build-fastjet.yml

# SPDX-FileCopyrightText: 2026 The RISE Project
# SPDX-License-Identifier: MIT
---
# This workflow is based on: https://github.com/scikit-hep/fastjet/blob/v3.5.1.4/.github/workflows/wheels.yml
name: Build fastjet wheels (riscv64)

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version glob to (re)build; empty builds every version of docs/packages/fastjet.yaml not released yet'
        required: false
        default: ''
  pull_request:
    branches: [main]
    paths:
      - '.github/workflows/build-fastjet.yml'
      - 'docs/packages/fastjet.yaml'
      - 'patches/fastjet/**'
  push:
    branches: [main]
    paths:
      - '.github/workflows/build-fastjet.yml'
      - 'docs/packages/fastjet.yaml'
      - 'patches/fastjet/**'

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

permissions:
  contents: read  # to fetch code (actions/checkout)

env:
  MANYLINUX_RISCV64_IMAGE: quay.io/pypa/manylinux_2_39_riscv64

jobs:
  setup:
    uses: $/.github/workflows/_setup.yml
    with:
      package: fastjet
      version: ${{ inputs.version }}

  build_wheels:
    needs: [setup]
    if: needs.setup.outputs.versions != '[]'
    name: Build fastjet ${{ matrix.version }} ${{ matrix.python }}-manylinux_riscv64
    runs-on: ubuntu-24.04-riscv
    timeout-minutes: 360
    strategy:
      fail-fast: false
      matrix:
        version: ${{ fromJSON(needs.setup.outputs.versions) }}
        python: ["cp312", "cp313", "cp314", "cp314t"]
    env:
      FASTJET_VERSION: ${{ matrix.version }}

    steps:
      - name: Checkout fastjet ${{ env.FASTJET_VERSION }}
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          repository: scikit-hep/fastjet
          ref: v${{ env.FASTJET_VERSION }}
          submodules: recursive
          persist-credentials: false

      - name: Checkout python-wheels
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
        with:
          path: python-wheels
          persist-credentials: false

      - name: Patch fastjet source
        run: git apply python-wheels/patches/fastjet/${{ env.FASTJET_VERSION }}/*.patch

