Chris Bono
1626574ea9
[CI] Fix scheduled param on ci.yml
...
This sets a default for the inputs.run-trivy-scan variable when
the ci.yml is run from a schedule. Otherwise the scan is not
running which then results in the updated libs not being
published.
2024-12-09 15:00:44 -06:00
Chris Bono
4b68f13817
[CI] Re-enable Trivy scan in ci-pr.yml
...
Also set scan by default in ci.yml
2024-11-22 12:51:52 -06:00
Chris Bono
6cdcdefa6f
[CI] Update Trivy repositories
...
This commit is a workaround for the TOOMANYREQUESTS issue currently breaking Trivy scan workflow.
2024-11-17 19:54:55 -06:00
Chris Bono
f030e7b244
[CI] Do not run Trivy scan by default (1.0.x branch)
...
To get around recent TOOMANYREQUESTS from Trivy during DB download,
this commit does the following:
- removes the scan from ci-pr.yml altogether
- makes scan optional (default false) for ci.yml
2024-11-06 19:13:50 -06:00
Chris Bono
9a66faef50
[CI] Add github-pat to trivy-scan.yml
...
Adds Github token to the trivy scan in an effort to prevent the
recent CI failures due to TOOMANYREQUESTS on downloading the Trivy
db.
(cherry picked from commit 3ad7235a87 )
2024-10-16 11:52:45 -05:00
Chris Bono
8e9855c17a
[CI] Do not upload Trivy results to Github
2024-10-10 23:30:38 -04:00
Chris Bono
b8adc23f87
Update Develocity access key vars ( #838 )
...
Replaces
- GRADLE_ENTERPRISE_CACHE_USER
- GRADLE_ENTERPRISE_CACHE_PASSWORD
- GRADLE_ENTERPRISE_CACHE_PASSWORD
with
- DEVELOCITY_ACCESS_KEY
(cherry picked from commit 82e3e7a443 )
2024-09-11 12:14:42 -05:00
dependabot[bot]
21aa7a94a6
chris.bono@gmail.com
...
Bumps the development-dependencies group with 1 update: [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action ).
Updates `slackapi/slack-github-action` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases )
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0 )
---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: development-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-04 10:34:33 -05:00
dependabot[bot]
1e82929f71
Bump the development-dependencies group across 1 directory with 4 updates ( #729 )
...
Bumps the development-dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout ), [actions/upload-artifact](https://github.com/actions/upload-artifact ), [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action ) and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
Updates `actions/upload-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4 )
Updates `slackapi/slack-github-action` from 1.19.0 to 1.26.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases )
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.26.0 )
Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: development-dependencies
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: development-dependencies
- dependency-name: slackapi/slack-github-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: development-dependencies
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: development-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-28 15:36:10 -05:00
Chris Bono
3d21955653
Update spring-io/spring-doc-actions to 0.0.18
2024-06-28 14:51:19 -05:00
Chris Bono
89dbb13315
[CI] Remove Spring Boot 3.3.x from check-samples
2024-02-18 10:42:51 -06:00
Chris Bono
917c293152
[CI] Update Github workflows for 1.0.x
2024-01-25 18:29:09 -06:00
Chris Bono
98059d7b3a
[CI] Add Spring Boot 3.3.0-SNAPSHOT to check-samples in ci.yml
2024-01-15 15:01:24 -06:00
Chris Bono
3667169c11
[CI] Add Spring Boot 3.3.0-SNAPSHOT to check-samples in ci-pr.yml
2024-01-15 14:26:02 -06:00
Chris Bono
186e2397d2
[CI] Fix check-samples.yml invalid variable reference (attempt 2)
2024-01-14 11:47:45 -06:00
Chris Bono
abc7c8415f
[CI] Fix check-samples.yml invalid variable reference
2024-01-14 11:44:27 -06:00
Chris Bono
ba05e7e724
[CI] Add Spring Boot 3.3.0 compatibility check
2024-01-14 11:40:25 -06:00
Chris Bono
a52532de53
Add Jacoco code coverage violation rules ( #533 )
...
This commit adds Jacoco violation rules as well as the following:
- fails the PR workflow if rules are violated
- uploads the report if the rules are violated
- replaces JacocoConventionsPlugin (Java) with a simple groovy script
Resolves #511
2024-01-01 12:37:55 -06:00
Chris Bono
aebb7112d1
[CI] Do not create branch for new release ( #522 )
...
Previously a new branch was created and tagged for every GA release.
This commit removes the branch creation and simply tags the current
branch with the release version.
