chore(ci): adopt shared workflows and central Renovate preset - #14
Open
TheMeinerLP wants to merge 4 commits into
Open
TheMeinerLP wants to merge 4 commits into
TheMeinerLP wants to merge 4 commits into
Conversation
Copy link
Copy Markdown
Sorry, something went wrong.
- renovate.json -> central preset (lasius-maintainers) - security.yml (Trivy + CycloneDX SBOM) - build-pr.yml (gradle-build-pr, Java 25, run-tests: true) (replaced hand-rolled job) - close_invalid_prs.yml - pinned reusable workflows to v2.8.1 (build-pr.yml)
Copy link
Copy Markdown
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
Sorry, something went wrong.
Copy link
Copy Markdown
Test results3 files 3 suites 14s ⏱️ Results for commit b2faf93. ♻️ This comment has been updated with latest results. |
Sorry, something went wrong.
- pr-lint.yml - commitlint.config.mjs - release-please simple mode, bootstrapped at 0.0.0 - release-please.yml with SBOM attached to the release
release-please tags with GITHUB_TOKEN, and a tag pushed that way does not start an `on: push: tags` workflow - so the old publish workflow would never have fired on a release. Chain the publish into the release-please run, gated on release_created.
…build.gradle.kts - version line introduced (the project had none); extra-files now points at build.gradle.kts - bootstrap-sha set from tip of master (no version tag yet)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Brings this repository onto the OneLiteFeather standard CI, release and dependency setup.
CI, security and dependencies
Release automation and PR hygiene
Version anchoring and Renovate presets
Why
One shared setup per concern instead of a hand-maintained copy per repository:
in the shared catalogue reaches this repository through a Renovate PR.
the maintainer team as reviewer, instead of a per-repository config that drifts.
scanning, plus a CycloneDX SBOM on every run. Report-only, so adopting it does not turn CI red on
day one.
the version and cuts the release. Simple mode deliberately does not rewrite language version
files, which keeps this change limited to release plumbing.
dependency inventory.
date-based Minestom scheme and Paper's X.Y.Z-<mc-version> scheme; without it those two get
parsed as plain SemVer and updated wrongly.
changes exactly one line in one file instead of a properties file the build has to parse.
release-please silently fails to bump the version or drops the commit from the changelog.
Everything a release needs is chained into the release-please workflow run on purpose: release-please
tags with GITHUB_TOKEN, and a tag pushed that way does not start a separate
on: push: tags workflow.