ci: migrate from Travis CI to GitHub Actions

Replace Travis CI configuration with GitHub Actions workflows.
Add CI build workflow for Debian, Fedora, Ubuntu, and Archlinux.
Add release workflow for automated GitHub releases on tags.
Add dependabot configuration for GHA pin updates.
Remove obsolete .travis.yml.
remove .build.yml

10 files changed, 332 insertions, 200 deletions

diff --git a/.build.yml b/.build.yml
deleted file mode 100644
index c0591bf..0000000
--- a/.build.yml
+++ /dev/null
@@ -1,125 +0,0 @@
-##########################################################
-# THE FOLLOWING LINES IS USED BY docker-build
-##########################################################
-requires:
-  archlinux:
-    # Useful URL: https://git.archlinux.org/svntogit/community.git/tree/mate-polkit
-    - autoconf-archive
-    - clang
-    - gcc
-    - git
-    - gtk3
-    - libappindicator-gtk3
-    - make
-    - mate-common
-    - polkit
-    - which
-
-  debian:
-    # Useful URL: https://github.com/mate-desktop/debian-packages
-    # Useful URL: https://salsa.debian.org/debian-mate-team/mate-polkit
-    - autoconf-archive
-    - autopoint
-    - clang
-    - clang-tools
-    - cppcheck
-    - gcc
-    - git
-    - libappindicator3-dev
-    - libgtk-3-dev
-    - libpolkit-agent-1-dev
-    - libpolkit-gobject-1-dev
-    - make
-    - mate-common
-
-  fedora:
-    # Useful URL: https://src.fedoraproject.org/cgit/rpms/mate-polkit.git
-    - autoconf-archive
-    - clang
-    - clang-analyzer
-    - cppcheck-htmlreport
-    - gcc
-    - git
-    - gtk3-devel
-    - libappindicator-gtk3-devel
-    - make
-    - mate-common
-    - polkit-devel
-    - redhat-rpm-config
-
-  ubuntu:
-    - autoconf-archive
-    - autopoint
-    - clang
-    - clang-tools
-    - gcc
-    - git
-    - libappindicator3-dev
-    - libgtk-3-dev
-    - libpolkit-agent-1-dev
-    - libpolkit-gobject-1-dev
-    - make
-    - mate-common
-
-variables:
-  - 'CHECKERS="
-    -enable-checker deadcode.DeadStores
-    -enable-checker alpha.deadcode.UnreachableCode
-    -enable-checker alpha.core.CastSize
-    -enable-checker alpha.core.CastToStruct
-    -enable-checker alpha.core.IdenticalExpr
-    -enable-checker alpha.core.SizeofPtr
-    -enable-checker alpha.security.ArrayBoundV2
-    -enable-checker alpha.security.MallocOverflow
-    -enable-checker alpha.security.ReturnPtrRange
-    -enable-checker alpha.unix.SimpleStream
-    -enable-checker alpha.unix.cstring.BufferOverlap
-    -enable-checker alpha.unix.cstring.NotNullTerminated
-    -enable-checker alpha.unix.cstring.OutOfBounds
-    -enable-checker alpha.core.FixedAddr
-    -enable-checker security.insecureAPI.strcpy"'
-
-before_scripts:
-
-build_scripts:
-  - if [ ${DISTRO_NAME} == "debian" ];then
-  -     export CFLAGS+=" -Wsign-compare"
-  -     cppcheck --enable=warning,style,performance,portability,information,missingInclude .
-  - fi
-
-  - NOCONFIGURE=1 ./autogen.sh
-  - scan-build $CHECKERS ./configure --enable-compile-warnings=maximum
-  - if [ $CPU_COUNT -gt 1 ]; then
-  -     if [ ${DISTRO_NAME} == "debian" ];then
-  -         scan-build $CHECKERS --keep-cc --use-cc=clang --use-c++=clang++ -o html-report make -j $CPU_COUNT
-  -         make clean
-  -     fi
-  -     scan-build $CHECKERS --keep-cc -o html-report make -j $CPU_COUNT
-  - else
-  -     if [ ${DISTRO_NAME} == "debian" ];then
-  -         scan-build $CHECKERS --keep-cc --use-cc=clang --use-c++=clang++ -o html-report make
-  -         make clean
-  -     fi
-  -     scan-build $CHECKERS --keep-cc -o html-report make
-  - fi
-
-after_scripts:
-  - if [ ${DISTRO_NAME} == "fedora" ];then
-  -   cppcheck --xml --output-file=cppcheck.xml --enable=warning,style,performance,portability,information,missingInclude .
