Update github workflows

Closes gh-4

Author: rainboyan

.github/dependabot.yml

@@ -1,117 +1,24 @@
 name-template: $RESOLVED_VERSION
 tag-template: v$RESOLVED_VERSION
-pull-request:
-  title-templates:
-    fix: '🐛 $TITLE (#$NUMBER)'
-    feat: '🚀 $TITLE (#$NUMBER)'
-    default: '$TITLE (#$NUMBER)'
-autolabeler:
-  - label: 'bug'
-    branch:
-      - '/fix\/.+/'
-    title:
-      - '/fix/i'
-  - label: 'improvement'
-    branch:
-      - '/improv\/.+/'
-    title:
-      - '/improv/i'      
-  - label: 'feature'
-    branch:
-      - '/feature\/.+/'
-    title:
-      - '/feat/i'
-  - label: 'documentation'
-    branch:
-      - '/docs\/.+/'
-    title:
-      - '/docs/i'
-  - label: 'maintenance'
-    branch:
-      - '/(chore|refactor|style|test|ci|perf|build)\/.+/'
-    title:
-      - '/(chore|refactor|style|test|ci|perf|build)/i'
-  - label: 'chore'
-    branch:
-      - '/chore\/.+/'
-    title:
-      - '/chore/i'
-  - label: 'refactor'
-    branch:
-      - '/refactor\/.+/'
-    title:
-      - '/refactor/i'
-  - label: 'style'
-    branch:
-      - '/style\/.+/'
-    title:
-      - '/style/i'
-  - label: 'test'
-    branch:
-      - '/test\/.+/'
-    title:
-      - '/test/i'
-  - label: 'ci'
-    branch:
-      - '/ci\/.+/'
-    title:
-      - '/ci/i'
-  - label: 'perf'
-    branch:
-      - '/perf\/.+/'
-    title:
-      - '/perf/i'
-  - label: 'build'
-    branch:
-      - '/build\/.+/'
-    title:
-      - '/build/i'
-  - label: 'deps'
-    branch:
-      - '/deps\/.+/'
-    title:
-      - '/deps/i'
-  - label: 'revert'
-    branch:
-      - '/revert\/.+/'
-    title:
-      - '/revert/i'
 categories:
-  - title: '🚀 Features'
+  - title: ✨ Features
     labels:
-      - 'feature'
       - "type: enhancement"
       - "type: new feature"
       - "type: major"
-      - "type: minor"      
-  - title: '💡 Improvements'
+  - title: 🐛 Bug Fixes/Improvements
     labels:
-      - 'improvement'
       - "type: improvement"
-
-  - title: '🐛 Bug Fixes'
-    labels:
-      - 'fix'      
-      - 'bug' 
       - "type: bug"
-  - title: '📚 Documentation'
+      - "type: minor"
+  - title: 🛠 Dependency upgrades
     labels:
-      - 'docs'
-  - title: '🔧 Maintenance'
+      - "type: dependency upgrade"
+      - "dependencies"
+  - title: ⚙️ Build/CI
     labels:
-      - 'maintenance'
-      - 'chore'
-      - 'refactor'
-      - 'style'
-      - 'test'
-      - 'ci'
-      - 'perf'
-      - 'build'
       - "type: ci"
       - "type: build"
-  - title: '⏪ Reverts'
-    labels:
-      - 'revert'
 change-template: '- $TITLE @$AUTHOR (#$NUMBER)'
 version-resolver:
   major:

