build/ci: add check-forbidden-classes.sh 🚫

.github/workflows/ci.yml

@@ -23,10 +23,17 @@ jobs:
           distribution: zulu
           java-version: ${{ matrix.java }}
           cache: maven
-      - run: ./mvnw -V --no-transfer-progress clean package
+      - name: Run dev mode test
+        run: ./mvnw -V --no-transfer-progress clean package
         if: matrix.java != 17
-      - run: ./mvnw -V --no-transfer-progress clean package spotbugs:check git-commit-id:validateRevision -DperformRelease
+      - name: Run release mode test(JDK ${{ matrix.java }})
+        run: |
+          ./mvnw -V --no-transfer-progress clean package spotbugs:check git-commit-id:validateRevision -DperformRelease
+          scripts/check-forbidden-classes.sh
         if: matrix.java == 17
+      - name: Check forbidden classes
+        run: scripts/check-forbidden-classes.sh
+        if: runner.os == 'Linux'
       # https://github.com/marketplace/actions/codecov
       - uses: codecov/codecov-action@v4
         env:

scripts/check-forbidden-classes.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+set -eEuo pipefail
+
+# cd to project root dir
+cd "${0%/*}"/..
+
+readonly forbidden_classes=(
+  javax.annotation.Nullable
+  javax.annotation.Nonnull
+  org.jetbrains.annotations.Nullable
+  org.jetbrains.annotations.NotNull
+)
+
+grep_pattern=$(printf '%s\n' "${forbidden_classes[@]}")
+
+grep_options=("$grep_pattern" -F -n -C2 -r src/)
+[[ "${GITHUB_ACTIONS:-}" = true || -t 1 ]] && grep_options=("${grep_options[@]}" --color=always)
+
+! grep "${grep_options[@]}"