diff --git a/.github/workflows/build_n_deploy.yml b/.github/workflows/build_n_deploy.yml index c444c7d..69784ee 100644 --- a/.github/workflows/build_n_deploy.yml +++ b/.github/workflows/build_n_deploy.yml @@ -12,75 +12,16 @@ jobs: # Checkout the source code. # - name: Checkout the source code - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2 with: token: ${{ secrets.GIT_PAT }} fetch-depth: 0 # - # Cache JDK. + # Setup Java Build Environment. # - - name: Cache JDK - if: steps.semantic.outputs.new_release_published == 'true' - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 - id: cache-jdk - with: - key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz - path: | - ${{ runner.temp }}/jdk_setup.tar.gz - ${{ runner.temp }}/jdk_setup.sha256 - - # - # Download JDK and verify its hash. - # - - name: Download JDK and verify its hash - if: steps.cache-jdk.outputs.cache-hit != 'true' - run: | - echo "454bebb2c9fe48d981341461ffb6bf1017c7b7c6e15c6b0c29b959194ba3aaa5 ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256 - curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.2%2B13/OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz" - sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256" - - # - # Setup JDK. - # - - name: Setup JDK - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 - with: - distribution: "jdkfile" - jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz" - java-version: "21" - cache: maven - - # - # Cache Maven. - # - - name: Cache Maven - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 - id: cache-maven - with: - key: apache-maven-3.9.6-bin.tar.gz - path: | - ${{ runner.temp }}/maven_setup.tar.gz - ${{ runner.temp }}/maven_setup.sha256 - - # - # Download Maven and verify its hash. - # - - name: Download Maven and verify its hash - if: steps.cache-maven.outputs.cache-hit != 'true' - run: | - echo "6eedd2cae3626d6ad3a5c9ee324bd265853d64297f07f033430755bd0e0c3a4b ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256 - curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz" - sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256" - - # - # Setup Maven. - # - - name: Setup Maven - run: | - mkdir ${{ runner.temp }}/maven - tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1 - echo "github${{ secrets.GIT_USER }}${{ secrets.GIT_PAT }}" >> ${{ runner.temp }}/settings.xml + - name: Setup Java Build Environment + uses: ./.github/actions/setup-java-build-env # # Build and deploy. diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml index e3711b7..17ab0df 100644 --- a/.github/workflows/pr-validation.yml +++ b/.github/workflows/pr-validation.yml @@ -15,7 +15,7 @@ jobs: steps: - name: PR title validation - uses: amannn/action-semantic-pull-request@c3cd5d1ea3580753008872425915e343e351ab54 + uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # 5.5.3 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -35,53 +35,13 @@ jobs: wip: false - name: Checkout the source code - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2 - - name: Cache JDK - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 - id: cache-jdk - with: - key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz - path: | - ${{ runner.temp }}/jdk_setup.tar.gz - ${{ runner.temp }}/jdk_setup.sha256 - - - name: Download JDK and verify its hash - if: steps.cache-jdk.outputs.cache-hit != 'true' - run: | - echo "454bebb2c9fe48d981341461ffb6bf1017c7b7c6e15c6b0c29b959194ba3aaa5 ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256 - curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.2%2B13/OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz" - sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256" - - - name: Setup JDK - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 - with: - distribution: "jdkfile" - jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz" - java-version: "21" - cache: maven - - - name: Cache Maven - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 - id: cache-maven - with: - key: apache-maven-3.9.6-bin.tar.gz - path: | - ${{ runner.temp }}/maven_setup.tar.gz - ${{ runner.temp }}/maven_setup.sha256 - - - name: Download Maven and verify its hash - if: steps.cache-maven.outputs.cache-hit != 'true' - run: | - echo "6eedd2cae3626d6ad3a5c9ee324bd265853d64297f07f033430755bd0e0c3a4b ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256 - curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz" - sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256" - - - name: Setup Maven - run: | - mkdir ${{ runner.temp }}/maven - tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1 - echo "github${{ secrets.GIT_USER }}${{ secrets.GIT_PAT }}" >> ${{ runner.temp }}/settings.xml + # + # Setup Java Build Environment. + # + - name: Setup Java Build Environment + uses: ./.github/actions/setup-java-build-env - name: Execute unit-test + Calculate test coverage + SCA with Sonar env: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 500d98c..b103b02 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: # Checkout the source code. # - name: Checkout the source code - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2 with: token: ${{ secrets.GIT_PAT }} fetch-depth: 0 @@ -27,85 +27,23 @@ jobs: # Calculate of the new version (dry-run). # - name: Calculate of the new version (dry-run) - uses: cycjimmy/semantic-release-action@8e58d20d0f6c8773181f43eb74d6a05e3099571d + uses: cycjimmy/semantic-release-action@b1b432f13acb7768e0c8efdec416d363a57546f2 # 4.1.1 id: semantic env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: - semantic_version: 19 + semantic_version: 21.1.1 branch: main extra_plugins: | - @semantic-release/release-notes-generator@10.0.3 - @semantic-release/git@10.0.1 + @semantic-release/release-notes-generator@44c780c6f9c1bf2643fe48b6718bd9a84b820132 # 14.0.1 + @semantic-release/git@3e934d45f97fd07a63617c0fc098c9ed3e67d97a # 10.0.1 dry_run: true # - # Cache JDK. + # Setup Java Build Environment. # - - name: Cache JDK - if: steps.semantic.outputs.new_release_published == 'true' - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 - id: cache-jdk - with: - key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz - path: | - ${{ runner.temp }}/jdk_setup.tar.gz - ${{ runner.temp }}/jdk_setup.sha256 - - # - # Download JDK and verify its hash. - # - - name: Download JDK and verify its hash - if: steps.semantic.outputs.new_release_published == 'true' && steps.cache-jdk.outputs.cache-hit != 'true' - run: | - echo "454bebb2c9fe48d981341461ffb6bf1017c7b7c6e15c6b0c29b959194ba3aaa5 ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256 - curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.2%2B13/OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz" - sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256" - - # - # Setup JDK. - # - - name: Setup JDK - if: steps.semantic.outputs.new_release_published == 'true' - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 - with: - distribution: "jdkfile" - jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz" - java-version: "21" - cache: maven - - # - # Cache Maven. - # - - name: Cache Maven - if: steps.semantic.outputs.new_release_published == 'true' - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 - id: cache-maven - with: - key: apache-maven-3.9.6-bin.tar.gz - path: | - ${{ runner.temp }}/maven_setup.tar.gz - ${{ runner.temp }}/maven_setup.sha256 - - # - # Download Maven and verify its hash. - # - - name: Download Maven and verify its hash - if: steps.semantic.outputs.new_release_published == 'true' && steps.cache-maven.outputs.cache-hit != 'true' - run: | - echo "6eedd2cae3626d6ad3a5c9ee324bd265853d64297f07f033430755bd0e0c3a4b ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256 - curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz" - sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256" - - # - # Setup Maven. - # - - name: Setup Maven - if: steps.semantic.outputs.new_release_published == 'true' - run: | - mkdir ${{ runner.temp }}/maven - tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1 - echo "github${{ secrets.GIT_USER }}${{ secrets.GIT_PAT }}" >> ${{ runner.temp }}/settings.xml + - name: Setup Java Build Environment + uses: ./.github/actions/setup-java-build-env # # Update of pom.xml with the new version + Git add + commit + push of the updated pom.xml. @@ -125,15 +63,15 @@ jobs: # - name: Calculation of the new version (again) with tagging + releasing + etc if: steps.semantic.outputs.new_release_published == 'true' - uses: cycjimmy/semantic-release-action@8e58d20d0f6c8773181f43eb74d6a05e3099571d + uses: cycjimmy/semantic-release-action@b1b432f13acb7768e0c8efdec416d363a57546f2 # 4.1.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: - semantic_version: 19 + semantic_version: 21.1.1 branch: main extra_plugins: | - @semantic-release/release-notes-generator@10.0.3 - @semantic-release/git@10.0.1 + @semantic-release/release-notes-generator@44c780c6f9c1bf2643fe48b6718bd9a84b820132 # 14.0.1 + @semantic-release/git@3e934d45f97fd07a63617c0fc098c9ed3e67d97a # 10.0.1 dry_run: false #