Skip to content
This repository has been archived by the owner on Sep 14, 2023. It is now read-only.

Commit

Permalink
ci: bump repository configuration from template-refs/tags/v2.0.0 (#499)
Browse files Browse the repository at this point in the history
* ci: common template rollout changes

* style: pre-commit run --all-files

* test: run only UI tests marked with sanity_test

---------

Co-authored-by: Artem Rys <rysartem@gmail.com>
  • Loading branch information
srv-rr-github-token and artemrys committed Jul 6, 2023
1 parent dcbe249 commit 843bb5a
Show file tree
Hide file tree
Showing 9 changed files with 37 additions and 128 deletions.
12 changes: 0 additions & 12 deletions .github/dependabot.yml

This file was deleted.

3 changes: 3 additions & 0 deletions .github/workflows/.ci-metadata.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
{
"template-version": "v2.0.0"
}
8 changes: 6 additions & 2 deletions .github/workflows/agreements.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,14 @@ on:
types: [created]
pull_request_target:
types: [opened, closed, synchronize]

permissions:
actions: read
contents: read
pull-requests: read
statuses: read
jobs:
call-workflow-agreements:
uses: splunk/addonfactory-github-workflows/.github/workflows/reusable-agreements.yaml@v1.3
uses: splunk/addonfactory-github-workflows/.github/workflows/reusable-agreements.yaml@v1
secrets:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PERSONAL_ACCESS_TOKEN: ${{ secrets.PAT_CLATOOL }}
19 changes: 14 additions & 5 deletions .github/workflows/build-test-release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,19 +14,28 @@ on:
- reopened
- synchronize
- labeled

permissions:
actions: read
checks: write
contents: write
deployments: read
packages: write
pull-requests: read
statuses: write
jobs:
call-workflow:
if: github.event.action != 'labeled' || github.event.label.name == 'preserve_infra'
uses: splunk/addonfactory-workflow-addon-release/.github/workflows/reusable-build-test-release.yml@v3.7
if: github.event.action != 'labeled' || github.actor != 'renovate[bot]'
uses: splunk/addonfactory-workflow-addon-release/.github/workflows/reusable-build-test-release.yml@v4.0
secrets:
GH_TOKEN_ADMIN: ${{ secrets.GH_TOKEN_ADMIN }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SEMGREP_PUBLISH_TOKEN: ${{ secrets.SEMGREP_PUBLISH_TOKEN }}
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
VT_API_KEY: ${{ secrets.VT_API_KEY }}
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
OTHER_TA_REQUIRED_CONFIGS: ${{ secrets.OTHER_TA_REQUIRED_CONFIGS }}
FOSSA_API_KEY: ${{ secrets.FOSSA_API_KEY }}
SA_GH_USER_NAME: ${{ secrets.SA_GH_USER_NAME }}
SA_GH_USER_EMAIL: ${{ secrets.SA_GH_USER_EMAIL }}
SA_GPG_PRIVATE_KEY: ${{ secrets.SA_GPG_PRIVATE_KEY }}
SA_GPG_PASSPHRASE: ${{ secrets.SA_GPG_PASSPHRASE }}
8 changes: 7 additions & 1 deletion .github/workflows/publish-manual.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,15 @@ on:
description: 'Tag to release'
required: true

permissions:
contents: write
packages: write
pull-requests: read
statuses: write

jobs:
call-workflow:
uses: splunk/addonfactory-workflow-addon-manual-release/.github/workflows/reusable-publish-manual.yaml@v1.0
uses: splunk/addonfactory-workflow-addon-manual-release/.github/workflows/reusable-publish-manual.yaml@v1.1
secrets:
GH_TOKEN_ADMIN: ${{ secrets.GH_TOKEN_ADMIN }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
12 changes: 0 additions & 12 deletions .github/workflows/release-notes.yaml

This file was deleted.

16 changes: 0 additions & 16 deletions .github/workflows/test-report.yml

This file was deleted.

2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ license = "Splunk-1-2020"
python = "^3.7"
splunktaucclib = "^6.0.7"

[tool.poetry.dev-dependencies]
[tool.poetry.group.dev.dependencies]
lovely-pytest-docker = "^0.2.1"
pytest = "^6.2.4"
pytest-expect = "^1.1.0"
Expand Down
85 changes: 6 additions & 79 deletions renovate.json
Original file line number Diff line number Diff line change
@@ -1,89 +1,16 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
"config:base",
":semanticCommitTypeAll(ci)"
"group:all",
":semanticCommitTypeAll(chore)",
"schedule:earlyMondays",
":disableDependencyDashboard"
],
"prConcurrentLimit": 0,
"prHourlyLimit": 0,
"rangeStrategy": "pin",
"dependencyDashboardApproval": true,
"transitiveRemediation": true,
"enabledManagers": ["poetry", "npm", "gradle"],
"separateMinorPatch": true,
"labels": ["dependencies"],
"semanticCommits": "enabled",
"lockFileMaintenance": {
"enabled": true,
"extends": [
"schedule:daily"
]
},
"vulnerabilityAlerts": {
"labels": ["dependencies", "security"]
},
"packageRules": [
{
"groupName": "splunk dependencies",
"matchPackageNames": [
"splunktaucclib",
"splunktalib",
"splunk-add-on-ucc-framework",
"pytest-splunk-addon",
"splunk-packaging-toolkit",
"pytest-splunk-addon-ui-smartx",
"solnlib"
],
"matchUpdateTypes": ["minor", "patch"],
"labels": ["dependencies", "splunk-packages", "minor", "patch"]
},
{
"matchUpdateTypes": ["patch"],
"matchManagers": ["poetry"],
"groupName": "python dependencies",
"labels": ["dependencies", "python", "patch"]
},
{
"matchUpdateTypes": ["minor"],
"matchManagers": ["poetry"],
"labels": ["dependencies", "python", "minor"]
},
{
"matchUpdateTypes": ["major"],
"matchManagers": ["poetry"],
"labels": ["dependencies", "python", "major"]
},
{
"matchUpdateTypes": ["patch"],
"matchManagers": ["npm"],
"groupName": "javascript dependencies",
"labels": ["dependencies", "javascript", "patch"]
},
{
"matchUpdateTypes": ["minor"],
"matchManagers": ["npm"],
"labels": ["dependencies", "javascript", "minor"]
},
{
"matchUpdateTypes": ["major"],
"matchManagers": ["npm"],
"labels": ["dependencies", "javascript", "major"]
},
{
"matchUpdateTypes": ["patch"],
"matchManagers": ["gradle"],
"groupName": "java dependencies",
"labels": ["dependencies", "java", "patch"]
},
{
"matchUpdateTypes": ["minor"],
"matchManagers": ["gradle"],
"labels": ["dependencies", "java", "minor"]
},
{
"matchUpdateTypes": ["major"],
"matchManagers": ["gradle"],
"labels": ["dependencies", "java", "major"]
"matchPackageNames": ["urllib3"],
"allowedVersions": "<2.0.0"
}
]
}

0 comments on commit 843bb5a

Please sign in to comment.