-
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #10 from cowwoc/v9.0.0
Release 9.0.0
- Loading branch information
Showing
470 changed files
with
41,942 additions
and
30,060 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,43 @@ | ||
| name: "CLA Assistant" | ||
| on: | ||
| issue_comment: | ||
| types: [ created ] | ||
| pull_request_target: | ||
| types: [ opened,closed,synchronize ] | ||
|
|
||
| # explicitly configure permissions, in case your GITHUB_TOKEN workflow permissions are set to read-only in repository settings | ||
| permissions: | ||
| actions: write | ||
| contents: write | ||
| pull-requests: write | ||
| statuses: write | ||
|
|
||
| jobs: | ||
| CLAAssistant: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: "CLA Assistant" | ||
| if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target' | ||
| uses: contributor-assistant/[email protected] | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| # the below token should have repo scope and must be manually added by you in the repository's secret | ||
| # This token is required only if you have configured to store the signatures in a remote repository/organization | ||
| PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }} | ||
| with: | ||
| path-to-signatures: 'signatures/version1/cla.json' | ||
| path-to-document: 'https://github.com/cowwoc/requirements.java/CLA.md' # e.g. a CLA or a DCO document | ||
| # branch should not be protected | ||
| branch: 'main' | ||
| allowlist: cowwoc | ||
|
|
||
| # the followings are the optional inputs - If the optional inputs are not given, then default values will be taken | ||
| #remote-organization-name: enter the remote organization name where the signatures should be stored (Default is storing the signatures in the same repository) | ||
| #remote-repository-name: enter the remote repository name where the signatures should be stored (Default is storing the signatures in the same repository) | ||
| #create-file-commit-message: 'For example: Creating file for storing CLA Signatures' | ||
| #signed-commit-message: 'For example: $contributorName has signed the CLA in $owner/$repo#$pullRequestNo' | ||
| #custom-notsigned-prcomment: 'pull request comment with Introductory message to ask new contributors to sign' | ||
| #custom-pr-sign-comment: 'The signature to be committed in order to sign the CLA' | ||
| #custom-allsigned-prcomment: 'pull request comment when all contributors has signed, defaults to **CLA Assistant Lite bot** All Contributors have signed the CLA.' | ||
| #lock-pullrequest-aftermerge: false - if you don't want this bot to automatically lock the pull request after merging (default - true) | ||
| #use-dco-flag: true - If you are using DCO instead of CLA |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,48 +1,51 @@ | ||
| # Source: https://docs.github.com/en/actions/publishing-packages/publishing-java-packages-with-maven | ||
| # Based on https://docs.github.com/en/actions/publishing-packages/publishing-java-packages-with-maven | ||
| # https://gist.github.com/cstamas/69e6365bbb70521923020d68369bf8e5 and | ||
| # https://oss.sonatype.org/nexus-staging-plugin/default/docs/rest.html | ||
| name: Deploy to Maven Central | ||
| on: | ||
| workflow_dispatch: | ||
| concurrency: | ||
| group: ${{ github.workflow }}-${{ github.ref }} | ||
| group: "${{ github.workflow }}-${{ github.ref }}" | ||
| cancel-in-progress: true | ||
| env: | ||
| # One can look up a project's profileId by running: | ||
| # mvn nexus-staging:rc-list-profiles -DserverId=maven-central-releases -DnexusUrl=https://oss.sonatype.org/ | ||
| STAGING_PROFILE_ID: "3799bb102c7f24" | ||
| STAGING_HOST: "oss.sonatype.org" | ||
| OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }} | ||
| OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }} | ||
| MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }} | ||
| jobs: | ||
| open-release: | ||
| runs-on: ubuntu-latest | ||
| outputs: | ||
| INITIAL_REF_POSITION: ${{ steps.open-staging.outputs.INITIAL_REF_POSITION }} | ||
| TAG: ${{ steps.open-staging.outputs.TAG }} | ||
| STAGING_REPOSITORY_ID: ${{ steps.open-staging.outputs.STAGING_REPOSITORY_ID }} | ||
| INITIAL_REF_POSITION: ${{ steps.create-tag.outputs.INITIAL_REF_POSITION }} | ||
| TAG: ${{ steps.create-tag.outputs.TAG }} | ||
| VERSION: ${{ steps.create-tag.outputs.VERSION }} | ||
| STAGING_PROFILE_ID: ${{ steps.parse-profile-id.outputs.STAGING_PROFILE_ID }} | ||
| STAGING_REPOSITORY_ID: ${{ steps.parse-repository-id.outputs.STAGING_REPOSITORY_ID }} | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| ref: ${{ github.ref }} | ||
| - uses: actions/setup-java@v3 | ||
| fetch-depth: 0 | ||
| token: ${{ secrets.WORKFLOW_TOKEN }} | ||
| - uses: actions/setup-java@v4 | ||
| with: | ||
| distribution: zulu | ||
| java-version: 17 | ||
| java-version: 21 | ||
| server-id: maven-central-releases | ||
| # Server authentication corresponds to "user token" returned by https://oss.sonatype.org/ | ||
| server-username: OSSRH_USERNAME | ||
| server-password: OSSRH_TOKEN | ||
| gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} | ||
| gpg-passphrase: MAVEN_GPG_PASSPHRASE | ||
|
|
||
| - name: Cache Dependencies | ||
| uses: actions/cache@v3 | ||
| uses: actions/cache@v4 | ||
| with: | ||
| # Avoid caching generated artifacts | ||
| path: | | ||
| ~/.m2/repository/* | ||
| !~/.m2/repository/com/github/cowwoc/requirements | ||
| key: ${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }} | ||
| restore-keys: | | ||
| ${{ runner.OS }}-maven- | ||
| key: "${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }}" | ||
|
|
||
| - name: Configure Git User | ||
| run: | | ||
|
|
@@ -59,128 +62,164 @@ jobs: | |
| # | ||
| # Setting a GitHub Action output parameter: | ||
| # https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-an-output-parameter | ||
| - name: Open staging repository | ||
| id: open-staging | ||
| # Extracting the release version number: https://stackoverflow.com/a/16623897/14731 | ||
| - name: Create tag | ||
| id: create-tag | ||
| run: | | ||
| echo "INITIAL_REF_POSITION=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT | ||
| echo "INITIAL_REF_POSITION=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT" | ||
| ./mvnw release:prepare --batch-mode -V -e -Darguments="-Ddeploy -Dinvoker.skip=true" | ||
| echo "TAG=$(git describe --tag --abbrev=0)" >> $GITHUB_OUTPUT | ||
| output=$(./mvnw --batch-mode -e -DstagingProfileId=${{ env.STAGING_PROFILE_ID }} nexus-staging:rc-open) | ||
| [[ "$output" =~ Opened\ (comgithubcowwoc-[[:digit:]]+) ]] | ||
| stagingRepositoryId="${BASH_REMATCH[1]}" | ||
| echo "STAGING_REPOSITORY_ID=$stagingRepositoryId" >> $GITHUB_OUTPUT | ||
| TAG=$(git describe --tag --abbrev=0) | ||
| echo "TAG=${TAG}" >> "$GITHUB_OUTPUT" | ||
| echo "VERSION=${TAG#"release-"}" >> "$GITHUB_OUTPUT" | ||
| - name: Look up staging profile id | ||
| id: request-profile-id | ||
| run: > | ||
| echo "STAGING_PROFILE_ID=$(curl -u '${{ secrets.OSSRH_USERNAME}}:${{ secrets.OSSRH_TOKEN }}' | ||
| -H 'Accept:application/json' | ||
| 'https://${{ env.STAGING_HOST }}/service/local/staging/profile_evaluate?t=maven2&g=com.github.cowwoc.requirements&a=anything&v=anything')" | ||
| >> "$GITHUB_OUTPUT" | ||
| - name: Parse the staging profile id | ||
| id: parse-profile-id | ||
| run: > | ||
| echo "STAGING_PROFILE_ID=$(echo '${{ steps.request-profile-id.outputs.STAGING_PROFILE_ID }}' | jq -r '.data[0].id')" >> "$GITHUB_OUTPUT" | ||