.github/release-drafter.yml

@@ -1,90 +1,75 @@
-name: Java CI
+name: Grace CI
 on:
   push:
     branches:
-      - '[6-9]+.[0-9]+.x'
+      - 2023.3.x
   pull_request:
     branches:
-      - '[6-9]+.[0-9]+.x'
+      - 2023.3.x
   workflow_dispatch:
-    inputs:
-      message:
-        description: 'Snapshot information (e.g. New Core Snapshot Tue Dec 15 00:07:18 UTC 2020 f212f54)'
-        required: true
 jobs:
   build:
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
     runs-on: ubuntu-latest
-    continue-on-error: true
-    env:
-      WORKSPACE: ${{ github.workspace }}
-      GRADLE_OPTS: -Xmx1500m -Dfile.encoding=UTF-8
     strategy:
       matrix:
-        mongodb-version: ['4.4', '5.0', '6.0' ]
+        java: ['17']
+    env:
+      WORKSPACE: ${{ github.workspace }}
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up JDK
         uses: actions/setup-java@v4
         with:
           distribution: 'adopt'
-          java-version: '11'
-      - name: Start MongoDB
-        uses: supercharge/mongodb-github-action@v1.10.0
-        with:
-          mongodb-version: ${{ matrix.mongodb-version }}
+          java-version: ${{ matrix.java }}
       - name: Run Build
+        id: build
         uses: gradle/gradle-build-action@v3
-        env:
-          GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
         with:
-          arguments: build -Dgeb.env=chromeHeadless
+          arguments: build
   publish:
-    runs-on: ubuntu-latest
     if: github.event_name == 'push'
-    needs: [build]
-    env:
-      WORKSPACE: ${{ github.workspace }}
+    needs: ["build"]
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
+      checks: write
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        java: ['17']
     steps:
-    - uses: actions/checkout@v4
-    - name: Set up JDK
-      uses: actions/setup-java@v4
-      with:
-        distribution: 'adopt'
-        java-version: '11'
-    - name: Publish to repo.grails.org
-      id: publish
-      uses: gradle/gradle-build-action@v3
-      env:
-        GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-        ARTIFACTORY_USERNAME: ${{ secrets.ARTIFACTORY_USERNAME }}
-        ARTIFACTORY_PASSWORD: ${{ secrets.ARTIFACTORY_PASSWORD }}
-      with:
-        arguments: -Dorg.gradle.internal.publish.checksums.insecure=true publish
-    - name: Build Docs
-      id: docs
-      if: steps.build.outcome == 'success'
-      uses: gradle/gradle-build-action@v3
-      env:
-        GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-      with:
-        arguments: docs:docs
-    - name: Determine docs target repository
-      if: steps.docs.outcome == 'success'
-      uses: haya14busa/action-cond@v1
-      id: docs_target
-      with:
-        cond: ${{ github.repository == 'grails/gorm-mongodb' }}
-        if_true: "grails/grails-data-mapping"
-        if_false: ${{ github.repository }}
-    - name: Publish to Github Pages
-      if: steps.docs.outcome == 'success'
-      uses: micronaut-projects/github-pages-deploy-action@master
-      env:
-        TARGET_REPOSITORY: ${{ steps.docs_target.outputs.value }}
-        GH_TOKEN: ${{ secrets.GH_TOKEN }}
-        BRANCH: gh-pages
-        FOLDER: docs/build/docs
-        DOC_SUB_FOLDER: mongodb
-        DOC_FOLDER: gh-pages
-        COMMIT_EMAIL: behlp@objectcomputing.com
-        COMMIT_NAME: Puneet Behl
+      - name: Checkout repository
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'adopt'
+          java-version: ${{ matrix.java }}
+      - name: Generate secring file
+        env:
+          SECRING_FILE: ${{ secrets.SECRING_FILE }}
+        run: echo $SECRING_FILE | base64 -d > ${{ github.workspace }}/secring.gpg
+      - name: Publish to Sonatype OSSRH
+        id: publish
+        uses: gradle/gradle-build-action@v3
+        env:
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+          SONATYPE_NEXUS_URL: ${{ secrets.SONATYPE_NEXUS_URL }}
+          SONATYPE_STAGING_PROFILE_ID: ${{ secrets.SONATYPE_STAGING_PROFILE_ID }}
+          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+          SIGNING_PASSPHRASE: ${{ secrets.SIGNING_PASSPHRASE }}
+          SECRING_FILE: ${{ secrets.SECRING_FILE }}
+        with:
+          arguments: -Psigning.secretKeyRingFile=${{ github.workspace }}/secring.gpg publishToSonatype closeAndReleaseSonatypeStagingRepository