test: complete per-package e2e migration — all 13 products, secrets-injected configs

.github/workflows/all_plugins.yaml

@@ -22,11 +22,24 @@ permissions:
   contents: read
 
 jobs:
+  # Home for every check that needs nothing but a bootstrapped workspace. The
+  # pub dry run, the example `pub get` and the license-header check used to be
+  # three separate jobs; each ran for a couple of minutes and paid a full
+  # checkout + setup + bootstrap to get there, so they are steps here instead.
+  # Analysis runs first - it is the signal people wait on - and the cheap
+  # checks follow with `if: always()`, so one failing check still reports the
+  # others, exactly as separate jobs did.
   analyze:
-    timeout-minutes: 50
+    # Covers the folded checks as well as analysis itself.
+    timeout-minutes: 70
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+        with:
+          # flutter_plugin_tools resolves a git base ref even when analyzing
+          # everything; a shallow clone has neither history nor origin/main
+          # ('fatal: Not a valid object name main'). Same as the format job.
+          fetch-depth: 0
       - uses: ./.github/actions/setup-flutterfire
         with:
           node: 'false'
@@ -38,47 +51,55 @@ jobs:
           dart run scripts/generate_versions_spm.dart
           git diff --exit-code -- ':(glob)packages/**/Package.swift'
       - name: 'Run Analyze'
+        # flutter_plugin_tools is the flutter/packages-standard analyzer driver
+        # (already used by the format job). The custom-analysis config lists
+        # every package: FlutterFire manages analysis options centrally, which
+        # the tool otherwise treats as unexpected. publish-check was evaluated
+        # too but does not fit this repo's release model (it errors on
+        # already-published versions and requires AUTHORS files), so the pub
+        # dry-run below stays on melos.
         run: |
           dart ./.github/workflows/scripts/generate-dummy-firebase-configs.dart
-          melos analyze-ci
+          dart pub global activate flutter_plugin_tools 0.14.2
+          dart pub global run flutter_plugin_tools analyze \
+            --base-branch=origin/main \
+            --custom-analysis=.github/workflows/config/custom_analysis.yaml
+          (cd tests && dart analyze .)
       - name: 'Validate Workspace'
         if: always()
         run: melos run validate:workspace
-
-  # Separated from "analyse" action as pubspec_override file is not being taken into account when running `flutter pub publish --dry-run`
-  # This will fail on CI until this is fixed: https://github.com/invertase/melos/issues/467
-  # You need to switch to Flutter 3.3.0, and run this test manually to check it works and update PR to confirm its success
-  pub_dry_run:
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - uses: ./.github/actions/setup-flutterfire
-        with:
-          node: 'false'
-          java: 'false'
-          # This job needs the whole workspace bootstrapped, which melos-action does itself.
-          melos-run-bootstrap: 'true'
-      - name: 'Pub Check'
+      # Note `pubspec_overrides.yaml` is not taken into account by
+      # `pub publish --dry-run`, which is why this used to live in its own job -
+      # the setup is identical either way, so the split bought nothing.
+      # This will fail on CI until this is fixed: https://github.com/invertase/melos/issues/467
+      # You need to switch to Flutter 3.3.0, and run this test manually to check it works and update PR to confirm its success
+      - name: 'Pub Check (publish dry run)'
+        if: always()
+        # `melos bootstrap` (run for the analysis above) syncs versions into the
+        # Package.swift / Constants.swift files, and `pub publish --dry-run`
+        # refuses a dirty tree ("checked-in files are modified in git") - the
+        # standalone job this was folded from started with a fresh checkout.
+        # Restore the committed state before validating.
         run: |
+          git checkout -- packages/
           melos exec -c 1 --no-private --ignore="*example*" -- \
             dart pub publish --dry-run
-
-  pub_get_check:
-    timeout-minutes: 30
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - uses: ./.github/actions/setup-flutterfire
-        with:
-          node: 'false'
-          java: 'false'
-          # This job needs the whole workspace bootstrapped, which melos-action does itself.
-          melos-run-bootstrap: 'true'
-      - name: 'Flutter Pub Get'
+      - name: 'Flutter Pub Get (examples)'
+        if: always()
         run: |
           melos exec -c 1 --scope="*example*" -- \
             "flutter pub get"
+      # Go is used by addlicense command (addlicense is used in melos run
+      # check-license-header)
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+        if: always()
+        with:
+          go-version: '^1.13.1'
+      - name: 'Check license headers'
+        if: always()
+        run: |
+          go install github.com/google/addlicense@latest
+          melos run check-license-header
 