| - name: Open staging repository | ||
| id: open-repository | ||
| run: > | ||
| echo "STAGING_REPOSITORY_ID=$(curl -u '${{ secrets.OSSRH_USERNAME}}:${{ secrets.OSSRH_TOKEN }}' | ||
| -H 'Accept: application/json' | ||
| -H 'Content-type: application/json' | ||
| -X POST -d '{"data": {"description": "com.googlecode.cmake-maven-project:${{ steps.create-tag.outputs.VERSION }}"}}' | ||
| 'https://${{ env.STAGING_HOST }}/service/local/staging/profiles/${{ steps.parse-profile-id.outputs.STAGING_PROFILE_ID }}/start')" | ||
| >> "$GITHUB_OUTPUT" | ||
| - name: Parse the staging repository id | ||
| id: parse-repository-id | ||
| run: > | ||
| echo "STAGING_REPOSITORY_ID=$(echo '${{ steps.open-repository.outputs.STAGING_REPOSITORY_ID }}' | jq -r '.data.stagedRepositoryId')" >> "$GITHUB_OUTPUT" | ||
| deploy: | ||
| name: Deploy (${{ matrix.os }}) | ||
| name: Deploy (${{ matrix.runtime }}) | ||
| needs: open-release | ||
| runs-on: ${{ matrix.os }} | ||
| strategy: | ||
| # Concurrent deploys of the files that are common across platforms may lead to data corruption | ||
| max-parallel: 1 | ||
| matrix: | ||
| os: [ ubuntu-latest, macos-latest, windows-latest ] | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| ref: ${{ needs.open-release.outputs.TAG }} | ||
| - uses: actions/setup-java@v3 | ||
| token: ${{ secrets.WORKFLOW_TOKEN }} | ||
| - uses: actions/setup-java@v4 | ||
| with: | ||
| distribution: zulu | ||
| java-version: 17 | ||
| java-version: 21 | ||
| server-id: maven-central-releases | ||
| # Server authentication corresponds to "user token" returned by https://oss.sonatype.org/ | ||
| server-username: OSSRH_USERNAME | ||
| server-password: OSSRH_TOKEN | ||
| gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} | ||
| gpg-passphrase: MAVEN_GPG_PASSPHRASE | ||
|
|
||
| - name: Cache Dependencies | ||
| uses: actions/cache@v3 | ||
| uses: actions/cache@v4 | ||
| with: | ||
| # Avoid caching generated artifacts | ||
| path: | | ||
| ~/.m2/repository/* | ||
| !~/.m2/repository/com/github/cowwoc/requirements | ||
| key: ${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }} | ||
| restore-keys: | | ||
| ${{ runner.OS }}-maven- | ||
| key: "${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }}" | ||
|
|
||
| - name: Deploy to Maven Central | ||
| run: > | ||
| ./mvnw --batch-mode -V -e -Ddeploy -Dportable -DstagingProfileId=${{ env.STAGING_PROFILE_ID }} | ||
| -DstagingRepositoryId=${{ needs.open-release.outputs.STAGING_REPOSITORY_ID }} | ||
| ./mvnw --batch-mode -V -e -Ddeploy | ||
| -Dstaging_repository_id=${{ needs.open-release.outputs.STAGING_REPOSITORY_ID }} | ||
| -Dstaging_host="${{ env.STAGING_HOST }}" | ||
| deploy | ||
| close-release: | ||
| needs: [ open-release, deploy ] | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| ref: ${{ needs.open-release.outputs.TAG }} | ||
| - uses: actions/setup-java@v3 | ||
| token: ${{ secrets.WORKFLOW_TOKEN }} | ||
| - uses: actions/setup-java@v4 | ||
| with: | ||
| distribution: zulu | ||
| java-version: 17 | ||
| java-version: 21 | ||
| server-id: maven-central-releases | ||
| # Server authentication corresponds to "user token" returned by https://oss.sonatype.org/ | ||
| server-username: OSSRH_USERNAME | ||
| server-password: OSSRH_TOKEN | ||
| gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} | ||
| gpg-passphrase: MAVEN_GPG_PASSPHRASE | ||
|
|
||
| - name: Cache Dependencies | ||
| uses: actions/cache@v3 | ||
| uses: actions/cache@v4 | ||
| with: | ||
| # Avoid caching generated artifacts | ||
| path: | | ||
| ~/.m2/repository/* | ||
| !~/.m2/repository/com/github/cowwoc/requirements | ||
| key: ${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }} | ||
| restore-keys: | | ||
