fix(deps): update dependency net.onelitefeather:vulpes-model to v2 #61
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: release-please | ||
|
Check failure on line 1 in .github/workflows/release-please.yml
|
||
| on: | ||
| push: | ||
| branches: [main] | ||
| workflow_dispatch: | ||
| inputs: | ||
| docker_version: | ||
| description: "Version to (re)build & push the Docker image for, e.g. 2.0.0 (no leading v). Runs only the docker job." | ||
| required: true | ||
| type: string | ||
| permissions: | ||
| contents: write | ||
| pull-requests: write | ||
| jobs: | ||
| release-please: | ||
| runs-on: ubuntu-latest | ||
| if: github.event_name == 'push' | ||
| outputs: | ||
| release_created: ${{ steps.release.outputs.release_created }} | ||
| tag_name: ${{ steps.release.outputs.tag_name }} | ||
| version: ${{ steps.release.outputs.version }} | ||
| steps: | ||
| - name: Run release-please | ||
| id: release | ||
| uses: googleapis/release-please-action@v5 | ||
| with: | ||
| config-file: release-please-config.json | ||
| manifest-file: .release-please-manifest.json | ||
| # ---- Maven publish ---- | ||
| publish: | ||
| needs: release-please | ||
| if: needs.release-please.outputs.release_created == 'true' | ||
| uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-publish.yml@v2.8.1 | ||
| with: | ||
| java-version: "25.0.3" | ||
| java-distribution: "temurin" | ||
| secrets: inherit | ||
| publish-snapshot: | ||
| needs: [release-please, version] | ||
| if: needs.version.outputs.is_snapshot == 'true' | ||
| uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-publish.yml@v2.8.1 | ||
| with: | ||
| java-version: "25.0.3" | ||
| java-distribution: "temurin" | ||
| secrets: inherit | ||
| # ---- Release Docker image (Gradle produces the context, docker-publish builds it) ---- | ||
| build-context: | ||
| name: Build Docker context | ||
| needs: release-please | ||
| # On a real release, or on a manual dispatch to (re)publish a given version. | ||
| if: | | ||
| always() && | ||
| ((github.event_name == 'push' && needs.release-please.outputs.release_created == 'true') || | ||
| github.event_name == 'workflow_dispatch') | ||
| uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-docker-context.yml@v2.8.1 | ||
| with: | ||
| version: ${{ github.event_name == 'workflow_dispatch' && inputs.docker_version || needs.release-please.outputs.version }} | ||
| gradle-command: "./gradlew jar optimizedBuildLayers optimizedDockerfile -Pversion=$VERSION" | ||
| context-path: "build/docker/optimized" | ||
| artifact-name: "docker-context-release" | ||
| secrets: inherit | ||
| docker: | ||
| name: Build Docker Artifacts | ||
| needs: [release-please, build-context] | ||
| permissions: | ||
| contents: read | ||
| id-token: write # keyless cosign signing via GitHub OIDC | ||
| if: | | ||
| always() && needs.build-context.result == 'success' && | ||
| ((github.event_name == 'push' && needs.release-please.outputs.release_created == 'true') || | ||
| github.event_name == 'workflow_dispatch') | ||
| uses: OneLiteFeatherNET/workflows/.github/workflows/docker-publish.yml@v2.8.1 | ||
| with: | ||
| image-name: "onelitefeather/vulpes-backend" | ||
| version: ${{ github.event_name == 'workflow_dispatch' && inputs.docker_version || needs.release-please.outputs.version }} | ||
| context: "build/docker/optimized" | ||
| artifact-name: "docker-context-release" | ||
| blob-chunk: "90000000" # ~90 MB, under the 100 MB Cloudflare cap | ||
| req-concurrent: "4" | ||
| secrets: inherit | ||
| # ---- Snapshot Docker image (on every non-release push to main) ---- | ||
| build-context-snapshot: | ||
| name: Build Docker context (snapshot) | ||
| needs: [release-please, version] | ||
| if: needs.version.outputs.is_snapshot == 'true' | ||
| uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-docker-context.yml@v2.8.1 | ||
| with: | ||
| version: ${{ needs.version.outputs.version }} | ||
| gradle-command: "./gradlew jar optimizedBuildLayers optimizedDockerfile -Pversion=$VERSION" | ||
| context-path: "build/docker/optimized" | ||
| artifact-name: "docker-context-snapshot" | ||
| secrets: inherit | ||
| docker-snapshot: | ||
| name: Build Docker Artifacts (snapshot) | ||
| needs: [version, build-context-snapshot] | ||
| permissions: | ||
| contents: read | ||
| id-token: write # keyless cosign signing via GitHub OIDC | ||
| if: needs.version.outputs.is_snapshot == 'true' | ||
| uses: OneLiteFeatherNET/workflows/.github/workflows/docker-publish.yml@v2.8.1 | ||
| with: | ||
| image-name: "onelitefeather/vulpes-backend" | ||
| version: ${{ needs.version.outputs.version }} | ||
| context: "build/docker/optimized" | ||
| artifact-name: "docker-context-snapshot" | ||
| blob-chunk: "90000000" # ~90 MB, under the 100 MB Cloudflare cap | ||
| req-concurrent: "4" | ||
| secrets: inherit | ||
| sbom: | ||
| name: Attach SBOM to release | ||
| needs: release-please | ||
| if: needs.release-please.outputs.release_created == 'true' | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: write | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v7 | ||
| with: | ||
| ref: ${{ needs.release-please.outputs.tag_name }} | ||
| - name: Generate CycloneDX SBOM | ||
| uses: aquasecurity/trivy-action@v0.36.0 | ||
| with: | ||
| scan-type: fs | ||
| scan-ref: . | ||
| format: cyclonedx | ||
| output: bom.json | ||
| exit-code: '0' | ||
| - name: Attach SBOM to the release | ||
| env: | ||
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| TAG: ${{ needs.release-please.outputs.tag_name }} | ||
| run: gh release upload "$TAG" bom.json --clobber | ||
