Methane Kit v0.8.2: fix build with latest compilers, update external dependencies, fix validation errors and rendering stability

.github/workflows/ci-build.yml

@@ -34,10 +34,10 @@ on:
 env:
   METHANE_VERSION_MAJOR: 0
   METHANE_VERSION_MINOR: 8
-  METHANE_VERSION_PATCH: 1
+  METHANE_VERSION_PATCH: 2
   METHANE_VERSION_BUILD: ${{ github.run_number }}
-  TRACY_RELEASE_VERSION: "0.11.2.1"
-  VULKAN_SDK_VERSION: "1.3.290.0"
+  TRACY_RELEASE_VERSION: "0.14.0.1"
+  VULKAN_SDK_VERSION: "1.4.350.1"
   ORIGIN_REPOSITORY: 'MethanePowered/MethaneKit'
 
 jobs:
@@ -48,71 +48,71 @@ jobs:
         include:
           - os: windows-latest
             name: "Win64_DX_Release"
-            config_preset: "VS2022-Win64-DX-Default"
-            build_preset: "VS2022-Win64-DX-Release"
+            config_preset: "VS2026-Win64-DX-Default"
+            build_preset: "VS2026-Win64-DX-Release"
             named_logo: Windows
             run_tests: true
             add_tracy_app: false
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win64_VK_Release"
-            config_preset: "VS2022-Win64-VK-Default"
-            build_preset: "VS2022-Win64-VK-Release"
+            config_preset: "VS2026-Win64-VK-Default"
+            build_preset: "VS2026-Win64-VK-Release"
             named_logo: Windows
             run_tests: true
             add_tracy_app: false
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win64_DX_Profile"
-            config_preset: "VS2022-Win64-DX-Profile"
-            build_preset: "VS2022-Win64-DX-Profile"
+            config_preset: "VS2026-Win64-DX-Profile"
+            build_preset: "VS2026-Win64-DX-Profile"
             named_logo: Windows
             run_tests: false
             add_tracy_app: true
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win64_VK_Profile"
-            config_preset: "VS2022-Win64-VK-Profile"
-            build_preset: "VS2022-Win64-VK-Profile"
+            config_preset: "VS2026-Win64-VK-Profile"
+            build_preset: "VS2026-Win64-VK-Profile"
             named_logo: Windows
             run_tests: false
             add_tracy_app: true
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win32_DX_Release"
-            config_preset: "VS2022-Win32-DX-Default"
-            build_preset: "VS2022-Win32-DX-Release"
+            config_preset: "VS2026-Win32-DX-Default"
+            build_preset: "VS2026-Win32-DX-Release"
             named_logo: Windows
             run_tests: true
             add_tracy_app: false
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win32_VK_Release"
-            config_preset: "VS2022-Win32-VK-Default"
-            build_preset: "VS2022-Win32-VK-Release"
+            config_preset: "VS2026-Win32-VK-Default"
+            build_preset: "VS2026-Win32-VK-Release"
             named_logo: Windows
             run_tests: true
             add_tracy_app: false
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win32_DX_Profile"
-            config_preset: "VS2022-Win32-DX-Profile"
-            build_preset: "VS2022-Win32-DX-Profile"
+            config_preset: "VS2026-Win32-DX-Profile"
+            build_preset: "VS2026-Win32-DX-Profile"
             named_logo: Windows
             run_tests: false
             add_tracy_app: true
             install_vulkan_sdk: false
 
           - os: windows-latest
             name: "Win32_VK_Profile"
-            config_preset: "VS2022-Win32-VK-Profile"
-            build_preset: "VS2022-Win32-VK-Profile"
+            config_preset: "VS2026-Win32-VK-Profile"
+            build_preset: "VS2026-Win32-VK-Profile"
             named_logo: Windows
             run_tests: false
             add_tracy_app: true
@@ -190,14 +190,18 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Install Linux prerequisites
         if: ${{ runner.os == 'Linux' }}
         run: ./Build/Unix/CI/InstallLinuxPrerequisites.sh
 