| ${{ runner.OS }}-maven- | ||
| key: "${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }}" | ||
|
|
||
| - name: Close staging repository | ||
| run: > | ||
| ./mvnw --batch-mode -V -e -DstagingProfileId=${{ env.STAGING_PROFILE_ID }} | ||
| -DstagingRepositoryId=${{ needs.open-release.outputs.STAGING_REPOSITORY_ID }} | ||
| nexus-staging:rc-close | ||
| curl -u ${{ secrets.OSSRH_USERNAME}}:${{ secrets.OSSRH_TOKEN }} -X POST | ||
| -H "Content-Type:application/json" | ||
| -d '{"data": {"stagedRepositoryId": "${{ needs.open-release.outputs.STAGING_REPOSITORY_ID }}", "description": "Closing repository"}}' | ||
| 'https://${{ env.STAGING_HOST }}/service/local/staging/profiles/${{ needs.open-release.outputs.STAGING_PROFILE_ID }}/finish' | ||
| # Cleanup on failure: https://stackoverflow.com/a/74562058/14731 | ||
| on-failure: | ||
| needs: [ open-release, deploy, close-release ] | ||
| runs-on: ubuntu-latest | ||
| if: ${{ always() && contains(needs.*.result, 'failure') }} | ||
| if: ${{ failure() || cancelled() }} | ||
| steps: | ||
| - uses: actions/checkout@v3 | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| ref: ${{ github.ref }} | ||
| fetch-depth: 0 | ||
| - uses: actions/setup-java@v3 | ||
| token: ${{ secrets.WORKFLOW_TOKEN }} | ||
| - uses: actions/setup-java@v4 | ||
| with: | ||
| distribution: zulu | ||
| java-version: 17 | ||
| java-version: 21 | ||
| server-id: maven-central-releases | ||
| # Server authentication corresponds to "user token" returned by https://oss.sonatype.org/ | ||
| server-username: OSSRH_USERNAME | ||
| server-password: OSSRH_TOKEN | ||
| gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} | ||
| gpg-passphrase: MAVEN_GPG_PASSPHRASE | ||
|
|
||
| - name: Cache Dependencies | ||
| uses: actions/cache@v3 | ||
| uses: actions/cache@v4 | ||
| with: | ||
| # Avoid caching generated artifacts | ||
| path: | | ||
| ~/.m2/repository/* | ||
| !~/.m2/repository/com/github/cowwoc/requirements | ||
| key: ${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }} | ||
| restore-keys: | | ||
| ${{ runner.OS }}-maven- | ||
| key: "${{ runner.OS }}-maven-${{ hashFiles('**/pom.xml') }}" | ||
|
|
||
| - name: Drop staging repository | ||
| if: needs.open-release.outputs.STAGING_REPOSITORY_ID != '' | ||
| run: > | ||
| curl -u ${{ secrets.OSSRH_USERNAME}}:${{ secrets.OSSRH_TOKEN }} -X POST | ||
| -H "Content-Type:application/json" | ||
| -d '{"data": {"stagedRepositoryId": "${{ needs.open-release.outputs.STAGING_REPOSITORY_ID }}", "description": "Dropping repository"}}' | ||
| 'https://${{ env.STAGING_HOST }}/service/local/staging/profiles/${{ needs.open-release.outputs.STAGING_PROFILE_ID }}/drop' | ||
| - name: Configure Git User | ||
| run: | | ||
| git config user.email "[email protected]" | ||
| git config user.name "Gili Tzabari" | ||
| - name: Delete tag | ||
| if: needs.open-release.outputs.TAG != '' | ||
| run: | | ||
| git push --delete origin ${{ needs.open-release.outputs.TAG }} | ||
| - name: Restore the workflow ref to its original position | ||
| if: needs.open-release.outputs.INITIAL_REF_POSITION != '' | ||
| run: | | ||
|
|
@@ -192,15 +231,3 @@ jobs: | |
| fi | ||
| git push -f origin ${{ github.ref_name }} | ||
| fi | ||
| - name: Delete tag | ||
| if: needs.open-release.outputs.TAG != '' | ||
| run: | | ||
| git push --delete origin ${{ needs.open-release.outputs.TAG }} | ||
| - name: Drop staging repository | ||
| if: needs.open-release.outputs.STAGING_REPOSITORY_ID != '' | ||
| run: > | ||
| ./mvnw --batch-mode -V -e -DstagingProfileId=${{ env.STAGING_PROFILE_ID }} | ||
| -DstagingRepositoryId=${{ needs.open-release.outputs.STAGING_REPOSITORY_ID }} | ||
| nexus-staging:rc-drop | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.