Commit Graph

86 Commits

Author SHA1 Message Date
Artem Bilan
4ebe56e99d Remove 6.2.x branch from Dependabot management
The branch has moved out of Open Source Support
2024-11-20 12:27:37 -05:00
Artem Bilan
f8bc3cb66f Revert "An attempt to avoid *-SNAPSHOT updates from Dependabot"
This reverts commit c5015e7002.
2024-11-19 13:59:19 -05:00
Artem Bilan
c5015e7002 An attempt to avoid *-SNAPSHOT updates from Dependabot 2024-11-19 13:44:54 -05:00
dependabot[bot]
cf2310e43c Bump spring-io/spring-github-workflows (#9670)
Bumps the development-dependencies group with 1 update: [spring-io/spring-github-workflows](https://github.com/spring-io/spring-github-workflows).


Updates `spring-io/spring-github-workflows` from 4 to 5
- [Release notes](https://github.com/spring-io/spring-github-workflows/releases)
- [Commits](https://github.com/spring-io/spring-github-workflows/compare/v4...v5)

---
updated-dependencies:
- dependency-name: spring-io/spring-github-workflows
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-19 16:49:52 +00:00
Artem Bilan
29cd21624c Remove tentative update-version-on-website.yml for testing 2024-11-11 14:30:48 -05:00
Artem Bilan
c88e28c853 Add update-version-on-website.yml GHA to test website update 2024-11-08 15:42:15 -05:00
dependabot[bot]
069c96b177 Bump spring-io/spring-github-workflows (#9601)
Bumps the development-dependencies group with 1 update: [spring-io/spring-github-workflows](https://github.com/spring-io/spring-github-workflows).


Updates `spring-io/spring-github-workflows` from 3 to 4
- [Release notes](https://github.com/spring-io/spring-github-workflows/releases)
- [Commits](https://github.com/spring-io/spring-github-workflows/compare/v3...v4)

---
updated-dependencies:
- dependency-name: spring-io/spring-github-workflows
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-26 00:13:46 +00:00
Artem Bilan
6f9e036078 Upgrade WFs from main to v4
The `v3` has to be updated by Dependabot automatically

**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-10-23 14:40:32 -04:00
Artem Bilan
9ae7527f20 Add manual-finalize-release.yml GHA WF 2024-10-23 07:53:28 -04:00
Artem Bilan
7df1261cde Add gradleOptions input for the ci-snapshot.yml 2024-10-08 10:38:37 -04:00
Artem Bilan
614ea69526 Migrate to DEVELOCITY_ACCESS_KEY secret for GHA
**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-09-20 17:00:19 -04:00
Artem Bilan
430094f4b2 Migrate to DEVELOCITY_ACCESS_KEY secret for GHA workflows
**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-09-18 16:37:27 -04:00
Artem Bilan
f10fbca38b Switch ci-snapshot.yml to the latest reusable WF
**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-08-28 15:00:40 -04:00
Artem Bilan
eb07fda61b Remove redundant OSSRH_URL secret for release workflow
**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-08-28 09:19:09 -04:00
Artem Bilan
4a2eb9cf6b Add announce-milestone-planning.yml GHA
Send a `planning` message to the chat when `due_on` is changed on a milestone
2024-08-21 13:44:14 -04:00
Artem Bilan
1641ef29b4 Test auto-merge for Dependabot SNAPSHOT upgrades
Verify that `springVersion = '6.2.0-M5'` will be upgraded by Dependabot
to `6.2.0-SNAPSHOT` and respective PR will be merged automatically
after successful project build
2024-07-22 14:44:36 -04:00
Artem Bilan
de58d8c942 Upgrade to reusable spring-io/spring-github-workflows@v3
Apparently Dependabot can upgrade reusable GHA workflows as well.
So less burden on support and less stress from changes in those reusable workflows in `main`

**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-07-18 16:23:24 -04:00
Artem Bilan
13a113cf66 Migrate release notification to Google Chat
**Auto-cherry-pick to `6.3.x` & `6.2.x`**
2024-07-11 14:49:32 -04:00
Artem Bilan
cfb6333084 Fix dependabot.yml for Gradle Develocity as DEV dep 2024-06-17 10:48:33 -04:00
Artem Bilan
8b2da4f996 Start version 6.4
* Move `whats-new` to `changes-6.2-6.3.adoc`
* Upgrade dependency to the latest (including Gradle)
* Move Spring dependencies to based on SF-6.2
* Fix some deprecations and incompatibility
2024-05-28 20:07:35 -04:00
Artem Bilan
a3814be675 Remove redundant Develocity GHA secrets
**Auto-cherry-pick to `6.2.x` & `6.1.x`**
2024-04-30 14:38:37 -04:00
Artem Bilan
aadd5877dd Upgrade to the latest milestones; prepare for release
* Add `com.google.protobuf` to the `development` group for Dependabot
2024-03-19 13:37:16 -04:00
Artem Bilan
51ec97dafa Add Dependabot scanning for support branches 2024-02-16 17:04:24 -05:00
Artem Bilan
1f4d27d71f Make PR & Dependabot WFs working against support branches
**Auto-cherry-pick to `6.2.x` & `6.1.x`**
2024-02-16 14:53:42 -05:00
Artem Bilan
7f7ec29801 Upgrade to Gradle 8.6; latest reusable workflows
* Add `package-ecosystem: "github-actions"` for Dependabot