-  -   cppcheck-htmlreport --title=${REPO_NAME} --file=cppcheck.xml --report-dir=cppcheck-htmlreport
-  -   ./gen-index -l 20
-  - fi
-  - make distcheck
-
-releases:
-  draft: false
-  prerelease: false
-  checksum: true
-  file_glob: true
-  files: mate-polkit-*.tar.xz
-  github_release:
-    tags: true
-    overwrite: true
-    base_version: 1.20.0
-    notify_servers:
-      - https://release.mate-desktop.org/release
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..80851cd
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+# Enable dependabot to keep our GHA pins automatically
+# updated, so we don't fall too far behind in the future
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
diff --git a/.github/workflows/archlinux.sh b/.github/workflows/archlinux.sh
new file mode 100755
index 0000000..e5f090c
--- /dev/null
+++ b/.github/workflows/archlinux.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/bash
+
+set -eo pipefail
+
+# Use grouped output messages
+infobegin() {
+	echo "::group::${1}"
+}
+infoend() {
+	echo "::endgroup::"
+}
+
+# Required packages on Archlinux
+requires=(
+	ccache # Use ccache to speed up build
+	clang  # Build with clang on Archlinux
+	meson  # Used for meson build
+)
+
+# https://gitlab.archlinux.org/archlinux/packaging/packages/mate-polkit
+requires+=(
+	accountsservice
+	autoconf-archive
+	gcc
+	gettext
+	git
+	gobject-introspection
+	gtk3
+	make
+	mate-common
+	polkit
+	which
+)
+
+infobegin "Update system"
+pacman --noconfirm -Syu
+infoend
+
+infobegin "Install dependency packages"
+pacman --noconfirm -S ${requires[@]}
+infoend
diff --git a/.github/workflows/builds.sh b/.github/workflows/builds.sh
new file mode 100755
index 0000000..20c1ad5
--- /dev/null
+++ b/.github/workflows/builds.sh
@@ -0,0 +1,64 @@
+#!/usr/bin/bash
+
+set -e
+set -o pipefail
+
+CPUS=$(grep processor /proc/cpuinfo | wc -l)
+
+# Use grouped output messages
+infobegin() {
+	echo "::group::${1}"
+}
+infoend() {
+	echo "::endgroup::"
+}
+
+# Run meson first, then run autotools
+# Because meson dist requires a clean git workspace
+# Autotools will modify some files (such as po, etc.), making them dirty.
+if [ -f meson.build ]; then
+
+	infobegin "Configure (meson)"
+	meson setup _build --prefix=/usr
+	infoend
+
+	infobegin "Build (meson)"
+	meson compile -C _build
+	infoend
+
+	infobegin "Test (meson)"
+	ninja -C _build test
+	infoend
+
+	infobegin "Dist (meson)"
+	# Git safedirectory stop ninja dist
+	# https://github.com/git/git/commit/8959555cee7ec045958f9b6dd62e541affb7e7d9
+	# https://git-scm.com/docs/git-config/2.35.2#Documentation/git-config.txt-safedirectory
+	git config --global --add safe.directory ${PWD}
+	ninja -C _build dist
+	infoend
+fi
+
+if [ -f autogen.sh ]; then
+	infobegin "Configure (autotools)"
+	NOCONFIGURE=1 ./autogen.sh
+	./configure --prefix=/usr --enable-compile-warnings=maximum || {
+		cat config.log
+		exit 1
+	}
+	infoend
+
+	infobegin "Build (autotools)"
+	make -j ${CPUS}
+	infoend
+
+	infobegin "Check (autotools)"
+	make -j ${CPUS} check || {
+		true
+	}
+	infoend
+
+	infobegin "Distcheck (autotools)"
+	make -j ${CPUS} distcheck
+	infoend
+fi
diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml
new file mode 100644
index 0000000..b7d7864
--- /dev/null
+++ b/.github/workflows/builds.yml
@@ -0,0 +1,75 @@
+name: CI Build
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+  workflow_dispatch:
+
+# cancel already running builds of the same branch or pull request
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.head_ref || github.sha }}
+  cancel-in-progress: true
+
+
+jobs:
+  build:
+    name: Build on ${{matrix.container}} (using ${{matrix.cc}})
+    runs-on: ubuntu-latest
+    container:
+      image: ${{matrix.container}}
+
+    strategy:
+      fail-fast: false # don't cancel other jobs in the matrix if one fails
+      matrix:
+        container:
+          [
+            "debian:testing",
+            "fedora:latest",
+            "ubuntu:rolling",
+            "archlinux:latest",
+          ]
+        cc: ["gcc"]
+        cxx: ["g++"]
+        include:
+          - container: "archlinux:latest"
+            cc: "clang"
+            cxx: "clang++"
+
+    env:
+      # Speed up build with ccache
+      CC: ccache ${{ matrix.cc }}
+      CXX: ccache ${{ matrix.cxx }}
+      CONTAINER: ${{ matrix.container }}
+
+    steps:
+      - name: Setup environment variables
+        id: distro-name
+        shell: bash
+        run: |
+          split=(${CONTAINER//:/ })
+          distro=${split[0]}
+          short_sha=${SHA:0:8}
+          echo "DISTRO=$distro" | tee -a  $GITHUB_ENV
+      - name: Install git command
+        shell: bash
+        run: |
+          echo "::group::Install git ..."
