Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update master #34

Merged
merged 24 commits into from
Aug 22, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
01f80b4
Bump org.apache.maven.plugins:maven-source-plugin from 3.2.1 to 3.3.1
dependabot[bot] Aug 20, 2024
1aef731
Bump org.apache.maven.plugins:maven-gpg-plugin from 3.0.1 to 3.2.5
dependabot[bot] Aug 20, 2024
64dc1c0
Bump org.apache.logging.log4j:log4j-core from 2.17.1 to 2.23.1
dependabot[bot] Aug 20, 2024
5ecb535
Bump com.google.guava:guava from 32.0.0-jre to 33.3.0-jre
dependabot[bot] Aug 20, 2024
51c93fd
Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.8.0
dependabot[bot] Aug 20, 2024
0577845
Bump org.apache.maven.plugins:maven-compiler-plugin from 3.3 to 3.13.0
dependabot[bot] Aug 20, 2024
14e1e51
Bump org.apache.maven.plugins:maven-release-plugin from 2.5.3 to 3.1.1
dependabot[bot] Aug 20, 2024
0dd8ee6
Bump junit:junit from 4.13.1 to 4.13.2
dependabot[bot] Aug 20, 2024
d9b0761
Bump org.sonatype.plugins:nexus-staging-maven-plugin
dependabot[bot] Aug 20, 2024
9949e11
cleanup legacy configs: eclipse, ci check
swissiety Aug 21, 2024
6b743d6
Merge pull request #32 from secure-software-engineering/master
schlichtig Aug 21, 2024
9bae4ce
Merge pull request #22 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
626dbc4
Merge pull request #23 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
11cd508
Merge pull request #24 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
1671fa6
Merge pull request #25 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
91475e1
Merge pull request #26 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
1119b79
Merge pull request #27 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
bcdf377
Merge pull request #28 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
958bd5c
Merge pull request #29 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
068bab9
Merge pull request #30 from secure-software-engineering/dependabot/ma…
schlichtig Aug 21, 2024
79f41f5
Merge pull request #31 from secure-software-engineering/cleanup_legac…
schlichtig Aug 21, 2024
20d7337
Add version actions and update versions
smeyer198 Aug 21, 2024
4331d52
Set correct Java version
smeyer198 Aug 21, 2024
bdfa58a
Merge pull request #33 from secure-software-engineering/action-updates
schlichtig Aug 21, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 0 additions & 26 deletions .classpath

This file was deleted.

11 changes: 3 additions & 8 deletions .github/workflows/deploy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,24 +8,19 @@ jobs:
name: PathExpression deployment
steps:
- name: Checkout source code
uses: actions/checkout@v3
uses: actions/checkout@v4
# Sets up Java version
- name: Set up Java
uses: actions/setup-java@v3
uses: actions/setup-java@v4
with:
distribution: 'adopt'
java-package: 'jdk'
java-version: '11'
java-version: '8'
server-id: 'ossrh' # must match the serverId configured for the nexus-staging-maven-plugin
server-username: OSSRH_USERNAME # Env var that holds your OSSRH user name
server-password: OSSRH_PASSWORD # Env var that holds your OSSRH user pw
gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} # Substituted with the value stored in the referenced secret
gpg-passphrase: SIGN_KEY_PASS # Env var that holds the key's passphrase
# Sets up Maven version
- name: Set up Maven
uses: stCarolas/setup-maven@v4.5
with:
maven-version: 3.6.3
- name: Build & Deploy PathExpression
run: mvn -B -U clean deploy -Pdeployment
env:
Expand Down
44 changes: 5 additions & 39 deletions .github/workflows/maven.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,46 +8,12 @@ jobs:
BuildAndTest:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v4
- name: Set up JDK 1.8
uses: actions/setup-java@v1
uses: actions/setup-java@v4
with:
java-version: 1.8
distribution: 'adopt'
java-package: jdk
java-version: '8'
- name: Build with Maven
run: mvn -B verify --file pom.xml

Release:
name: Release
if: github.ref == 'refs/heads/master'
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
needs: [BuildAndTest]
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Set up JDK 1.8
uses: actions/setup-java@v1
with:
java-version: 1.8
- name: Release
uses: qcastel/github-actions-maven-release@master
env:
JAVA_HOME: /usr/lib/jvm/java-1.8-openjdk/
with:
release-branch-name: "master"

gpg-enabled: "true"
gpg-key-id: ${{ secrets.GPG_KEY_ID }}
gpg-key: ${{ secrets.GPG_KEY }}

maven-repo-server-id: github
maven-repo-server-username: ${{ secrets.CI_USER }}
maven-repo-server-password: ${{ secrets.CI_PACKAGES_TOKEN }}

git-release-bot-name: ${{ secrets.CI_USER }}
git-release-bot-email: "admin@codeshield.de"

access-token: ${{ secrets.GITHUB_TOKEN }}
maven-args: "-DskipTests"
102 changes: 102 additions & 0 deletions .github/workflows/version.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,102 @@
name: Version handling