+      - name: Install MacOS prerequisites
+        if: ${{ matrix.os == 'macos-latest' }}
+        run: ./Build/Unix/CI/InstallMacOsPrerequisites.sh
+
       - name: Install TestSpace
         if: ${{ github.repository == env.ORIGIN_REPOSITORY }}
         uses: testspace-com/setup-testspace@v1
@@ -209,7 +213,7 @@ jobs:
         run: ./Build/Unix/CI/InstallVulkanSdk.sh "${{ env.VULKAN_SDK_VERSION }}" "${{ runner.tool_cache }}/VulkanSDK"
 
       - name: Initialize Externals Cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: Build/Output/ExternalsCache
           key: ExternalsCache-${{ matrix.config_preset }}-${{ hashFiles('Externals/*.cmake') }}
@@ -235,7 +239,7 @@ jobs:
         run: ${{ github.workspace }}\Build\Windows\CI\RunUnitTests.bat junit
 
       - name: Upload Test Results Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: ${{ matrix.run_tests && (success() || failure()) }}
         with:
           name: MethaneKit_${{ matrix.name }}_TestResults_${{ env.METHANE_VERSION_MAJOR }}.${{ env.METHANE_VERSION_MINOR }}.${{ env.METHANE_VERSION_PATCH }}.${{ env.METHANE_VERSION_BUILD }}
@@ -278,7 +282,7 @@ jobs:
 
       - name: Upload Archived Build Artifacts
         if: ${{ success() || failure() }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: MethaneKit_${{ matrix.name }}_${{ env.METHANE_VERSION_MAJOR }}.${{ env.METHANE_VERSION_MINOR }}.${{ env.METHANE_VERSION_PATCH }}.${{ env.METHANE_VERSION_BUILD }}
           path: ${{ env.INSTALL_DIR }}/MethaneKit_${{ matrix.name }}.7z
@@ -312,7 +316,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Upload Event File
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: EventFile
           path: ${{ github.event_path }}

.github/workflows/ci-codeql-scan.yml

@@ -40,18 +40,19 @@ jobs:
         include:
           - os: windows-latest
             name: "Win64_DX_CodeQL-Scan"
-            config_preset: "VS2022-Win64-DX-Scan"
-            build_preset: "VS2022-Win64-DX-Scan"
+            config_preset: "VS2026-Win64-DX-Scan"
+            build_preset: "VS2026-Win64-DX-Scan"
 
           - os: ubuntu-latest
             name: "Ubuntu_VK_CodeQL-Scan"
             config_preset: "Make-Lin-VK-Scan"
             build_preset: "Make-Lin-VK-Scan"
 
-          - os: macos-latest
-            name: "MacOS_MTL_CodeQL-Scan"
-            config_preset: "Xcode-Mac-MTL-Scan"
-            build_preset: "Xcode-Mac-MTL-Scan"
+          # FIXME: disable CodeQL scan on MacOS because of an issue with Metal Toolchain availability
+          #- os: macos-latest
+          #  name: "MacOS_MTL_CodeQL-Scan"
+          #  config_preset: "Xcode-Mac-MTL-Scan"
+          #  build_preset: "Xcode-Mac-MTL-Scan"
 
     runs-on: ${{ matrix.os }}
 
@@ -60,24 +61,32 @@ jobs:
 
     steps:
 
+    - name: Checkout repository
+      uses: actions/checkout@v7
+      with:
+        # No later step performs authenticated Git operations (SARIF is uploaded through the API),
+        # so the checkout token is not persisted into the local Git config.
+        persist-credentials: false
+
     - name: Install Linux prerequisites
       if: ${{ matrix.os == 'ubuntu-latest' }}
       run: |
         sudo apt update
         sudo apt install xcb libx11-dev libx11-xcb-dev libxcb-sync-dev libxcb-randr0-dev
 
-    - name: Checkout repository
-      uses: actions/checkout@v4
+    - name: Install MacOS prerequisites
+      if: ${{ matrix.os == 'macos-latest' }}
+      run: ./Build/Unix/CI/InstallMacOsPrerequisites.sh
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: cpp
         config-file: ./.github/codeql/codeql-config.yml
 