+          apt-get update -qq && apt-get install --assume-yes git || true
+          dnf update -y && dnf install -y git || true
+          pacman --noconfirm -Sy git || true
+          echo "::endgroup::"
+      - name: Repository checkout
+        uses: actions/checkout@v5
+      - name: Install dependency packages
+        run: .github/workflows/${{ env.DISTRO }}.sh
+      - name: Enable ccache to speed up builds
+        uses: hendrikmuhs/[email protected]
+        with:
+          key: ${{ env.DISTRO }}-${{ matrix.cc }}
+
+      - name: Build the source code
+        run: .github/workflows/builds.sh
diff --git a/.github/workflows/debian.sh b/.github/workflows/debian.sh
new file mode 100755
index 0000000..f547f96
--- /dev/null
+++ b/.github/workflows/debian.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/bash
+
+set -eo pipefail
+
+# Use grouped output messages
+infobegin() {
+	echo "::group::${1}"
+}
+infoend() {
+	echo "::endgroup::"
+}
+
+# Required packages on Debian
+requires=(
+	ccache # Use ccache to speed up build
+	meson  # Used for meson build
+)
+
+# https://salsa.debian.org/debian-mate-team/mate-polkit
+requires+=(
+	autoconf-archive
+	autopoint
+	gcc
+	git
+	libappindicator3-dev
+	libgtk-3-dev
+	libpolkit-agent-1-dev
+	libpolkit-gobject-1-dev
+	make
+	mate-common
+)
+
+infobegin "Update system"
+apt-get update -qq
+infoend
+
+infobegin "Install dependency packages"
+env DEBIAN_FRONTEND=noninteractive \
+	apt-get install --assume-yes \
+	${requires[@]}
+infoend
diff --git a/.github/workflows/fedora.sh b/.github/workflows/fedora.sh
new file mode 100755
index 0000000..79ceaf6
--- /dev/null
+++ b/.github/workflows/fedora.sh
@@ -0,0 +1,38 @@
+#!/usr/bin/bash
+
+set -eo pipefail
+
+# Use grouped output messages
+infobegin() {
+	echo "::group::${1}"
+}
+infoend() {
+	echo "::endgroup::"
+}
+
+# Required packages on Fedora
+requires=(
+	ccache # Use ccache to speed up build
+	meson  # Used for meson build
+)
+
+# https://src.fedoraproject.org/cgit/rpms/mate-polkit.git
+requires+=(
+	autoconf-archive
+	gcc
+	git
+	gtk3-devel
+	libappindicator-gtk3-devel
+	make
+	mate-common
+	polkit-devel
+	redhat-rpm-config
+)
+
+infobegin "Update system"
+dnf update -y
+infoend
+
+infobegin "Install dependency packages"
+dnf install -y ${requires[@]}
+infoend
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..9474070
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,24 @@
+name: Release Version
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+jobs:
+  release:
+    name: Release New Version
+    runs-on: ubuntu-latest
+    steps:
+      - name: Repository checkout
+        uses: actions/checkout@v5
+
+      - name: Install dependency packages
+        run: sudo .github/workflows/ubuntu.sh
+
+      - name: Build the source code
+        run: .github/workflows/builds.sh autotools
+      - name: Create github release
+        run: |
+          gh release create ${{ github.ref_name }} --title ${{ github.ref_name }} --generate-notes mate-polkit-*.tar.xz
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/ubuntu.sh b/.github/workflows/ubuntu.sh
new file mode 100755
index 0000000..3ddc178
--- /dev/null