      - name: Build wheels
        uses: pypa/cibuildwheel@1828c10ab37f080699c7b81cea34097c684a7074  # v4.2.0
        with:
          output-dir: wheelhouse/
          only: ${{ matrix.python }}-manylinux_riscv64
        env:
          CIBW_MANYLINUX_RISCV64_IMAGE: ${{ env.MANYLINUX_RISCV64_IMAGE }}
          CIBW_CONFIG_SETTINGS: >
            "cmake.define.FASTJET_ENABLE_CGAL"="ON"
          # Licence notices of the CGAL and Boost headers compiled in by upstream's before-all.
          CIBW_BEFORE_BUILD: >-
            cp {project}/boost_1_88_0/LICENSE_1_0.txt {project}/LICENSE.boost &&
            cp /usr/local/share/doc/CGAL/LICENSE {project}/LICENSE.CGAL &&
            cp /usr/local/share/doc/CGAL/LICENSE.GPL {project}/LICENSE.CGAL.GPL &&
            cp /usr/local/share/doc/CGAL/LICENSE.LGPL {project}/LICENSE.CGAL.LGPL
          # CIBW_BEFORE_ALL_LINUX replaces upstream's pyproject.toml [tool.cibuildwheel.linux]
          # before-all rather than adding to it, so it has to repeat that before-all's own
          # boost/CGAL install (the CIBW_BEFORE_BUILD license copy above depends on it) in
          # addition to the rustup install below.
          # The `test` extra (cp312/313/314) pulls in graphed, a maturin/PyO3 package with no
          # riscv64 wheel. maturin's own Rust auto-install (puccinialin) computes the wrong rustup
          # target triple for riscv64 and fails, so install a working toolchain via rustup.rs
          # before it gets the chance to try, same as build-minijinja.yml/build-qoi.yml.
          CIBW_BEFORE_ALL_LINUX: >-
            curl -L https://archives.boost.io/release/1.88.0/source/boost_1_88_0.tar.bz2 -o boost_1_88_0.tar.bz2 &&
            tar --bzip2 -xf boost_1_88_0.tar.bz2 &&
            mv boost_1_88_0/boost /usr/include/boost &&
            curl -L https://github.com/CGAL/cgal/releases/download/v6.0.1/CGAL-6.0.1-library.zip -o CGAL-6.0.1-library.zip &&
            unzip -q CGAL-6.0.1-library.zip &&
            mkdir CGAL-6.0.1/build &&
            cmake -S CGAL-6.0.1 -B CGAL-6.0.1/build -DCMAKE_BUILD_TYPE="Release" &&
            cmake --build CGAL-6.0.1/build --clean-first &&
            cmake --install CGAL-6.0.1/build &&
            rm -r CGAL-6.0.1 CGAL-6.0.1-library.zip &&
            curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
          # Our registry carries awkward-cpp 56, not PyPI's newest 57: stay on awkward 2.13.0.
          CIBW_ENVIRONMENT: >-
            SETUPTOOLS_SCM_PRETEND_VERSION_FOR_FASTJET=${{ env.FASTJET_VERSION }}
            PATH="$PATH:$HOME/.cargo/bin"
            PIP_EXTRA_INDEX_URL=https://pypi.riseproject.dev/simple/
            PIP_ONLY_BINARY=numpy,awkward-cpp,pyarrow,pandas,boost-histogram
          # pandas (via dask-awkward[test]) has no free-threaded riscv64 wheel, so cp314t gets
          # upstream's `test` extra minus dask-awkward's own [test] extra. Keep dask, dask-awkward
          # and distributed in the same pip call: cibuildwheel installs the wheel's extras and
          # test-requires in two separate pip runs, and splitting them let the second run pull
          # distributed 2026.8.0, which upgraded dask past dask-awkward 2026.2.1's dask<2025.4.0
          # pin and broke test_008-dask.py ("Cannot fuse tasks with multiple outputs").
          CIBW_TEST_EXTRAS: ${{ matrix.python == 'cp314t' && 'dev' || 'test' }}
          CIBW_TEST_REQUIRES: ${{ matrix.python == 'cp314t' && 'uproot>=5 dask>=2023.4.0 dask-awkward>=2023.4.2 distributed>=2023.4.0' || '' }}

      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        with:
          name: fastjet-${{ env.FASTJET_VERSION }}-${{ matrix.python }}-manylinux_riscv64
          path: wheelhouse/*.whl
          if-no-files-found: error

      - name: Check the wheel ships the extensions and the bundled licences
        run: |
          python3 - wheelhouse/*.whl <<'EOF'
          import sys, zipfile

          names = zipfile.ZipFile(sys.argv[1]).namelist()
          for mod in ("fastjet/_ext.", "fastjet/_swig/_fastjet_swig."):
              assert any(n.startswith(mod) and n.endswith(".so") for n in names), mod
          for lib in ("fastjet", "fastjettools", "fastjetplugins", "siscone", "fastjetcontribfragile"):
              assert f"fastjet/lib64/lib{lib}.so" in names, lib
          assert not any(n.startswith("fastjet.libs/") for n in names), names
          licences = {n.split(".dist-info/licenses/", 1)[1] for n in names if ".dist-info/licenses/" in n} - {""}
          for want in ("LICENSE", "LICENSE.boost", "LICENSE.CGAL", "LICENSE.CGAL.GPL", "LICENSE.CGAL.LGPL",
                       "extern/fastjet-core/COPYING", "extern/fastjet-core/plugins/SISCone/siscone/COPYING",
                       "extern/fastjet-contrib/COPYING", "extern/fastjet-contrib/Nsubjettiness/COPYING"):
              assert want in licences, (want, sorted(licences))
          print(sys.argv[1], len(licences), "licence files ok")
          EOF

  publish:
    name: Publish fastjet ${{ matrix.version }}
    needs: [setup, build_wheels]
    if: needs.setup.outputs.versions != '[]'
    strategy:
      fail-fast: false
      matrix:
        version: ${{ fromJSON(needs.setup.outputs.versions) }}
    permissions:
      contents: write
      pull-requests: write
    uses: $/.github/workflows/_publish-wheel.yml
    secrets:
      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
    with:
      artifact-pattern: fastjet-${{ matrix.version }}-*-manylinux_riscv64