Exclude multicast and broadcast on WinDivert's filter #1090
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - 'v[0-9]+.[0-9]+.[0-9]+' | |
| pull_request: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| test: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| include: | |
| - os: windows-latest | |
| rust: "1.80" # MSRV | |
| args: --exclude macos-certificate-truster | |
| - os: macos-latest | |
| rust: "1.80" | |
| args: --exclude windows-redirector | |
| - os: ubuntu-latest | |
| rust: stable | |
| args: --exclude windows-redirector --exclude macos-certificate-truster | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Rust toolchain | |
| run: rustup toolchain install ${{ matrix.rust }} --profile minimal | |
| - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5 | |
| timeout-minutes: 2 | |
| continue-on-error: true | |
| # PyO3 wants recent Python on Windows. | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version-file: .github/python-version.txt | |
| - name: Run "cargo check" | |
| # the action-rs/cargo action adds inline annotations for "cargo check" output | |
| uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72 | |
| with: | |
| toolchain: ${{ matrix.rust }} | |
| command: check | |
| args: --workspace --verbose ${{ matrix.args }} | |
| - name: Run "cargo test" | |
| # the action-rs/cargo action adds inline annotations for "cargo test" output | |
| uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72 | |
| with: | |
| toolchain: ${{ matrix.rust }} | |
| command: test | |
| args: --workspace --verbose ${{ matrix.args }} | |
| build: | |
| strategy: | |
| matrix: | |
| include: | |
| - name: windows-x86_64 | |
| os: windows-latest | |
| - name: linux-x86_64 | |
| os: ubuntu-latest | |
| args: --compatibility manylinux2014 --zig --sdist | |
| - name: linux-arm64 | |
| os: ubuntu-latest | |
| target: aarch64-unknown-linux-gnu | |
| args: --compatibility manylinux2014 --zig --target aarch64-unknown-linux-gnu | |
| - name: macos-universal | |
| os: macos-latest | |
| target: aarch64-apple-darwin x86_64-apple-darwin | |
| args: --target universal2-apple-darwin | |
| runs-on: ${{ matrix.os }} | |
| name: build mitmproxy-rs (${{ matrix.name }}) | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - run: rustup toolchain install stable --profile minimal | |
| - run: rustup default stable | |
| - if: matrix.target | |
| run: rustup target add ${{ matrix.target }} | |
| - run: rustup show | |
| - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5 | |
| timeout-minutes: 2 | |
| continue-on-error: true | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version-file: .github/python-version.txt | |
| - if: runner.os == 'Linux' | |
| name: Install maturin[zig] from PyPI | |
| uses: install-pinned/maturin-with-zig@4804d730717f28b7565e71e68e5c9fe8c4f9b089 | |
| - if: runner.os != 'Linux' | |
| name: Install maturin from PyPI | |
| uses: install-pinned/maturin@ab13013f30551a87b56c6a9c2bdd7b6287581def | |
| - if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') | |
| run: python .github/scripts/pin-versions.py | |
| - run: maturin build --release ${{ matrix.args }} | |
| working-directory: ./mitmproxy-rs | |
| # ensure that sdist is building. | |
| # We do this here instead of a separate job because we don't want to wait for the entire matrix. | |
| - if: contains(matrix.args, 'sdist') | |
| run: pip install target/wheels/*.tar.gz | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: wheels-${{ matrix.name }} | |
| path: target/wheels | |
| build-macos-app: | |
| runs-on: macos-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/cache@v4 | |
| id: cache-app | |
| with: | |
| path: mitmproxy-macos/redirector/dist/ | |
| key: macos-${{ hashFiles('mitmproxy-macos/redirector/**', '.github/scripts/build-macos-redirector.sh') }} | |
| - if: steps.cache-app.outputs.cache-hit != 'true' || hashFiles('mitmproxy-macos/redirector/dist/Mitmproxy Redirector.app.tar') == '' | |
| run: $GITHUB_WORKSPACE/.github/scripts/build-macos-redirector.sh | |
| working-directory: mitmproxy-macos/redirector | |
| env: | |
| APPLE_ID: ${{ secrets.APPLE_ID }} | |
| APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }} | |
| APPLE_PROVISIONING_PROFILE_APP: ${{ secrets.APPLE_PROVISIONING_PROFILE_APP }} | |
| APPLE_PROVISIONING_PROFILE_EXT: ${{ secrets.APPLE_PROVISIONING_PROFILE_EXT }} | |
| APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }} | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: macos-app | |
| path: mitmproxy-macos/redirector/dist/ | |
| build-os-wheels: | |
| needs: build-macos-app | |
| strategy: | |
| matrix: | |
| include: | |
| - os: windows | |
| build-rust: --package windows-redirector | |
| - os: macos | |
| build-rust: --package macos-certificate-truster | |
| runs-on: ${{ matrix.os }}-latest | |
| name: build mitmproxy-${{ matrix.os }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # Build Rust | |
| - uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5 | |
| timeout-minutes: 2 | |
| continue-on-error: true | |
| - run: rustup toolchain install stable --profile minimal | |
| - run: rustup default stable | |
| - if: runner.os == 'macOS' | |
| run: rustup target add aarch64-apple-darwin x86_64-apple-darwin | |
| - if: runner.os == 'macOS' | |
| run: | | |
| cargo build --release ${{ matrix.build-rust }} --target x86_64-apple-darwin | |
| cargo build --release ${{ matrix.build-rust }} --target aarch64-apple-darwin | |
| lipo -create -output target/release/macos-certificate-truster target/x86_64-apple-darwin/release/macos-certificate-truster target/aarch64-apple-darwin/release/macos-certificate-truster | |
| - if: runner.os != 'macOS' | |
| run: cargo build --release ${{ matrix.build-rust }} | |
| # Download macOS app | |
| - if: runner.os == 'macOS' | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: macos-app | |
| path: mitmproxy-macos/redirector/dist/ | |
| # Build & upload wheel | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version-file: .github/python-version.txt | |
| - name: Install build from PyPI | |
| uses: install-pinned/build@fd74312bf8fa4a8e5db75511358065e3d99b17b0 | |
| - run: python -m build --wheel ./mitmproxy-${{ matrix.os }} --outdir target/wheels/ | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: wheels-os-${{ runner.os }} | |
| path: target/wheels | |
| check: | |
| if: always() | |
| needs: | |
| - test | |
| - build | |
| - build-os-wheels | |
| uses: mhils/workflows/.github/workflows/alls-green.yml@main | |
| with: | |
| jobs: ${{ toJSON(needs) }} | |
| deploy: | |
| uses: mhils/workflows/.github/workflows/python-deploy.yml@v11 | |
| needs: check | |
| if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') | |
| with: | |
| artifact-pattern: wheels-* | |
| artifact-merge-multiple: true | |
| # repository: testpypi | |
| # environment: deploy-testpypi | |
| secrets: | |
| password: ${{ secrets.PYPI_TOKEN }} |