+++ b/.github/workflows/ubuntu.sh
@@ -0,0 +1,41 @@
+#!/usr/bin/bash
+
+set -eo pipefail
+
+# Use grouped output messages
+infobegin() {
+	echo "::group::${1}"
+}
+infoend() {
+	echo "::endgroup::"
+}
+
+# Required packages on Ubuntu
+requires=(
+	ccache # Use ccache to speed up build
+	meson  # Used for meson build
+)
+
+# https://git.launchpad.net/ubuntu/+source/mate-polkit/tree/debian/control
+requires+=(
+	autoconf-archive
+	autopoint
+	gcc
+	git
+	libappindicator3-dev
+	libgtk-3-dev
+	libpolkit-agent-1-dev
+	libpolkit-gobject-1-dev
+	make
+	mate-common
+)
+
+infobegin "Update system"
+apt-get update -y
+infoend
+
+infobegin "Install dependency packages"
+env DEBIAN_FRONTEND=noninteractive \
+	apt-get install --assume-yes \
+	${requires[@]}
+infoend
diff --git a/.travis.yml b/.travis.yml
deleted file mode 100644
index cefbe5f..0000000
--- a/.travis.yml
+++ /dev/null
@@ -1,75 +0,0 @@
-# vim: set ts=2 sts=2 sw=2 expandtab :
-dist: jammy
-language: shell
-os: linux
-services:
-  - docker
-addons:
-  apt:
-    packages:
-      - python3-pip
-      - python3-setuptools
-
-branches:
-  except:
-    - gh-pages
-
-before_install:
-  - curl -Ls -o docker-build https://github.com/mate-desktop/mate-dev-scripts/raw/master/travis/docker-build
-  - curl -Ls -o gen-index https://github.com/mate-desktop/mate-dev-scripts/raw/master/travis/gen-index.sh
-  - chmod +x docker-build gen-index
-
-install:
-  - pip3 install PyGithub
-  - ./docker-build --name ${DISTRO} --config .build.yml --install
-
-script:
-  - ./docker-build --name ${DISTRO} --verbose --config .build.yml --build scripts
-
-notifications:
-  irc:
-    if: (tag OR branch = master) AND
-        repo = "mate-desktop/mate-polkit"
-    channels:
-      - "irc.libera.chat#mate-dev"
-    template:
-      - "[%{repository_name}] %{author}: %{commit_subject}"
-      - "[%{branch}] %{commit} %{message} %{build_url}"
-    on_success: never
-    on_failure: always
-
-deploy:
-  - provider: pages
-    edge: true
-    token: $GITHUB_TOKEN
-    keep_history: false
-    committer_from_gh: true
-    target_branch: gh-pages
-    local_dir: html-report
-    strategy: git
-    on:
-      all_branches: true
-      condition: ${DISTRO} =~ ^fedora.*$
-  - provider: script
-    edge: true
-    script: ./docker-build --verbose --config .build.yml --release github
-    on:
-      tags: true
-      condition: "${TRAVIS_TAG} =~ ^v.*$ && ${DISTRO} =~ ^fedora.*$"
-
-after_success:
-  - 'if [[ "$TRAVIS_SECURE_ENV_VARS" == "true" && "$TRAVIS_PULL_REQUEST" != "false" && ${DISTRO} =~ ^fedora.*$ ]]; then
-        REPO_SLUG_ARRAY=(${TRAVIS_REPO_SLUG//\// });
-        REPO_NAME=${REPO_SLUG_ARRAY[1]};
-        URL="https://${REPO_NAME}.mate-desktop.dev";
-        COMMENT="Code analysis completed";
-        curl -H "Authorization: token $GITHUB_TOKEN" -X POST
-           -d "{\"state\": \"success\", \"description\": \"$COMMENT\", \"context\":\"scan-build\", \"target_url\": \"$URL\"}"
-           https://api.github.com/repos/${TRAVIS_REPO_SLUG}/statuses/${TRAVIS_PULL_REQUEST_SHA};
-     fi'
-
-env:
-#  - DISTRO="archlinux:latest"
-  - DISTRO="debian:testing"
-  - DISTRO="fedora:latest"
-#  - DISTRO="ubuntu:rolling"