Resolves #498
2023-12-15 21:21:26 -06:00
Chris Bono
10915b77af
Update spring-doc-actions to v0.0.13 ( #521 )
2023-12-14 11:51:19 -06:00
Chris Bono
5423bccd56
[CI] Fix Trivy scan in both CI and CI PR workflows (take2)
2023-12-11 23:42:49 -06:00
Chris Bono
556f285fc2
[CI] Fix Trivy scan in both CI and CI PR workflows
2023-12-11 23:06:39 -06:00
Chris Bono
843e02ce65
[CI] Guard code scanning workflows for main repo only
2023-12-11 00:32:56 -06:00
Chris Bono
b67326e12e
[CI] Fix trivy standalone workflow
2023-12-11 00:28:04 -06:00
Chris Bono
b057465f33
[CI] Add separate Trivy workflow (trivy-scan.yml)
2023-12-10 17:07:18 -06:00
Chris Bono
4528a2c03c
Add workflow dispatch to codeql
2023-12-10 16:03:37 -06:00
Chris Bono
3f2772def8
Create codeql.yml
2023-12-10 15:55:05 -06:00
Chris Bono
d4183fed38
Add sandbox testing area Github Actions workflow
2023-12-08 11:12:02 -06:00
Chris Bono
1d6f65fda1
[CI] Add 'check-samples' job to CI-PR.yml
...
* Adjust 'needs' for check-samples step
2023-11-27 15:05:20 -06:00
Chris Bono
7ffe1ddd40
[CI] Add 'check-samples' job to CI-PR.yml
...
* Use different version var
2023-11-27 14:17:55 -06:00
Chris Bono
a0d842e5e6
[CI] Add 'check-samples' job to CI-PR.yml
...
* Add version number var
2023-11-27 08:29:58 -06:00
Chris Bono
9283066fe3
[CI] Add 'check-samples' job to CI-PR.yml
...
* Removed signing of artifacts
2023-11-26 23:27:14 -06:00
Chris Bono
d071ad1a2c
[CI] Add 'check-samples' job to CI-PR.yml
2023-11-26 23:06:18 -06:00
Chris Bono
d44aa2a1ad
[CI] Use changelog-generator for release-notes
...
Remove temp workflow for debugging
2023-11-22 15:04:17 -06:00
Chris Bono
b05fa707f4
[CI] Use changelog-generator for release-notes (update)
2023-11-22 15:00:51 -06:00
Chris Bono
512ec73d94
[CI] Use changelog-generator for release-notes
2023-11-22 14:57:30 -06:00
Chris Bono
e2895c4a14
[CI] Properly named tasks for central-release.yml
2023-11-20 17:41:44 -06:00
Chris Bono
92aa2c5d86
[CI] Move closeOssrhStagingRepository to root project
2023-11-20 16:00:15 -06:00
Chris Bono
f73dc55432
[CI] Fix 'gh release create' to point to tag [skip ci]
2023-10-28 14:29:30 -05:00
Chris Bono
d484a012d7
Add Slack notification for release
2023-10-17 15:48:46 -05:00
Chris Bono
907cd74a1c
[CI] Update snapshot boot version property at end of release process
2023-10-14 20:45:45 -05:00
Chris Bono
5da13d29d2
[CI] Update boot version property at release time
2023-10-13 17:45:18 -05:00
Chris Bono
ca1cb28e95
[CI] Update release to close and release Sonatype repo separately
2023-10-08 11:50:51 -05:00
Chris Bono
0db29a674f
[CI] Add Trivy vulnerability scans
...
Adds Trivy vulnerability scan jobs to both CI and PR workflows.
Resolves #466
2023-10-06 21:50:50 -05:00
Chris Bono
203260a0c7
[CI] Simplify checkout and setup steps
...
* Also remove GE credentials for PR runs
2023-10-06 21:42:19 -05:00
Chris Bono
3a76f16372
[CI] Deploy artifacts in parallel with deploy docs (fix syntax)
2023-10-06 17:23:34 -05:00
Chris Bono
fff475dc18
[CI] Deploy artifacts in parallel with deploy docs
2023-10-06 16:32:46 -05:00
Chris Bono
2d190a3d1a
[CI] Add check_samples to 'needs' for 'perform_release' job
2023-10-05 21:23:06 -05:00
Chris Bono
1bf72c2dc6
Revert "[CI] Remove check-samples from main ci.yml"
...
This reverts commit a2415e92b3 .
2023-10-05 21:21:51 -05:00
Chris Bono
dcdee6e8b7
[CI] Revent debugging changes from check-samples.yml
2023-10-05 21:20:46 -05:00