CI/tasks: ensure go.mod/sum and generated pb code are up-to-date

ci: use newer protoc

ci: go 1.21 to match our go.mod

ci: actions/setup-go@v4

.github/workflows/ci.yaml

@@ -20,9 +20,9 @@ jobs:
           token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Protoc
-        uses: arduino/setup-protoc@v1
+        uses: arduino/setup-protoc@v2
         with:
-          version: '3.x'
+          version: '23.4'
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Taskfile
@@ -33,8 +33,8 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: '1.20'
-          cache: true
+          go-version: '1.21'
+          check-latest: true
 
       - name: Install dependencies
         env:
@@ -45,13 +45,17 @@ jobs:
           task install:deps
           go mod download
 
-      - name: Compile Protobuf
+      - name: Check tidiness of go.mod and go.sum
         run: |
-          task pb:compile:v1
+          ./scripts/mods/check_tidy
+
+      - name: Ensure generated protobuf Go source is up-to-date
+        run: |
+          ./scripts/proto/check_up
 
       - name: Compile packages, apps, and specs
         run: |
-          go build ./pkg/... ./cmd/... ./test/specifications/...
+          go build -mod=readonly ./pkg/... ./cmd/... ./test/specifications/...
 
       - name: Lint
         uses: golangci/golangci-lint-action@v3
@@ -76,9 +80,9 @@ jobs:
           token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Protoc
-        uses: arduino/setup-protoc@v1
+        uses: arduino/setup-protoc@v2
         with:
-          version: '3.x'
+          version: '23.4'
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Taskfile
@@ -87,10 +91,10 @@ jobs:
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Setup Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
-          go-version: '1.20'
-          cache: true
+          go-version: '1.21'
+          check-latest: true
 
       - name: Install dependencies
         env:

.github/workflows/on-main.yml

@@ -19,9 +19,9 @@ jobs:
           token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Protoc
-        uses: arduino/setup-protoc@v1
+        uses: arduino/setup-protoc@v2
         with:
-          version: '3.x'
+          version: '23.4'
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Taskfile
@@ -30,10 +30,10 @@ jobs:
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Setup Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
-          go-version: '1.20'
-          cache: true
+          go-version: '1.21'
+          check-latest: true
 
       - name: Install dependencies
         env:

.github/workflows/release.yaml

@@ -18,9 +18,9 @@ jobs:
           token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Protoc
-        uses: arduino/setup-protoc@v1
+        uses: arduino/setup-protoc@v2
         with:
-          version: '3.x'
+          version: '23.4'
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Install Taskfile
@@ -29,10 +29,10 @@ jobs:
           repo-token: ${{ secrets.KWIL_MACH_SECRET }}
 
       - name: Setup Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
-          go-version: '1.19.0'
-          cache: true
+          go-version: '1.21'
+          check-latest: true
 
       - name: Install dependencies
         env:

Taskfile.yml

@@ -33,7 +33,12 @@ tasks:
       - git submodule update --init
 
   git:sync:
-    desc: Sync git submodules
+    desc: Sync git submodules to required revisions
+    cmds:
+      - git submodule update
+
+  git:advance:
+    desc: Advance git submodules to latest main revision
     cmds:
       - git submodule update --remote
 

scripts/mods/check_tidy

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+go mod tidy
+
+STATUS=$(git status go.mod go.sum --porcelain)
+
+if [[ -n "$STATUS" ]]; then
+    echo "Changes detected in 'go.mod' or 'go.sum' after running 'go mod tidy'!"
+    exit 1
+else
+    echo "No changes detected in 'go.mod' or 'go.sum'."
+    exit 0
+fi

scripts/proto/check_up

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+# This script ensures that the generated protobuf .go files are up-to-date.
+
+pushd $(git rev-parse --show-toplevel)  > /dev/null
+
+# Force regenerate of pb Go code.
+task -f pb:compile:v1
+
+STATUS=$(git status api/protobuf/tx/v1 --porcelain)
+
+popd > /dev/null
+
+if [[ -n "$STATUS" ]]; then
+    echo "Changes detected in api/protobuf/tx/v1 !"
+    exit 1
+else
+    echo "No changes detected in the directory."
+    exit 0
+fi
+
+popd