-          if [[ "$platforms" != $'linux/amd64\nlinux/arm64' ]]; then
-            printf 'Unexpected manifest platforms:\n%s\n' "$platforms"
+          expected_platforms=$'linux/amd64\nlinux/arm64'
+          if [[ "$GITHUB_REF_NAME" == "dev" ]]; then
+            expected_platforms='linux/amd64'
+          fi
+          if [[ "$platforms" != "$expected_platforms" ]]; then
+            printf 'Unexpected manifest platforms:\n%s\nExpected:\n%s\n' \
+              "$platforms" "$expected_platforms"
             exit 1
           fi
 

Dockerfile

@@ -2,16 +2,31 @@ FROM --platform=$BUILDPLATFORM eclipse-temurin:25-jdk-alpine AS builder
 ARG APP_VERSION=0.1.0
 ARG GITHUB_SHA=unknown
 ARG BUILD_TIME=unknown
+ARG GRADLE_MAX_WORKERS=32
 ENV GITHUB_SHA=$GITHUB_SHA
 ENV BUILD_TIME=$BUILD_TIME
 WORKDIR /app
 COPY gradlew ./
 COPY gradle/ ./gradle/
 RUN ./gradlew --version --no-daemon -q
 COPY build.gradle.kts gradle.properties settings.gradle.kts* ./
-RUN ./gradlew dependencies --no-daemon -q || true
 COPY src/ ./src/
-RUN ./gradlew shadowJar --no-daemon -q -PappVersion="$APP_VERSION"
+COPY server-admin/ ./server-admin/
+COPY server-auth/ ./server-auth/
+COPY server-cache/ ./server-cache/
+COPY server-core/ ./server-core/
+COPY server-db/ ./server-db/
+COPY server-domain/ ./server-domain/
+COPY server-downloader/ ./server-downloader/
+COPY server-http/ ./server-http/
+COPY server-playback/ ./server-playback/
+COPY server-portability/ ./server-portability/
+COPY server-sabr/ ./server-sabr/
+COPY server-test-support/ ./server-test-support/
+COPY server-services/ ./server-services/
+COPY server-token-gateway/ ./server-token-gateway/
+RUN ./gradlew dependencies --no-daemon --parallel --max-workers="$GRADLE_MAX_WORKERS" -q || true
+RUN ./gradlew shadowJar --no-daemon --parallel --max-workers="$GRADLE_MAX_WORKERS" -q -PappVersion="$APP_VERSION"
 
 FROM eclipse-temurin:25-jre-alpine AS runner
 RUN apk upgrade --no-cache \