ci: add per-language GitHub Actions workflows

.github/dependabot.yml

@@ -0,0 +1,104 @@
+version: 2
+updates:
+  # GitHub Actions
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ["*"]
+
+  # Go (root + every dir that has its own go.mod for mage)
+  - package-ecosystem: gomod
+    directories:
+      - /
+      - /spicedb-gen
+      - /spicedb-gen/testdata/go
+      - /spicedb-go
+      - /spicedb-python
+      - /spicedb-typescript
+      - /spicedb-csharp
+      - /spicedb-java
+      - /spicedb-ruby
+      - /spicedb-rust
+      - /proto-clients/spicedb-go-proto
+      - /proto-clients/spicedb-python-proto
+      - /proto-clients/spicedb-typescript-proto
+      - /proto-clients/spicedb-csharp-proto
+      - /proto-clients/spicedb-java-proto
+      - /proto-clients/spicedb-ruby-proto
+      - /proto-clients/spicedb-rust-proto
+    schedule:
+      interval: weekly
+    groups:
+      gomod:
+        patterns: ["*"]
+
+  # Python (uv)
+  - package-ecosystem: pip
+    directories:
+      - /proto-clients/spicedb-python-proto
+      - /spicedb-gen/testdata/python
+      - /spicedb-python
+    schedule:
+      interval: weekly
+    groups:
+      pip:
+        patterns: ["*"]
+
+  # TypeScript (pnpm)
+  - package-ecosystem: npm
+    directories:
+      - /
+      - /proto-clients/spicedb-typescript-proto
+      - /spicedb-typescript
+    schedule:
+      interval: weekly
+    groups:
+      npm:
+        patterns: ["*"]
+
+  # C# (NuGet)
+  - package-ecosystem: nuget
+    directories:
+      - /proto-clients/spicedb-csharp-proto
+      - /spicedb-csharp
+    schedule:
+      interval: weekly
+    groups:
+      nuget:
+        patterns: ["*"]
+
+  # Java (Gradle)
+  - package-ecosystem: gradle
+    directories:
+      - /proto-clients/spicedb-java-proto
+      - /spicedb-java
+    schedule:
+      interval: weekly
+    groups:
+      gradle:
+        patterns: ["*"]
+
+  # Ruby (Bundler)
+  - package-ecosystem: bundler
+    directories:
+      - /proto-clients/spicedb-ruby-proto
+      - /spicedb-ruby
+    schedule:
+      interval: weekly
+    groups:
+      bundler:
+        patterns: ["*"]
+
+  # Rust (Cargo)
+  - package-ecosystem: cargo
+    directories:
+      - /proto-clients/spicedb-rust-proto
+      - /spicedb-rust
+    schedule:
+      interval: weekly
+    groups:
+      cargo:
+        patterns: ["*"]

.github/workflows/csharp.yaml

@@ -0,0 +1,107 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+---
+name: CSharp
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: ["*"]
+  merge_group:
+    types: [checks_requested]
+permissions:
+  contents: read
+concurrency:
+  group: "csharp-${{ github.event.pull_request.number || github.sha }}"
+  cancel-in-progress: true
+jobs:
+  paths-filter:
+    runs-on: depot-ubuntu-24.04-arm-small
+    outputs:
+      changed: ${{ steps.filter.outputs.changed }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
+        id: filter
+        with:
+          filters: |
+            changed:
+              - '.github/workflows/csharp.yaml'
+              - 'Magefile.go'
+              - 'go.mod'
+              - 'go.sum'
+              - 'proto-clients/spicedb-csharp-proto/**'
+              - 'spicedb-csharp/**'
+
+  lint:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true'
+    runs-on: depot-ubuntu-24.04-arm-4
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: 10.0.x
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Lint
+        run: mage -d spicedb-csharp lint
+
+  unit:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true'
+    runs-on: depot-ubuntu-24.04-arm-4
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: 10.0.x
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Proto client tests
+        run: mage -d proto-clients/spicedb-csharp-proto test
+      - name: Idiomatic client tests
+        run: mage -d spicedb-csharp test
+
+  integration:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true'
+    runs-on: depot-ubuntu-24.04-arm-4
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: 10.0.x
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Integration test
+        run: mage -d spicedb-csharp integrationTest
+
+  apicompat:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true' && github.event_name == 'pull_request'
+    runs-on: depot-ubuntu-24.04-arm-small
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: 10.0.x
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Install Microsoft.DotNet.ApiCompat.Tool
+        run: dotnet tool install --global Microsoft.DotNet.ApiCompat.Tool
+      - name: API compatibility check
+        run: mage -d spicedb-csharp apiCompat origin/${{ github.base_ref }}

.github/workflows/go.yaml

@@ -0,0 +1,98 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+---
+name: Go
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: ["*"]
+  merge_group:
+    types: [checks_requested]
+permissions:
+  contents: read
+concurrency:
+  group: "go-${{ github.event.pull_request.number || github.sha }}"
+  cancel-in-progress: true
+jobs:
+  paths-filter:
+    runs-on: depot-ubuntu-24.04-arm-small
+    outputs:
+      changed: ${{ steps.filter.outputs.changed }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
+        id: filter
+        with:
+          filters: |
+            changed:
+              - '.github/workflows/go.yaml'
+              - 'Magefile.go'
+              - 'go.mod'
+              - 'go.sum'
+              - 'proto-clients/spicedb-go-proto/**'
+              - 'spicedb-go/**'
+
+  lint:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true'
+    runs-on: depot-ubuntu-24.04-arm-4
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6
+        with:
+          working-directory: spicedb-go
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Lint
+        run: mage -d spicedb-go lint
+
+  unit:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true'
+    runs-on: depot-ubuntu-24.04-arm-4
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Proto client tests
+        run: mage -d proto-clients/spicedb-go-proto test
+      - name: Idiomatic client tests
+        run: mage -d spicedb-go test
+
+  integration:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true'
+    runs-on: depot-ubuntu-24.04-arm-4
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Integration test
+        run: mage -d spicedb-go integrationTest
+
+  apicompat:
+    needs: paths-filter
+    if: needs.paths-filter.outputs.changed == 'true' && github.event_name == 'pull_request'
+    runs-on: depot-ubuntu-24.04-arm-small
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+      - name: Install mage
+        run: go install github.com/magefile/mage@latest
+      - name: Install go-apidiff
+        run: go install github.com/joelanford/go-apidiff@latest
+      - name: API compatibility check
+        run: mage -d spicedb-go apiCompat origin/${{ github.base_ref }}