fix(deps): update all non-major dependencies (#62) #1545
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci-lib | |
| on: | |
| push: | |
| branches: | |
| - "**" | |
| defaults: | |
| run: | |
| # NOTE: A bit stricter than the default bash options used by GitHub Actions | |
| # (bash --noprofile --norc -e -o pipefail {0}) | |
| shell: bash --noprofile --norc -euo pipefail {0} | |
| # NOTE: Set concurrency for the current workflow to 1 | |
| concurrency: ci-${{ github.ref }}-${{ github.workflow }} | |
| jobs: | |
| build-and-release: | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: write | |
| packages: write | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0 | |
| with: | |
| distribution: "zulu" | |
| java-version: "17.0.10" | |
| java-package: "jdk" | |
| - uses: capralifecycle/actions-lib/check-runtime-dependencies@b4bb65b0ab41499f4829fe99c4b33b0b5a363562 # v1.6.2 | |
| - name: cache mvn | |
| uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 | |
| with: | |
| path: ~/.m2/repository | |
| key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-maven- | |
| - name: release preparation | |
| id: prep | |
| run: | | |
| git config --global user.name "github-actions[bot]" | |
| git config --global user.email "github-actions[bot]@users.noreply.github.com" | |
| major_version="$(sed -n "s/^.*<major-version>\([0-9]\{1,\}\)<\/major-version>.*$/\1/p" pom.xml)" | |
| echo "$major_version" | grep -q "^[0-9]\{1,\}$" || { | |
| echo "ERROR: Failed to extract <major-version> from pom.xml" | |
| exit 1 | |
| } | |
| echo "major-version=$major_version" >> "$GITHUB_OUTPUT" | |
| - uses: capralifecycle/actions-lib/generate-tag@b4bb65b0ab41499f4829fe99c4b33b0b5a363562 # v1.6.2 | |
| id: tag | |
| with: | |
| tag-prefix: "${{ steps.prep.outputs.major-version }}" | |
| tag-type: "punctuated-timestamp-tag" | |
| - name: resolve dependencies | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: mvn -B dependency:resolve | |
| - name: conditional release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| CONDITIONAL_RELEASE: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }} | |
| TAG: "${{ steps.tag.outputs.tag }}" | |
| run: | | |
| if [ "$CONDITIONAL_RELEASE" = "true" ]; then | |
| echo "Releasing library with tag '$TAG'" | |
| mvn -B source:jar deploy scm:tag -Drevision="$TAG" -Dtag="$TAG" \ | |
| org.apache.maven.plugins:maven-enforcer-plugin:3.5.0:enforce -Denforcer.rules=requireReleaseDeps | |
| else | |
| mvn -B -U verify | |
| fi | |
| - uses: capralifecycle/actions-lib/slack-notify@b4bb65b0ab41499f4829fe99c4b33b0b5a363562 # v1.6.2 | |
| # NOTE: We only want to be notified about failures on the default branch | |
| if: ${{ failure() && github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }} | |
| with: | |
| bot-token: ${{ secrets.SHARED_SLACK_BOT_TOKEN }} | |
| channel: "#cals-dev-info" |