**Auto-cherry-pick to `6.2.x`**
2024-02-09 16:04:55 -05:00
Artem Bilan
09c020bfbf Use shorter name for auto-cherry-pick.yml job 2024-02-08 15:32:09 -05:00
Artem Bilan
f2a42292f7 Fix job name in the auto-cherry-pick.yml workflow 2024-02-08 15:11:58 -05:00
Artem Bilan
98e128f9a7 Fix job name in the auto-cherry-pick.yml
**Auto-cherry-pick to `6.2.x` & `6.1.x`**
2024-02-08 14:50:50 -05:00
Artem Bilan
4a02455971 Add auto-cherry-pick.yml GHA workflow 2024-02-08 14:14:44 -05:00
Artem Bilan
e5802001f5 Fix typo in the pr-build.yml 2024-01-13 20:51:21 -05:00
Artem Bilan
833b847cb6 Upgrade to reusable workflows v2 2024-01-13 20:47:59 -05:00
Artem Bilan
ee1bbc829d Add schedule & concurrency to ci-snapshot
Make sure that night build is not using Gradle cache.
2023-12-24 18:02:25 -08:00
Artem Bilan
b4fc3479d3 Use spring-dispatch-docs-build.yml
**Cherry-pick to `6.2.x`**
2023-12-22 14:57:51 -05:00
Artem Bilan
85d3284834 Use reusable WF for deploy-docs.yml 2023-12-22 13:37:59 -05:00
Artem Bilan
726a59da37 Improve deploy-docs.yml
* Build only against supported branches and tags
* Move `GH_TOKEN` to the common `env` section
2023-12-22 12:17:57 -05:00
Artem Bilan
50ea6b1b02 Move Spring Security into dev group for Dependabot 2023-12-22 11:38:44 -05:00
Artem Bilan
643715f00e Add spotbugs to testCompileOnly as well
* Add `com.github.spotbugs` into Dependabot dev group
2023-12-21 18:19:22 -05:00
Artem Bilan
075613c4a1 Migrate GHAs for repo from Spring IO org
**Cherry-pick to `6.1.x`**
2023-12-20 17:03:58 -05:00
Artem Bilan
7abdbecaa4 Make ci-snapshot.yml generic for support branches 2023-12-19 14:02:21 -05:00
Artem Bilan
eb6764ba06 Use permissions: write-all for merge-dependabot-pr 2023-12-19 12:04:31 -05:00
Artem Bilan
d8a336b848 Upgrade to Gradle 8.5
* Fix `org.testcontainers` pattern for Dependabot
* Downgrade to `com.gradle.enterprise:3.15`
* Fix deprecation warning in the `KafkaDslKotlinTests.kt`
2023-12-19 11:57:18 -05:00
Artem Bilan
4bf0d1782b Exclude com.google.code.findbugs from Dependabot 2023-12-19 11:31:54 -05:00
Artem Bilan
ac5a63a2da Add more permissions for merge-dependabot-pr.yml 2023-12-19 11:28:20 -05:00
Artem Bilan
4ca6164a4e Add merge-dependabot-pr.yml GHA 2023-12-19 10:27:33 -05:00
Artem Bilan
273fde9a5e Revert changes to the dependabot.yml 2023-12-19 09:47:40 -05:00
Artem Bilan
4462a6c90e Dev VS Prod for Dependabot 2023-12-19 09:34:45 -05:00
Artem Bilan
542b748d7e Fix release GHA for more permissions
* Improve `dependabot.yml` to group all only dev deps
* Upgrade only to patch releases
* Fix upgrades label for expected by the Changelog-generator
2023-12-18 18:16:38 -05:00
Artem Bilan
fdf3274511 Add dependabot 2023-12-16 14:44:53 -05:00
Artem Bilan
cac5145038 Use ARTIFACTORY secrets for libs-staging-local 2023-12-07 18:02:42 -05:00
Artem Bilan
615691ab11 Clean up #2 2023-12-07 17:28:32 -05:00