     - name: Initialize Externals Cache
       id: cache-externals
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       env:
         cache-name: cache-externals
       with:
@@ -91,7 +100,7 @@ jobs:
       run: cmake --build --preset ${{ matrix.build_preset }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         upload: false
         output: results
@@ -107,6 +116,6 @@ jobs:
         output: results/cpp-filtered.sarif
 
     - name: Upload Filtered CodeQL Results
-      uses: github/codeql-action/upload-sarif@v3
+      uses: github/codeql-action/upload-sarif@v4
       with:
         sarif_file: results/cpp-filtered.sarif

.github/workflows/ci-sonar-scan.yml

@@ -59,13 +59,20 @@ on:
 env:
   METHANE_VERSION_MAJOR: 0
   METHANE_VERSION_MINOR: 8
-  METHANE_VERSION_PATCH: 1
+  METHANE_VERSION_PATCH: 2
   METHANE_VERSION_BUILD: ${{ github.run_number }}
 
 jobs:
   sonar_scan:
     name: ${{ matrix.name }}
 
+    permissions:
+      # NOTE: declaring this block sets every omitted scope to "none",
+      #       so "contents: read" has to be listed explicitly for actions/checkout.
+      contents: read
+      checks: write
+      pull-requests: write
+
     # Run sonar scan job only in context of the origin repository:
     # - Trigger on either "push" or "pull request" event for the origin repository owned branches
     # - Or trigger on "pull request target" event for external repositories to have access to secrets from origin repo context
@@ -119,13 +126,13 @@ jobs:
     steps:
       - name: Checkout pull-request merge commit from origin
         if: ${{ github.event_name != 'pull_request_target' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0 # checkout all history for all branches, as required by Sonar scanner
 
       - name: Checkout pull-request merge commit from fork
         if: ${{ github.event_name == 'pull_request_target' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: "${{ github.event.pull_request.merge_commit_sha }}"
           fetch-depth: 0 # checkout all history for all branches, as required by Sonar scanner
@@ -134,6 +141,10 @@ jobs:
         if: ${{ runner.os == 'Linux' }}
         run: ./Build/Unix/CI/InstallLinuxPrerequisites.sh lcov
 
+      - name: Install MacOS prerequisites
+        if: ${{ matrix.os == 'macos-latest' }}
+        run: ./Build/Unix/CI/InstallMacOsPrerequisites.sh
+
       - name: Install TestSpace
         if: ${{ github.event_name == 'push' }}
         uses: testspace-com/setup-testspace@v1
@@ -147,17 +158,14 @@ jobs:
           dotnet-version: 8.x
           dotnet-quality: 'ga'
 
-      - name: Install Sonar-Scanner
-        uses: sonarsource/sonarcloud-github-c-cpp@v3
-
       # Ninja build is required to generate compile commands file used by Sonar-Scanner
       - name: Install Ninja
-        uses: seanmiddleditch/gha-setup-ninja@v5
+        uses: seanmiddleditch/gha-setup-ninja@v6
         with:
           version: 1.11.1
 
       - name: Initialize Externals Cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: Build/Output/ExternalsCache
           key: ExternalsCache-${{ matrix.config_preset }}-${{ hashFiles('Externals/*.cmake') }}
@@ -226,7 +234,7 @@ jobs:
 
       - name: Upload Code Coverage Cobertura Report
         if: ${{ success() || failure() }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: MethaneKit_${{ matrix.name }}_CoverageResults
           path: Build/Output/${{ matrix.config_preset }}/Install/Tests/Coverage/Report/Cobertura.xml
@@ -290,23 +298,40 @@ jobs:
           action_fail: true
           action_fail_on_inconclusive: true
 
