Merge branch 'master' into rbarker-dev-patch-1

Author: rbarker-dev

.github/SECURITY.md

@@ -0,0 +1,19 @@
+# Security Policy
+
+## Supported Versions
+We currently support the following versions with security updates:
+
+| Version | Supported          |
+|---------|--------------------|
+| latest  | :white_check_mark: |
+
+## Reporting a Vulnerability
+If you discover a security vulnerability, please report it privately by emailing [[email protected]](mailto:[email protected]).  
+Do not create a public issue to disclose the vulnerability.
+
+We will acknowledge receipt of your report within 48 hours and work on a fix as soon as possible.
+
+## Security Best Practices
+- Follow [GitHub's security best practices](https://docs.github.com/en/code-security).
+- Ensure dependencies are up to date.
+- Use GitHub Dependabot to monitor vulnerabilities.

.github/workflows/main.yaml

@@ -0,0 +1,78 @@
+name: Release
+on:
+  workflow_run:
+    workflows: ["Tests"]
+    branches: ["master", "main"]
+    types:
+      - completed
+
+permissions:
+  contents: write
+
+jobs:
+  version:
+    name: Gather version information
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+
+    outputs:
+      latest_version: ${{ steps.latest_version.outputs.version }}
+      next_version: ${{ steps.next_version.outputs.version }}
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref }}
+
+      - name: Setup git-semver
+        uses: PandasWhoCode/setup-git-semver@b6b17c8e4e6b307d2a66fd93797a9d30e48836e1 # v1.0.4
+        with:
+          version: latest
+
+      - name: Latest version
+        id: latest_version
+        run: echo "version=$(git-semver --latest-version)" >> "${GITHUB_OUTPUT}"
+
+      - name: Next version
+        id: next_version
+        run: echo "version=$(git-semver --next-version)" >> "${GITHUB_OUTPUT}"
+
+  release:
+    name: Release
+    needs: version
+    if: ${{ needs.version.outputs.latest_version != needs.version.outputs.next_version }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref }}
+
+      - name: Setup git-semver
+        uses: PandasWhoCode/setup-git-semver@b6b17c8e4e6b307d2a66fd93797a9d30e48836e1 # v1.0.4
+        with:
+          version: latest
+
+      - name: Generate Changelog
+        id: generate_changelog
+        env:
+          VERSION=${{ needs.version.outputs.next_version }}
+        run: |
+          changelog=$(git-semver log --markdown "${VERSION}")
+          echo "changelog<<EOF" >> $GITHUB_OUTPUT
+
+      - name: Create Release
+        id: create_release
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: v${{ needs.version.outputs.next_version }}
+          release_name: Release ${{ needs.version.outputs.next_version }}
+          body: |
+            ${{ steps.generate_changelog.outputs.changelog }}
+          draft: false # Tag must be published before gitreleaser is executed
+          prerelease: false

.github/workflows/release.yaml

@@ -0,0 +1,47 @@
+name: Tests
+on:
+  push:
+    tags:
+      - v*
+    branches:
+      - "master"
+      - "main"
+  pull_request:
+    branches:
+      - "master"
+      - "main"
+
+jobs:
+  unit_tests:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ github.ref }}
+
+      - name: Setup Go
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
+        with:
+          go-version: '^1.24.1'
+      - run: go test ./...
+
+  integration_tests:
+    name: Integration Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ github.ref }}
+
+      - name: Setup Java
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+          cache: 'maven'
+
+      - name: Run Tests
+        run: cd integration_tests && mvn verify

.github/workflows/tests.yaml

@@ -0,0 +1,22 @@
+name: PR Conventional Commit Validation
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+  pull-requests: write
+  issues: write
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  validate-pr-title:
+    runs-on: ubuntu-latest
+    steps:
+      - name: PR Conventional Commit Validation
+        uses:  ytanikin/pr-conventional-commits@8267db1bacc237419f9ed0228bb9d94e94271a1d # v1.4.1
+        with:
+          task_types: '["feat","fix","docs","test","ci","refactor","perf","chore","revert"]'

.github/workflows/validate-conventional-commits.yaml

@@ -1,10 +1,5 @@
+version: 2
 project_name: git-semver
-before:
-  hooks:
-    # You may remove this if you don't use go modules.
-    - go mod tidy
-    # you may remove this if you don't need go generate
-    - go generate ./...
 builds:
   - main: ./cli/main.go
     goos:
@@ -19,17 +14,8 @@ builds:
     ignore:
       - goos: windows
         goarch: arm64
-checksum:
-  name_template: 'checksums.txt'
 snapshot:
   name_template: "{{ incpatch .Version }}-next"
-changelog:
-  skip: true
-release:
-  github:
-    owner: PSanetra
-    name: git-semver
-  mode: keep-existing
 dockers:
   - image_templates:
       - "psanetra/git-semver:latest"
@@ -41,7 +27,15 @@ dockers:
       - "--label=org.opencontainers.image.title={{ .ProjectName }}"
       - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
       - "--label=org.opencontainers.image.version={{ .Version }}"
-
+checksum:
+  name_template: 'checksums.txt'
+changelog:
+  disable: true
+release:
+  github:
+    owner: PSanetra
+    name: git-semver
+  mode: keep-existing
 # modelines, feel free to remove those if you don't want/use them:
 # yaml-language-server: $schema=https://goreleaser.com/static/schema.json
 # vim: set ts=2 sw=2 tw=0 fo=cnqoj

.goreleaser.yaml

@@ -0,0 +1,54 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and maintainers of this project pledge to make participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming, inclusive, and healthy environment.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our project include:
+
+- Using welcoming and inclusive language
+- Being respectful of differing viewpoints and experiences
+- Gracefully accepting constructive criticism
+- Focusing on what is best for the community
+- Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+- The use of sexualized language or imagery, and unwelcome sexual attention or advances
+- Trolling, insulting/derogatory comments, and personal attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address, without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned with this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies within all project spaces, both physical and online, when an individual is representing the project or its community. Examples of representing a project or community include using an official project email address, posting via an official social media account, or acting as an appointed representative at an online or offline event.
+
+This Code of Conduct also applies outside project spaces when the individual is representing the project or its community in public spaces.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at [[email protected]]. All complaints will be reviewed and investigated and will result in a response that is deemed necessary and appropriate to the circumstances. Maintainers are obligated to maintain confidentiality with regard to the reporter of an incident.
+
+## Enforcement Guidelines
+
+Project maintainers will follow these Community Impact Guidelines in determining the consequences for any action they deem to be in violation of this Code of Conduct:
+
+- **Contribution Removal**: Violations of the Code of Conduct may result in a temporary or permanent ban on the ability to contribute to the project.
+- **Warning**: The offending participant may be given a warning after the first instance of inappropriate behavior.
+- **Temporary Ban**: If the inappropriate behavior continues, the participant may be temporarily banned from participating in the community for a period of time.
+- **Permanent Ban**: In extreme cases, an individual may be permanently banned from contributing to the project.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org/), version 2.0, available at https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.