CI: Align workflow with configure.ac (recursive submodules, v2 Linux job, drop x32)

.github/workflows/ci_new.yml

@@ -0,0 +1,265 @@
+name: Quality Assurance new
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  build-linux:
+    name: Linux (${{ matrix.platform.label }}, ${{ matrix.compiler.label }}, ${{ matrix.configure.label }})
+
+    # Ubuntu 24.04 does not provide native 32-bit (i386) installation images.
+    # Only amd64 (x86_64) is officially supported. 32-bit has been removed from this matrix.
+    runs-on: ubuntu-24.04
+
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - { label: "x64", arch: "amd64", configure: "" }
+
+        compiler:
+          - { label: "gcc",   cc: "gcc",   cxx: "g++" }
+          - { label: "clang", cc: "clang", cxx: "clang++" }
+
+        configure:
+          - { label: "with parser generation", opt: "--enable-parser-generation" }
+          - { label: "without curl",    opt: "--without-curl" }
+          - { label: "without lua",     opt: "--without-lua" }
+          - { label: "without maxmind", opt: "--without-maxmind" }
+          - { label: "without libxml",  opt: "--without-libxml" }
+          - { label: "without geoip",   opt: "--without-geoip" }
+          - { label: "without ssdeep",  opt: "--without-ssdeep" }
+          - { label: "with lmdb",       opt: "--with-lmdb" }
+          - { label: "with pcre2 (default)", opt: "" }
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Install dependencies
+        run: |
+          sudo apt-get update -y -qq
+          sudo apt-get install -y \
+            libyajl-dev \
+            libcurl4-openssl-dev \
+            liblmdb-dev \
+            liblua5.2-dev \
+            libmaxminddb-dev \
+            libpcre2-dev \
+            libxml2-dev \
+            libfuzzy-dev \
+            pcre2-utils \
+            bison \
+            flex \
+            pkg-config
+
+
+      - name: Run build preparation script
+        run: ./build.sh
+
+      - name: Configure
+        env:
+          CC: ${{ matrix.compiler.cc }}
+          CXX: ${{ matrix.compiler.cxx }}
+        run: ./configure ${{ matrix.platform.configure }} ${{ matrix.configure.opt }} --enable-assertions=yes
+
+      - uses: ammaraskar/gcc-problem-matcher@master
+
+      - name: Compile
+        run: make -j "$(nproc)"
+
+      - name: Run tests
+        run: make check
+
+  build-macos:
+    name: macOS (${{ matrix.configure.label }})
+    runs-on: macos-15
+
+    strategy:
+      fail-fast: false
+      matrix:
+        configure:
+          - { label: "with parser generation", opt: "--enable-parser-generation" }
+          - { label: "without curl",    opt: "--without-curl" }
+          - { label: "without lua",     opt: "--without-lua" }
+          - { label: "without maxmind", opt: "--without-maxmind" }
+          - { label: "without libxml",  opt: "--without-libxml" }
+          - { label: "without geoip",   opt: "--without-geoip" }
+          - { label: "without ssdeep",  opt: "--without-ssdeep" }
+          - { label: "with lmdb",       opt: "--with-lmdb" }
+          - { label: "with pcre2 (default)", opt: "" }
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Install dependencies
+        # curl and pcre2 are typically already available in the macOS runner image
+        run: |
+          brew install autoconf \
+                       automake \
+                       libtool \
+                       yajl \
+                       lmdb \
+                       lua \
+                       libmaxminddb \
+                       libxml2 \
+                       ssdeep \
+                       pcre \
+                       bison \
+                       flex
+
+      - name: Run build preparation script
+        run: ./build.sh
+
+      - name: Configure
+        run: ./configure ${{ matrix.configure.opt }} --enable-assertions=yes
+
+      - uses: ammaraskar/gcc-problem-matcher@master
+
+      - name: Compile
+        run: make -j "$(sysctl -n hw.logicalcpu)"
+
+      - name: Run tests
+        run: make check
+
+  build-windows:
+    name: Windows (${{ matrix.platform.label }}, ${{ matrix.configure.label }})
+    runs-on: windows-2025
+
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - { label: "x64", arch: "x86_64" }
+        configuration: [Release]
+        configure:
+          - { label: "full",             opt: "" }
+          - { label: "without curl",     opt: "-DWITH_CURL=OFF" }
+          - { label: "without lua",      opt: "-DWITH_LUA=OFF" }
+          - { label: "without maxmind",  opt: "-DWITH_MAXMIND=OFF" }
+          - { label: "without libxml",   opt: "-DWITH_LIBXML2=OFF" }
+          - { label: "with lmdb",        opt: "-DWITH_LMDB=ON" }
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Install Conan package manager
+        run: |
+          pip3 install conan --upgrade
+          conan profile detect
+
+      - uses: ammaraskar/msvc-problem-matcher@master
+
+      - name: Build project
+        shell: cmd
+        run: vcbuild.bat ${{ matrix.configuration }} ${{ matrix.platform.arch }} NO_ASAN "${{ matrix.configure.opt }}"
+
+      - name: Prepare test environment
+        working-directory: build\win32\build\${{ matrix.configuration }}
+        env:
+          BASE_DIR: ..\..\..\..
