publish

Author: Ayush Jain

.github/labeler.yml

@@ -0,0 +1,80 @@
+# Labels for PR based on changed files
+
+# Backend
+backend:
+  - changed-files:
+      - any-glob-to-any-file: 'backend/**'
+
+rust:
+  - changed-files:
+      - any-glob-to-any-file: 'backend/**/*.rs'
+
+# Frontend
+frontend:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/**'
+
+typescript:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/**/*.{ts,tsx}'
+
+styles:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/**/*.{css,scss}'
+
+# Tests
+tests:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'backend/tests/**'
+          - 'frontend/tests/**'
+          - '**/*.test.{ts,tsx}'
+          - '**/*.spec.{ts,tsx}'
+
+e2e:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/tests/e2e/**'
+
+# CI/CD
+ci:
+  - changed-files:
+      - any-glob-to-any-file: '.github/**'
+
+# Documentation
+documentation:
+  - changed-files:
+      - any-glob-to-any-file:
+          - '**/*.md'
+          - 'docs/**'
+
+# Configuration
+config:
+  - changed-files:
+      - any-glob-to-any-file:
+          - '*.toml'
+          - '*.json'
+          - '*.yml'
+          - '*.yaml'
+          - '.env*'
+
+# Components
+components:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/src/components/**'
+
+# Features
+feature:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/src/features/**'
+
+# API
+api:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'backend/src/api/**'
+          - 'backend/src/presentation/**'
+
+# Store/State
+state:
+  - changed-files:
+      - any-glob-to-any-file: 'frontend/src/store/**'

.github/workflows/auto-merge.yml

@@ -0,0 +1,36 @@
+name: Auto Merge Dependabot PRs
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    name: Auto Merge
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+      - name: Auto-merge minor and patch updates
+        if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Comment on major updates
+        if: steps.metadata.outputs.update-type == 'version-update:semver-major'
+        run: |
+          gh pr comment "$PR_URL" --body "This is a **major version update**. Please review the changelog and breaking changes before merging."
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/benchmark.yml

@@ -0,0 +1,119 @@
+name: Benchmarks
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'backend/**'
+  pull_request:
+    branches: [main]
+    paths:
+      - 'backend/**'
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  benchmark:
+    name: Run Benchmarks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: backend
+
+      - name: Run benchmarks
+        run: |
+          if [ -f benches/*.rs ] || [ -d benches ]; then
+            cargo bench --all-features -- --output-format bencher | tee benchmark-results.txt
+          else
+            echo "No benchmarks found"
+            echo "No benchmarks configured" > benchmark-results.txt
+          fi
+        working-directory: backend
+        continue-on-error: true
+
+      - name: Store benchmark result
+        uses: benchmark-action/github-action-benchmark@v1
+        with:
+          tool: 'cargo'
+          output-file-path: backend/benchmark-results.txt
+          fail-on-alert: false
+          alert-threshold: '150%'
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          auto-push: false
+          comment-on-alert: true
+        continue-on-error: true
+
+  compile-time:
+    name: Compile Time Benchmark
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: backend
+
+      - name: Clean build for timing
+        run: cargo clean
+        working-directory: backend
+
+      - name: Measure debug build time
+        run: |
+          echo "### Compile Time" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          START=$(date +%s)
+          cargo build 2>&1
+          END=$(date +%s)
+          DEBUG_TIME=$((END - START))
+          echo "- Debug build: ${DEBUG_TIME}s" >> $GITHUB_STEP_SUMMARY
+        working-directory: backend
+
+      - name: Clean for release build
+        run: cargo clean
+        working-directory: backend
+
+      - name: Measure release build time
+        run: |
+          START=$(date +%s)
+          cargo build --release 2>&1
+          END=$(date +%s)
+          RELEASE_TIME=$((END - START))
+          echo "- Release build: ${RELEASE_TIME}s" >> $GITHUB_STEP_SUMMARY
+        working-directory: backend
+
+  binary-size:
+    name: Binary Size Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: backend
+
+      - name: Build release binary
+        run: cargo build --release
+        working-directory: backend
+
+      - name: Report binary size
+        run: |
+          echo "### Binary Size" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          if [ -f target/release/stockmart ]; then
+            SIZE=$(du -h target/release/stockmart | cut -f1)
+            echo "- stockmart binary: $SIZE" >> $GITHUB_STEP_SUMMARY
+
+            # Check for size regression (example: warn if > 50MB)
+            SIZE_BYTES=$(du -b target/release/stockmart | cut -f1)
+            if [ "$SIZE_BYTES" -gt 52428800 ]; then
+              echo "::warning::Binary size exceeds 50MB"
+            fi
+          else
+            echo "Binary not found" >> $GITHUB_STEP_SUMMARY
+          fi
+        working-directory: backend

.github/workflows/cleanup.yml

@@ -0,0 +1,62 @@
+name: Cleanup
+
+on:
+  schedule:
+    - cron: '0 0 * * 0'  # Run every Sunday at midnight
+  workflow_dispatch:
+
+permissions:
+  actions: write
+
+jobs:
+  cleanup-runs:
+    name: Delete Old Workflow Runs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Delete old workflow runs
+        uses: Mattraks/delete-workflow-runs@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          repository: ${{ github.repository }}
+          retain_days: 30
+          keep_minimum_runs: 10
+
+  cleanup-caches:
+    name: Cleanup Caches
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Cleanup old caches
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const caches = await github.rest.actions.getActionsCacheList({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              per_page: 100
+            });
+
+            const thirtyDaysAgo = new Date();
+            thirtyDaysAgo.setDate(thirtyDaysAgo.getDate() - 30);
+
+            for (const cache of caches.data.actions_caches) {
+              const lastAccessed = new Date(cache.last_accessed_at);
+              if (lastAccessed < thirtyDaysAgo) {
+                console.log(`Deleting cache: ${cache.key}`);
+                await github.rest.actions.deleteActionsCacheById({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  cache_id: cache.id
+                });
+              }
+            }
+
+  prune-images:
+    name: Prune Old Artifacts
+    runs-on: ubuntu-latest
+    steps:
+      - name: Delete old artifacts
+        uses: c-hive/gha-remove-artifacts@v1
+        with:
+          age: '30 days'
+          skip-tags: true

.github/workflows/dependency-review.yml

@@ -0,0 +1,40 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [main, real-bid, real-bid-rust]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  dependency-review:
+    name: Review Dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v4
+        with:
+          fail-on-severity: high
+          deny-licenses: GPL-3.0, AGPL-3.0
+          comment-summary-in-pr: always
+
+  license-check:
+    name: License Compliance
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: frontend/package-lock.json
+      - name: Install dependencies
+        run: npm ci
+        working-directory: frontend
+      - name: Check licenses
+        run: npx license-checker --onlyAllow "MIT;Apache-2.0;BSD-2-Clause;BSD-3-Clause;ISC;0BSD;CC0-1.0;Unlicense" --excludePrivatePackages
+        working-directory: frontend
+        continue-on-error: true