-      - name: Run Sonar Scanner
-        if: ${{ success() || failure() }}
-        shell: bash
+      - name: Run Sonar Scanner for Push
+        uses: SonarSource/sonarqube-scan-action@v8.2.0
+        if: ${{ (success() || failure()) && github.event_name == 'push' }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-          SONAR_ORGANIZATION: methane-powered
-          GITHUB_COMMIT_SHA: ${{ github.event_name == 'push' && github.sha || github.event.pull_request.head.sha }}
-          GITHUB_PR_FLAG: ${{ (github.event_name == 'pull_request' || github.event_name == 'pull_request_target') && 1 || 0 }}
-          GITHUB_PR_REPO: ${{ github.repository }}
-          GITHUB_PR_NUMBER: ${{ github.event.pull_request.number }}
-          GITHUB_PR_BRANCH: ${{ github.event.pull_request.head.ref }}
-          GITHUB_PR_BASE: ${{ github.event.pull_request.base.ref }}
-        run: |
-            ./Build/Unix/CI/RunSonarScanner.sh "${{ matrix.sonar_project_key }}" \
-              "Build/Output/${{ matrix.config_preset }}/Build" \
-              "Build/Output/${{ matrix.config_preset }}/Install/Tests"
+          SONAR_HOST_URL: "https://sonarcloud.io"
+        with:
+          args: >
+            --define sonar.projectKey=${{ matrix.sonar_project_key }}
+            --define sonar.projectVersion=${{ env.METHANE_VERSION_MAJOR }}.${{ env.METHANE_VERSION_MINOR }}.${{ env.METHANE_VERSION_PATCH }}.${{ env.METHANE_VERSION_BUILD }}
+            --define sonar.cfamily.compile-commands=Build/Output/${{ matrix.config_preset }}/Build/compile_commands.json
+            --define sonar.testExecutionReportPaths=${{ env.test_results }}
+            --define sonar.coverageReportPaths=Build/Output/${{ matrix.config_preset }}/Install/Tests/Coverage/Report/SonarQube.xml
+            --define sonar.scm.revision=${{ github.sha }}
+
+      - name: Run Sonar Scanner for Pull-Request
+        uses: SonarSource/sonarqube-scan-action@v8.2.0
+        if: ${{ (success() || failure()) && (github.event_name == 'pull_request' || github.event_name == 'pull_request_target') }}
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: "https://sonarcloud.io"
+        with:
+          args: >
+            --define sonar.projectKey=${{ matrix.sonar_project_key }}
+            --define sonar.projectVersion=${{ env.METHANE_VERSION_MAJOR }}.${{ env.METHANE_VERSION_MINOR }}.${{ env.METHANE_VERSION_PATCH }}.${{ env.METHANE_VERSION_BUILD }}
+            --define sonar.cfamily.compile-commands=Build/Output/${{ matrix.config_preset }}/Build/compile_commands.json
+            --define sonar.testExecutionReportPaths=${{ env.test_results }}
+            --define sonar.coverageReportPaths=Build/Output/${{ matrix.config_preset }}/Install/Tests/Coverage/Report/SonarQube.xml
+            --define sonar.scm.revision=${{ github.event.pull_request.head.sha }}
+            --define sonar.pullrequest.provider=GitHub
+            --define sonar.pullrequest.github.repository=${{ github.repository }}
+            --define sonar.pullrequest.key=${{ github.event.pull_request.number }}
+            --define sonar.pullrequest.branch=${{ github.event.pull_request.head.ref }}
+            --define sonar.pullrequest.base=${{ github.event.pull_request.base.ref }}
 
       - name: Archive Scan Artifacts
         if: ${{ success() || failure() }}
@@ -316,7 +341,7 @@ jobs:
 
       - name: Upload Archived Scan Artifacts
         if: ${{ success() || failure() }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: MethaneKit_${{ matrix.name }}_${{ env.METHANE_VERSION_MAJOR }}.${{ env.METHANE_VERSION_MINOR }}.${{ env.METHANE_VERSION_PATCH }}.${{ env.METHANE_VERSION_BUILD }}
           path: Build/Output/${{ matrix.config_preset }}/Install/MethaneKit_${{ matrix.name }}.7z