diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..275c774 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,36 @@ +# +# MIT License +# +# (C) Copyright 2023 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +version: 2 +updates: + # Maintain dependencies for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + assignees: + - "Cray-HPE/CMS-core-product-support" + labels: + - "github-actions-deps" + - "dependabot" + open-pull-requests-limit: 16 diff --git a/.github/workflows/dependabot-changelog-helper.yml b/.github/workflows/dependabot-changelog-helper.yml new file mode 100644 index 0000000..0c49d88 --- /dev/null +++ b/.github/workflows/dependabot-changelog-helper.yml @@ -0,0 +1,60 @@ +# +# MIT License +# +# (C) Copyright 2023 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: 'dependabot-pr-changelog-helper' +on: + pull_request: + types: + - opened + - synchronize + - reopened + - ready_for_review + - labeled + - unlabeled + +jobs: + changelog: + runs-on: ubuntu-latest + permissions: + # Give the default GITHUB_TOKEN write permission to commit and push the + # added or changed files to the repository. + contents: write + steps: + - uses: actions/checkout@v4 + with: + # Depending on your needs, you can use a token that will re-trigger workflows + # See https://github.com/stefanzweifel/git-auto-commit-action#commits-of-this-action-do-not-trigger-new-workflow-runs + token: ${{ secrets.GITHUB_TOKEN }} + + - uses: dangoslen/dependabot-changelog-helper@v3 + with: + version: 'Unreleased' + activationLabel: 'dependabot' + changelogPath: './CHANGELOG.md' + + # This step is required for committing the changes to your branch. + # See https://github.com/stefanzweifel/git-auto-commit-action#commits-of-this-action-do-not-trigger-new-workflow-runs + - uses: stefanzweifel/git-auto-commit-action@v5 + with: + commit_message: "Updated Changelog" + diff --git a/.github/workflows/license-check.yaml b/.github/workflows/license-check.yaml new file mode 100644 index 0000000..93d1e27 --- /dev/null +++ b/.github/workflows/license-check.yaml @@ -0,0 +1,48 @@ +# +# MIT License +# +# (C) Copyright 2023 Hewlett Packard Enterprise Development LP +# +# Permission is hereby granted, free of charge, to any person obtaining a +# copy of this software and associated documentation files (the "Software"), +# to deal in the Software without restriction, including without limitation +# the rights to use, copy, modify, merge, publish, distribute, sublicense, +# and/or sell copies of the Software, and to permit persons to whom the +# Software is furnished to do so, subject to the following conditions: +# +# The above copyright notice and this permission notice shall be included +# in all copies or substantial portions of the Software. +# +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL +# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR +# OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, +# ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +# OTHER DEALINGS IN THE SOFTWARE. +# +name: Check Licenses + +on: + pull_request: + +jobs: + license-check: + runs-on: ubuntu-latest + + container: + image: artifactory.algol60.net/csm-docker/stable/license-checker:latest + credentials: + username: ${{ secrets.ARTIFACTORY_ALGOL60_READONLY_USERNAME }} + password: ${{ secrets.ARTIFACTORY_ALGOL60_READONLY_TOKEN }} + + steps: + - uses: actions/checkout@v4 + + - name: Get changed files + id: changed-files + uses: tj-actions/changed-files@v42 + + - name: License Check + if: ${{ steps.changed-files.outputs.all_changed_files }} + run: /usr/local/bin/python3 /license_check/license_check.py ${{ steps.changed-files.outputs.all_changed_files }} diff --git a/CHANGELOG.md b/CHANGELOG.md index 31659f7..e9a1aab 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,7 +5,13 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). -## Unreleased +## [Unreleased] + +## [2.7.0] - 2024-02-23 +### Dependencies +- Bump `tj-actions/changed-files` from 37 to 42 ([#30](https://github.com/Cray-HPE/cf-cme-ca-cert/pull/30), [#32](https://github.com/Cray-HPE/cf-cme-ca-cert/pull/32), [#33](https://github.com/Cray-HPE/cf-cme-ca-cert/pull/33), [#35](https://github.com/Cray-HPE/cf-cme-ca-cert/pull/35)) +- Bump `stefanzweifel/git-auto-commit-action` from 4 to 5 ([#31](https://github.com/Cray-HPE/cf-cme-ca-cert/pull/31)) +- Bump `actions/checkout` from 3 to 4 ([#29](https://github.com/Cray-HPE/cf-cme-ca-cert/pull/29)) ## [2.6.1] - 2023-08-10 ### Changed @@ -31,4 +37,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Support for SLES SP4 ### Changed -- Convert to gitflow/gitversion. +- Convert to gitflow/gitversion. \ No newline at end of file