Commit Graph

78 Commits

Author SHA1 Message Date
Artem Bilan
8cabdfe3b6 The main reusable workflows for GHAs with build 2025-03-18 12:55:37 -04:00
Artem Bilan
84b151910e Migrate to DCO from CLA
(cherry picked from commit 18149108b2)
2025-01-14 20:48:51 +00:00
dependabot[bot]
099195ddb5 Bump spring-io/spring-github-workflows (#9668)
Bumps the development-dependencies group with 1 update: [spring-io/spring-github-workflows](https://github.com/spring-io/spring-github-workflows).


Updates `spring-io/spring-github-workflows` from 4 to 5
- [Release notes](https://github.com/spring-io/spring-github-workflows/releases)
- [Commits](https://github.com/spring-io/spring-github-workflows/compare/v4...v5)

---
updated-dependencies:
- dependency-name: spring-io/spring-github-workflows
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-19 18:04:29 +00:00
dependabot[bot]
d3675291b9 Bump spring-io/spring-github-workflows (#9600)
Bumps the development-dependencies group with 1 update: [spring-io/spring-github-workflows](https://github.com/spring-io/spring-github-workflows).


Updates `spring-io/spring-github-workflows` from 3 to 4
- [Release notes](https://github.com/spring-io/spring-github-workflows/releases)
- [Commits](https://github.com/spring-io/spring-github-workflows/compare/v3...v4)

---
updated-dependencies:
- dependency-name: spring-io/spring-github-workflows
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-26 00:11:27 +00:00
Artem Bilan
eab39c0b0b Upgrade WFs from main to v4
The `v3` has to be updated by Dependabot automatically

**Auto-cherry-pick to `6.2.x`**

# Conflicts:
#	.github/workflows/announce-milestone-planning.yml
2024-10-23 14:43:22 -04:00
Artem Bilan
a83b1002a4 Migrate to DEVELOCITY_ACCESS_KEY secret for GHA
(cherry picked from commit 614ea69526)
2024-09-20 21:00:43 +00:00
Artem Bilan
2aec620b39 Migrate to DEVELOCITY_ACCESS_KEY secret for GHA workflows
(cherry picked from commit 430094f4b2)
2024-09-18 20:37:54 +00:00
Artem Bilan
561e603328 Switch ci-snapshot.yml to the latest reusable WF
(cherry picked from commit f10fbca38b)
2024-08-28 19:01:03 +00:00
Artem Bilan
b686bfa43e Remove redundant OSSRH_URL secret for release workflow
(cherry picked from commit eb07fda61b)
2024-08-28 13:19:35 +00:00
Artem Bilan
5bf9339f59 Use autoMergeSnapshots for merge-dependabot-pr.yml
**Auto-cherry-pick to `6.2.x`**
2024-07-24 15:01:23 -04:00
Artem Bilan
0f28b81ad1 Upgrade to reusable spring-io/spring-github-workflows@v3
Apparently Dependabot can upgrade reusable GHA workflows as well.
So less burden on support and less stress from changes in those reusable workflows in `main`

(cherry picked from commit de58d8c942)
2024-07-18 20:23:51 +00:00
Artem Bilan
99c539cb6f Migrate release notification to Google Chat
(cherry picked from commit 13a113cf66)
2024-07-11 18:49:56 +00:00
Artem Bilan
a3814be675 Remove redundant Develocity GHA secrets
**Auto-cherry-pick to `6.2.x` & `6.1.x`**
2024-04-30 14:38:37 -04:00
Artem Bilan
aadd5877dd Upgrade to the latest milestones; prepare for release
* Add `com.google.protobuf` to the `development` group for Dependabot
2024-03-19 13:37:16 -04:00
Artem Bilan
51ec97dafa Add Dependabot scanning for support branches 2024-02-16 17:04:24 -05:00
Artem Bilan
1f4d27d71f Make PR & Dependabot WFs working against support branches
**Auto-cherry-pick to `6.2.x` & `6.1.x`**
2024-02-16 14:53:42 -05:00
Artem Bilan
7f7ec29801 Upgrade to Gradle 8.6; latest reusable workflows
* Add `package-ecosystem: "github-actions"` for Dependabot

