Merge branch 'main' into tim/java-parser-jabref-fixes

Author: timtebeek

.github/workflows/ci.yml

@@ -20,18 +20,45 @@ concurrency:
 
 jobs:
   build:
-    uses: openrewrite/gh-automation/.github/workflows/ci-gradle.yml@main
-    with:
-      java_version: |
-        25
-        21
-    secrets:
-      gradle_enterprise_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-      sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
-      sonatype_token: ${{ secrets.SONATYPE_TOKEN}}
-      ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
-      ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
-      OPS_GITHUB_ACTIONS_WEBHOOK: ${{ secrets.OPS_GITHUB_ACTIONS_WEBHOOK }}
-      node_auth_token: ${{ secrets.NPM_TOKEN }}
-      pypi_token: ${{ secrets.PYPI_OPENREWRITE_PUBLISH }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    if: github.event_name != 'schedule' || github.repository_owner == 'openrewrite' || github.repository_owner == 'moderneinc'
+    steps:
+      - uses: openrewrite/gh-automation/.github/actions/setup@main
+        with:
+          java_version: |
+            25
+            21
+          develocity_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
+
+      # Route Maven resolution through Moderne's Artifactory cache to avoid
+      # Maven Central rate-limiting (HTTP 404 + Retry-After) under parallel
+      # test load. Picked up by MavenSettingsAutoLoadingExtension at test time.
+      - uses: s4u/maven-settings-action@v3.1.0
+        with:
+          mirrors: '[{"id": "moderne-cache", "name": "Moderne Artifactory Cache", "mirrorOf": "*", "url": "https://artifactory.moderne.ninja/artifactory/moderne-cache-3/"}]'
+          servers: '[{"id": "moderne-cache", "username": "${{ secrets.ARTIFACTORY_USERNAME }}", "password": "${{ secrets.ARTIFACTORY_PASSWORD }}"}]'
+
+      - uses: openrewrite/gh-automation/.github/actions/build@main
+        env:
+          REWRITE_GRADLE_MIRROR_URL: https://artifactory.moderne.ninja/artifactory/moderne-cache-3/
+          REWRITE_GRADLE_MIRROR_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
+          REWRITE_GRADLE_MIRROR_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
+
+      - if: failure() && github.event_name == 'schedule' && (github.repository_owner == 'openrewrite' || github.repository_owner == 'moderneinc')
+        uses: openrewrite/gh-automation/.github/actions/slack-failure@main
+        with:
+          webhook: ${{ secrets.OPS_GITHUB_ACTIONS_WEBHOOK }}
+
+      - if: >
+          github.event_name != 'pull_request' &&
+          github.ref == 'refs/heads/main' &&
+          (github.repository_owner == 'openrewrite' || github.repository_owner == 'moderneinc')
+        uses: openrewrite/gh-automation/.github/actions/publish-snapshots@main
+        with:
+          sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
+          sonatype_token: ${{ secrets.SONATYPE_TOKEN }}
+          ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
+          ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
+          node_auth_token: ${{ secrets.NPM_TOKEN }}
+          pypi_token: ${{ secrets.PYPI_OPENREWRITE_PUBLISH }}
+          nuget_api_key: ${{ secrets.NUGET_API_KEY }}

rewrite-go/.gitignore

@@ -1 +1,2 @@
-rewrite/test-classpath.txt
+test-classpath.txt
+/rpc

rewrite-go/Makefile

@@ -0,0 +1,16 @@
+.PHONY: test parity
+
+# Default test run — what CI executes. Build-tag-gated tests stay out.
+test:
+	go test ./...
+
+# Printer fidelity audit. Loads every fixture under
+# test/printer-corpus/, parses + prints, and asserts byte-equality.
+# Gated behind the `parityaudit` build tag so it never runs in CI;
+# devs invoke it manually when investigating printer regressions.
+#
+# Trade-off (per the eng review's P2 decision): corpus regressions ship
+# undetected by automation in exchange for fast iteration and simple
+# test infra. Re-evaluate if a corpus-detectable bug ever lands.
+parity:
+	go test -tags parityaudit ./pkg/printer/...

rewrite-go/PLAN.md

@@ -30,6 +30,12 @@ tasks.withType<Javadoc>().configureEach {
     exclude("**/G.java")
 }
 
+// Test fixtures for the GoMod conformance corpus are .gomod / .gosum / .json
+// files; none of these formats accept a leading license header.
+configure<nl.javadude.gradle.plugins.license.LicenseExtension> {
+    excludePatterns.addAll(listOf("**/*.gomod", "**/*.gosum", "**/*.json"))
+}
+
 val goBuild = tasks.register<Exec>("goBuild") {
     workingDir = projectDir
     // Use relative path to avoid absolute paths in cache key (Exec args are cache inputs)