   format:
     # switch back to ubuntu-latest when swiftformat is working again
@@ -140,17 +161,21 @@ jobs:
         with:
           node: 'false'
           java: 'false'
-          flutter-version: '3.41.9'
           # This job needs the whole workspace bootstrapped, which melos-action does itself.
           melos-run-bootstrap: 'true'
       - name: 'Build Examples'
         run: |
           dart ./.github/workflows/scripts/generate-dummy-firebase-configs.dart
           melos exec -c 1 --scope="*example*" --dir-exists="web" -- \
             "flutter build web"
-  swift-integration:
+  # iOS and macOS used to be built back to back in one `swift-integration` job,
+  # which meant a macOS-only break waited out the whole iOS build first. They
+  # are independent builds of the same example app, so they run as two jobs.
+  # `swift-integration.dart` still builds both when no `--platform` is passed,
+  # which is how it is run locally.
+  swift-integration-ios:
     runs-on: macos-15
-    timeout-minutes: 45
+    timeout-minutes: 35
     env:
       FLUTTER_DEPENDENCIES: "cloud_firestore firebase_remote_config cloud_functions firebase_database firebase_auth firebase_storage firebase_analytics firebase_messaging firebase_app_check firebase_in_app_messaging firebase_performance firebase_crashlytics firebase_ml_model_downloader firebase_app_installations firebase_ai"
       PR_HEAD_REPO: ${{ github.event.pull_request.head.repo.full_name }}
@@ -163,7 +188,6 @@ jobs:
         with:
           node: 'false'
           java: 'false'
-          flutter-version: '3.41.9'
           # This job needs the whole workspace bootstrapped, which melos-action does itself.
           melos-run-bootstrap: 'true'
       - name: Setup firebase_core example app to test Swift integration
@@ -174,43 +198,56 @@ jobs:
           cd ../../../..
       - name: 'Swift Integration Setup'
         run: flutter config --enable-swift-package-manager
-      - name: 'Build Apps with Swift Package Manager'
+      - name: 'Build iOS App with Swift Package Manager'
         run: |
           dart ./.github/workflows/scripts/generate-dummy-firebase-configs.dart
-          dart ./.github/workflows/scripts/swift-integration.dart $FLUTTER_DEPENDENCIES
+          dart ./.github/workflows/scripts/swift-integration.dart --platform=ios $FLUTTER_DEPENDENCIES
 
-  test:
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
+  swift-integration-macos:
+    runs-on: macos-15
+    timeout-minutes: 35
+    env:
+      FLUTTER_DEPENDENCIES: "cloud_firestore firebase_remote_config cloud_functions firebase_database firebase_auth firebase_storage firebase_analytics firebase_messaging firebase_app_check firebase_in_app_messaging firebase_performance firebase_crashlytics firebase_ml_model_downloader firebase_app_installations firebase_ai"
+      PR_HEAD_REPO: ${{ github.event.pull_request.head.repo.full_name }}
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      - name: Xcode
+        # Firebase iOS SDK: minimum Xcode 26.2.
+        run: sudo xcode-select -s /Applications/Xcode_26.2.app/Contents/Developer
       - uses: ./.github/actions/setup-flutterfire
         with:
           node: 'false'
           java: 'false'
           # This job needs the whole workspace bootstrapped, which melos-action does itself.
           melos-run-bootstrap: 'true'
-      - name: 'Flutter Test'
-        run: melos run test --no-select
-      - name: 'Flutter Test - Web'
-        run: melos run test:web --no-select
+      - name: Setup firebase_core example app to test Swift integration
+        # Run after melos bootstrap so workspace pubspec_overrides resolve unpublished package versions.
+        run: |
+          cd packages/firebase_core/firebase_core/example
+          flutter pub add $FLUTTER_DEPENDENCIES
+          cd ../../../..
+      - name: 'Swift Integration Setup'
+        run: flutter config --enable-swift-package-manager
+      - name: 'Build macOS App with Swift Package Manager'
+        # The script drops firebase_messaging from the example app before the
+        # macOS build; with iOS in its own job that no longer has to happen
+        # after a successful iOS build in the same checkout.
+        run: |
+          dart ./.github/workflows/scripts/generate-dummy-firebase-configs.dart
+          dart ./.github/workflows/scripts/swift-integration.dart --platform=macos $FLUTTER_DEPENDENCIES
 
-  check-files-license-headers:
+  test:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
-        with:
-          go-version: '^1.13.1'
-      # Go is used by addlicense command (addlicense is used in melos run
-      # check-license-header)
-      - run: go install github.com/google/addlicense@latest
-      # Running `melos bootstrap` is not needed because we use Melos just for the
-      # `check-license-header` script, so no `bootstrap-scope` is passed here.
       - uses: ./.github/actions/setup-flutterfire
         with:
           node: 'false'
           java: 'false'
-      - name: Check license header
-        run: melos run check-license-header
+          # This job needs the whole workspace bootstrapped, which melos-action does itself.
+          melos-run-bootstrap: 'true'
+      - name: 'Flutter Test'
+        run: melos run test --no-select
+      - name: 'Flutter Test - Web'
+        run: melos run test:web --no-select