**Auto-cherry-pick to `6.2.x`**
2024-02-09 16:04:55 -05:00
Artem Bilan
09c020bfbf Use shorter name for auto-cherry-pick.yml job 2024-02-08 15:32:09 -05:00
Artem Bilan
f2a42292f7 Fix job name in the auto-cherry-pick.yml workflow 2024-02-08 15:11:58 -05:00
Artem Bilan
98e128f9a7 Fix job name in the auto-cherry-pick.yml
**Auto-cherry-pick to `6.2.x` & `6.1.x`**
2024-02-08 14:50:50 -05:00
Artem Bilan
4a02455971 Add auto-cherry-pick.yml GHA workflow 2024-02-08 14:14:44 -05:00
Artem Bilan
e5802001f5 Fix typo in the pr-build.yml 2024-01-13 20:51:21 -05:00
Artem Bilan
833b847cb6 Upgrade to reusable workflows v2 2024-01-13 20:47:59 -05:00
Artem Bilan
ee1bbc829d Add schedule & concurrency to ci-snapshot
Make sure that night build is not using Gradle cache.
2023-12-24 18:02:25 -08:00
Artem Bilan
b4fc3479d3 Use spring-dispatch-docs-build.yml
**Cherry-pick to `6.2.x`**
2023-12-22 14:57:51 -05:00
Artem Bilan
85d3284834 Use reusable WF for deploy-docs.yml 2023-12-22 13:37:59 -05:00
Artem Bilan
726a59da37 Improve deploy-docs.yml
* Build only against supported branches and tags
* Move `GH_TOKEN` to the common `env` section
2023-12-22 12:17:57 -05:00
Artem Bilan
50ea6b1b02 Move Spring Security into dev group for Dependabot 2023-12-22 11:38:44 -05:00
Artem Bilan
643715f00e Add spotbugs to testCompileOnly as well
* Add `com.github.spotbugs` into Dependabot dev group
2023-12-21 18:19:22 -05:00
Artem Bilan
075613c4a1 Migrate GHAs for repo from Spring IO org
**Cherry-pick to `6.1.x`**
2023-12-20 17:03:58 -05:00
Artem Bilan
7abdbecaa4 Make ci-snapshot.yml generic for support branches 2023-12-19 14:02:21 -05:00
Artem Bilan
eb6764ba06 Use permissions: write-all for merge-dependabot-pr 2023-12-19 12:04:31 -05:00
Artem Bilan
d8a336b848 Upgrade to Gradle 8.5
* Fix `org.testcontainers` pattern for Dependabot
* Downgrade to `com.gradle.enterprise:3.15`
* Fix deprecation warning in the `KafkaDslKotlinTests.kt`
2023-12-19 11:57:18 -05:00
Artem Bilan
4bf0d1782b Exclude com.google.code.findbugs from Dependabot 2023-12-19 11:31:54 -05:00
Artem Bilan
ac5a63a2da Add more permissions for merge-dependabot-pr.yml 2023-12-19 11:28:20 -05:00
Artem Bilan
4ca6164a4e Add merge-dependabot-pr.yml GHA 2023-12-19 10:27:33 -05:00
Artem Bilan
273fde9a5e Revert changes to the dependabot.yml 2023-12-19 09:47:40 -05:00
Artem Bilan
4462a6c90e Dev VS Prod for Dependabot 2023-12-19 09:34:45 -05:00
Artem Bilan
542b748d7e Fix release GHA for more permissions
* Improve `dependabot.yml` to group all only dev deps
* Upgrade only to patch releases
* Fix upgrades label for expected by the Changelog-generator
2023-12-18 18:16:38 -05:00
Artem Bilan
fdf3274511 Add dependabot 2023-12-16 14:44:53 -05:00
Artem Bilan
cac5145038 Use ARTIFACTORY secrets for libs-staging-local 2023-12-07 18:02:42 -05:00
Artem Bilan
615691ab11 Clean up #2 2023-12-07 17:28:32 -05:00
Artem Bilan
b94a0ca6b3 Clean up 2023-12-07 17:22:18 -05:00
Artem Bilan
5bf94c68a9 Add jf gradlec for verify staging WF 2023-12-07 16:10:51 -05:00
Artem Bilan
6a9632e2ba Use jf to run Gradle (for possible auth) 2023-12-07 16:08:36 -05:00
Artem Bilan
9e8f395098 Bring back JFrog for verify staging
We need to auth for Artifactory before pulling from `https://repo.spring.io/libs-staging-local`
2023-12-07 16:04:26 -05:00
Artem Bilan
a2c264f51f Fix verify staging WF without JFrog 2023-12-07 15:46:48 -05:00
Artem Bilan
a733935ef1 Rework verify staging WF for Gradle init script
**Cherry-pick to `6.1.x`**
2023-12-07 15:44:19 -05:00
Artem Bilan
6d2bf330d1 Add backport-issue.yml GHA workflow 2023-12-06 10:28:11 -05:00
Artem Bilan
9f7acd7d9d Add explicit ref to verify-staged-artifacts.yml
**Cherry-pick to `6.1.x`**
2023-12-01 17:34:57 -05:00