+        shell: cmd
+        run: |
+          copy unit_tests.exe %BASE_DIR%\test
+          copy regression_tests.exe %BASE_DIR%\test
+          copy libModSecurity.dll %BASE_DIR%\test
+          copy %BASE_DIR%\unicode.mapping %BASE_DIR%\test
+          md \tmp
+          md \bin
+          copy "C:\Program Files\Git\usr\bin\echo.exe" \bin
+          copy "C:\Program Files\Git\usr\bin\echo.exe" \bin\echo
+
+      - name: Disable unsupported tests on Windows
+        working-directory: test\test-cases\regression
+        shell: cmd
+        run: |
+          jq "map(if .title == \"Test match variable (1/n)\" then .enabled = 0 else . end)" issue-2423-msg-in-chain.json > tmp.json && move /Y tmp.json issue-2423-msg-in-chain.json
+          jq "map(if .title == \"Test match variable (2/n)\" then .enabled = 0 else . end)" issue-2423-msg-in-chain.json > tmp.json && move /Y tmp.json issue-2423-msg-in-chain.json
+          jq "map(if .title == \"Test match variable (3/n)\" then .enabled = 0 else . end)" issue-2423-msg-in-chain.json > tmp.json && move /Y tmp.json issue-2423-msg-in-chain.json
+          jq "map(if .title == \"Variable offset - FILES_NAMES\" then .enabled = 0 else . end)" offset-variable.json > tmp.json && move /Y tmp.json offset-variable.json
+
+      - name: Run tests
+        working-directory: build\win32\build
+        run: ctest -C ${{ matrix.configuration }} --output-on-failure
+
+  cppcheck:
+    name: Static analysis (cppcheck)
+    runs-on: macos-15
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+      - name: Install cppcheck
+        run: |
+          brew install autoconf automake libtool cppcheck
+
+      - name: Configure project
+        run: |
+          ./build.sh
+          ./configure
+
+      - name: Run cppcheck
+        run: make check-static
+
+  cppcheck-linux:
+    name: Static analysis (cppcheck, Linux, debian:sid)
+    runs-on: ubuntu-latest
+    container: debian:trixie
+
+    steps:
+      - name: Install basic tools
+        run: |
+          apt-get update
+          apt-get install -y git
+
+      - name: Mark repo as safe for git
+        run: git config --global --add safe.directory $GITHUB_WORKSPACE
+
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          submodules: recursive
+
+
+      - name: Install dependencies (v2 style)
+        run: |
+          apt-get update
+          apt-get install -y \
+            autoconf \
+            automake \
+            build-essential \
+            libtool \
+            pkg-config \
+            cppcheck \
+            libyajl-dev \
+            libcurl4-openssl-dev \
+            liblmdb-dev \
+            liblua5.2-dev \
+            libmaxminddb-dev \
+            libpcre2-dev \
+            libxml2-dev \
+            libfuzzy-dev \
+            pcre2-utils \
+            bison \
+            flex
+
+      - name: Run build preparation script
+        run: ./build.sh
+
+      - name: Configure project
+        run: ./configure
+
+      - name: Run cppcheck
+        run: make check-static