From c87f8d867cf3294354e32d83b87cf5a9fa877d50 Mon Sep 17 00:00:00 2001
From: Sokwhan Huh <sokwhan@google.com>
Date: Thu, 12 Dec 2024 11:51:04 -0800
Subject: [PATCH] Add a workflow for checking unwanted @cel_spec dep in the
 runtime

PiperOrigin-RevId: 705580925
---
 .github/workflows/unwanted_deps.sh | 28 ++++++++++++++++++++++++++++
 .github/workflows/workflow.yml     |  2 ++
 2 files changed, 30 insertions(+)
 create mode 100755 .github/workflows/unwanted_deps.sh

diff --git a/.github/workflows/unwanted_deps.sh b/.github/workflows/unwanted_deps.sh
new file mode 100755
index 00000000..b96951c4
--- /dev/null
+++ b/.github/workflows/unwanted_deps.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Script ran as part of Github CEL-Java CI to verify that the runtime jar does not contain generated cel protos from @cel_spec.
+
+runtime_deps="$(bazel query 'deps(//publish:cel_runtime)' --nohost_deps --noimplicit_deps --output graph | grep '@cel_spec')"
+
+if [[ ! -z $runtime_deps ]]; then
+  echo -e "Runtime contains unwanted @cel_spec dependency!\n"
+  echo "cel_spec dependency graph:"
+  echo -e "$runtime_deps"
+  exit 1
+fi
+
+exit 0
+
diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index 4cf231b2..100dd29e 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -35,4 +35,6 @@ jobs:
         # Exclude codelab exercises as they are intentionally made to fail
         # Exclude conformance tests for time being until TextFormat.Parser fix is in upstream
         run: bazelisk test ... --deleted_packages=//codelab/src/test/codelab,//conformance/src/test/java/dev/cel/conformance --test_output=errors
+      - name: Unwanted Dependencies
+        run: .github/workflows/unwanted_deps.sh
       - run: echo "🍏 This job's status is ${{ job.status }}."