on:
pull_request:
types:
- closed
branches:
- master

jobs:
version-update:
# This version does not run on self-opened PRs
if: ${{ github.event.pull_request.merged == true && github.event.pull_request.user.login != 'github-actions[bot]' }}
runs-on: ubuntu-latest
steps:
- name: Checkout source code
uses: actions/checkout@v4
with:
fetch-depth: 0
# Sets up Java version
- name: Set up Java
uses: actions/setup-java@v4
with:
distribution: 'adopt'
java-package: jdk
java-version: '8'
# Semantic versioning
- name: Semantic versioning
id: versioning
uses: paulhatch/semantic-version@v5.4.0
with:
tag_prefix: ""
# A string which, if present in a git commit, indicates that a change represents a
# major (breaking) change, supports regular expressions wrapped with '/'
major_pattern: "(MAJOR)"
# Same as above except indicating a minor change, supports regular expressions wrapped with '/'
minor_pattern: "(MINOR)"
# A string to determine the format of the version output
version_format: "${major}.${minor}.${patch}"
# Check, whether there is an existing branch "version_<version>" or an open PR "version_<version>" -> "master"
# and store the results as environment variables
- name: Check if branch and PR exist
# The second command was copied from https://stackoverflow.com/questions/73812503/github-action-stop-the-action-if-pr-already-exists
run: |
echo VERSION_BRANCH_EXISTS=$(git ls-remote --heads origin refs/heads/version_${{ steps.versioning.outputs.version }} | wc -l) >> $GITHUB_ENV
echo PR_EXISTS=$(gh pr list \
--repo "$GITHUB_REPOSITORY" \
--json baseRefName,headRefName \
--jq '
map(select(.baseRefName == "master" and .headRefName == "version_${{ steps.versioning.outputs.version }}"))
| length
') >> $GITHUB_ENV
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# If the branch "version_<version>" does not exist, create the branch and update the version in all files
- name: Create branch and update PathExpression version
if: ${{ env.VERSION_BRANCH_EXISTS == '0' }}
run: |
git config --global user.email "github-actions[bot]@users.noreply.github.com"
git config --global user.name "github-actions[bot]"
git checkout -b version_${{ steps.versioning.outputs.version }}
mvn build-helper:parse-version versions:set -DnewVersion=\${{ steps.versioning.outputs.version }} versions:commit
git ls-files | grep 'pom.xml$' | xargs git add
git commit --allow-empty -am "Update PathExpression version to ${{ steps.versioning.outputs.version }}"
git push origin version_${{ steps.versioning.outputs.version }}
# If a PR "version_<version>" -> "master" does not exist, create the PR
- name: Open pull request for version update
if: ${{ env.PR_EXISTS == '0' }}
run: |
gh pr create -B master -H version_${{ steps.versioning.outputs.version }} -t "Update PathExpression version to ${{ steps.versioning.outputs.version }}" -b "This PR was created by the version-update workflow. Please make sure to delete the branch after merging, otherwise future workflows might fail."
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

version-release:
# This job runs only on merged PRs, which were opened by the version-update job
if: ${{ github.event.pull_request.merged == true && github.event.pull_request.user.login == 'github-actions[bot]' }}
runs-on: ubuntu-latest
steps:
- name: Checkout source code
uses: actions/checkout@v4
with:
fetch-depth: 0
# Semantic versioning
- name: Semantic versioning
id: versioning
uses: paulhatch/semantic-version@v5.4.0
with:
tag_prefix: ""
# A string which, if present in a git commit, indicates that a change represents a
# major (breaking) change, supports regular expressions wrapped with '/'
major_pattern: "(MAJOR)"
# Same as above except indicating a minor change, supports regular expressions wrapped with '/'
minor_pattern: "(MINOR)"
# A string to determine the format of the version output
version_format: "${major}.${minor}.${patch}"
# Create a tag with the newest version to prepare a release
- name: Create tag for new version
run: |
git config --global user.email "${{ github.actor }}@users.noreply.github.com"
git config --global user.name "${{ github.actor }}"
git tag -a ${{ steps.versioning.outputs.version }} -m "PathExpression version ${{ steps.versioning.outputs.version }}"
git push origin ${{ steps.versioning.outputs.version }}
2 changes: 2 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -101,6 +101,8 @@ local.properties
.settings/
.loadpath
.recommenders
.project
.classpath

# External tool builders
.externalToolBuilders/
Expand Down
23 changes: 0 additions & 23 deletions .project

This file was deleted.

15 changes: 0 additions & 15 deletions .whitesource

This file was deleted.

18 changes: 9 additions & 9 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
<plugin>
<groupId>org.sonatype.plugins</groupId>
<artifactId>nexus-staging-maven-plugin</artifactId>
<version>1.6.13</version>
<version>1.7.0</version>
<extensions>true</extensions>
<configuration>
<serverId>ossrh</serverId>
Expand All @@ -50,7 +50,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-source-plugin</artifactId>
<version>3.2.1</version>
<version>3.3.1</version>
<executions>
<execution>
<id>attach-source</id>
Expand All @@ -63,7 +63,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-javadoc-plugin</artifactId>
<version>3.6.0</version>
<version>3.8.0</version>
<executions>
<execution>
<id>attach-javadoc</id>
Expand All @@ -76,7 +76,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<version>3.0.1</version>
<version>3.2.5</version>
<executions>
<execution>
<id>sign-artifacts</id>
Expand All @@ -103,15 +103,15 @@
<plugins>
<plugin>
<artifactId>maven-compiler-plugin</artifactId>
<version>3.3</version>
<version>3.13.0</version>
<configuration>
<source>1.7</source>
<target>1.7</target>
</configuration>
</plugin>
<plugin>
<artifactId>maven-release-plugin</artifactId>
<version>2.5.3</version>
<version>3.1.1</version>
</plugin>
</plugins>
</build>
Expand All @@ -120,18 +120,18 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>32.0.0-jre</version>
<version>33.3.0-jre</version>
</dependency>
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<version>4.13.1</version>
<version>4.13.2</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>2.17.1</version>
<version>2.23.1</version>
</dependency>
</dependencies>

Expand Down
9 changes: 0 additions & 9 deletions shippable.yml

This file was deleted.