build-ios-mac.yml

name: C/C++ CI for iOS

on:
  push:
    branches:
    - master
    - main
    - dev
    - dev/*
    - release/*
    - buildme/*

  pull_request:
    branches:
    - master
    - main
    - dev

  schedule:
  - cron: 0 2 * * 1-5


# Least-privilege GITHUB_TOKEN scope: this workflow only checks out source
# and runs the iOS/macOS build matrix. Explicit block satisfies CodeQL rule
# actions/missing-workflow-permissions if Actions analysis is enabled.
permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  build:
    strategy:
      matrix:
        os: [macos-14, macos-15]
        config: [release, debug]
        simulator: ["'iPhone 15'", "'iPad Pro (11-inch) (4th generation)'", "'iPhone 16'", "'iPad Air 11-inch (M2)'"]
        exclude:
          - os: macos-14
            simulator: "'iPhone 16'"
          - os: macos-14
            simulator: "'iPad Air 11-inch (M2)'"
          - os: macos-15
            simulator: "'iPhone 15'"
          - os: macos-15
            simulator: "'iPad Pro (11-inch) (4th generation)'"
    runs-on: ${{ matrix.os }}
    timeout-minutes: 60
    env:
      CMAKE_POLICY_VERSION_MINIMUM: "3.5"
    steps:
    - name: Grant write permissions to /usr/local
      run: |
        sudo chown -R $USER:staff /usr/local
    - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
    - name: Initialize googletest
      run: git submodule update --init --depth=1 third_party/googletest
    - name: build
      run: |
        if [[ "${{ matrix.os }}" == "macos-14" ]]; then
          export CMAKE_OSX_DEPLOYMENT_TARGET=13.0;
        elif [[ "${{ matrix.os }}" == "macos-15" ]]; then
          export CMAKE_OSX_DEPLOYMENT_TARGET=15.0;
        fi
        ./build-tests-ios.sh ${{ matrix.config }} ${{ matrix.simulator }}