updated .github to https://github.com/it-at-m/refarch-templates/tree/232a52d31b9c2f68c573785bf8d4705fd99e9329/.github

Author: tobiasholler

.github/CODE_OF_CONDUCT.md

@@ -6,8 +6,8 @@ We as members, contributors, and leaders pledge to make participation in our
 community a harassment-free experience for everyone, regardless of age, body
 size, visible or invisible disability, ethnicity, sex characteristics, gender
 identity and expression, level of experience, education, socio-economic status,
-nationality, personal appearance, race, religion, or sexual identity
-and orientation.
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
 
 We pledge to act and interact in ways that contribute to an open, welcoming,
 diverse, inclusive, and healthy community.
@@ -22,17 +22,17 @@ community include:
 * Giving and gracefully accepting constructive feedback
 * Accepting responsibility and apologizing to those affected by our mistakes,
   and learning from the experience
-* Focusing on what is best not just for us as individuals, but for the
-  overall community
+* Focusing on what is best not just for us as individuals, but for the overall
+  community
 
 Examples of unacceptable behavior include:
 
-* The use of sexualized language or imagery, and sexual attention or
-  advances of any kind
+* The use of sexualized language or imagery, and sexual attention or advances of
+  any kind
 * Trolling, insulting or derogatory comments, and personal or political attacks
 * Public or private harassment
-* Publishing others' private information, such as a physical or email
-  address, without their explicit permission
+* Publishing others' private information, such as a physical or email address,
+  without their explicit permission
 * Other conduct which could reasonably be considered inappropriate in a
   professional setting
 
@@ -52,7 +52,7 @@ decisions when appropriate.
 
 This Code of Conduct applies within all community spaces, and also applies when
 an individual is officially representing the community in public spaces.
-Examples of representing our community include using an official e-mail address,
+Examples of representing our community include using an official email address,
 posting via an official social media account, or acting as an appointed
 representative at an online or offline event.
 
@@ -81,15 +81,15 @@ behavior was inappropriate. A public apology may be requested.
 
 ### 2. Warning
 
-**Community Impact**: A violation through a single incident or series
-of actions.
+**Community Impact**: A violation through a single incident or series of
+actions.
 
 **Consequence**: A warning with consequences for continued behavior. No
 interaction with the people involved, including unsolicited interaction with
 those enforcing the Code of Conduct, for a specified period of time. This
 includes avoiding interactions in community spaces as well as external channels
-like social media. Violating these terms may lead to a temporary or
-permanent ban.
+like social media. Violating these terms may lead to a temporary or permanent
+ban.
 
 ### 3. Temporary Ban
 
@@ -105,23 +105,27 @@ Violating these terms may lead to a permanent ban.
 ### 4. Permanent Ban
 
 **Community Impact**: Demonstrating a pattern of violation of community
-standards, including sustained inappropriate behavior,  harassment of an
+standards, including sustained inappropriate behavior, harassment of an
 individual, or aggression toward or disparagement of classes of individuals.
 
-**Consequence**: A permanent ban from any sort of public interaction within
-the community.
+**Consequence**: A permanent ban from any sort of public interaction within the
+community.
 
 ## Attribution
 
 This Code of Conduct is adapted from the [Contributor Covenant][homepage],
-version 2.0, available at
-https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
+version 2.1, available at
+[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
 
-Community Impact Guidelines were inspired by [Mozilla's code of conduct
-enforcement ladder](https://github.com/mozilla/diversity).
-
-[homepage]: https://www.contributor-covenant.org
+Community Impact Guidelines were inspired by
+[Mozilla's code of conduct enforcement ladder][Mozilla CoC].
 
 For answers to common questions about this code of conduct, see the FAQ at
-https://www.contributor-covenant.org/faq. Translations are available at
-https://www.contributor-covenant.org/translations.
+[https://www.contributor-covenant.org/faq][FAQ]. Translations are available at
+[https://www.contributor-covenant.org/translations][translations].
+
+[homepage]: https://www.contributor-covenant.org
+[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
+[Mozilla CoC]: https://github.com/mozilla/diversity
+[FAQ]: https://www.contributor-covenant.org/faq
+[translations]: https://www.contributor-covenant.org/translations

.github/README.md

@@ -4,6 +4,7 @@
 [milestones]: https://github.com/it-at-m/refarch-templates/milestones
 [project-board]: https://github.com/orgs/it-at-m/projects/16
 [documentation]: https://refarch-templates.oss.muenchen.de/
+[contribution-documentation]: https://refarch-templates.oss.muenchen.de/contribute.html
 [itm-opensource]: https://opensource.muenchen.de/
 [license]: ../LICENSE
 [code-of-conduct]: ./CODE_OF_CONDUCT.md
@@ -52,11 +53,7 @@ We often also plan our issues in [milestones][milestones].
 
 Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are **greatly appreciated**.
 
-If you have a suggestion that would make this better, please [open an issue][new-issue] and fill out the appropriate issue form with as much information as possible.
-If you want to work on a solution, fork the repo and create a pull request.
-Don't forget to give the project a star! Thanks again!
-
-More about this in the [CODE_OF_CONDUCT][code-of-conduct] file.
+To learn more about how you can contribute, please read our [contribution documentation][contribution-documentation].
 
 ## License
 

.github/pull_request_template.md

@@ -0,0 +1,53 @@
+# Pull Request
+
+<!-- Links -->
+[documentation-link]: https://refarch-templates.oss.muenchen.de/document.html#writing-the-documentation
+[code-quality-link]: https://refarch-templates.oss.muenchen.de/develop.html#code-quality
+[refarch-create-issue-link]: https://github.com/it-at-m/refarch/issues/new/choose
+
+## Changes
+
+- ...
+- ...
+
+## Reference
+
+Issue: #XXX
+
+## Checklist
+
+**Note**: If some checklist items are not relevant for your PR, just remove them.
+
+### General
+
+- [ ] ~~I have read the Contribution Guidelines (TBD)~~
+- [ ] Met all acceptance criteria of the issue
+- [ ] Added meaningful PR title and list of changes in the description
+- [ ] Created / Updated [documentation][documentation-link] (in English)
+- [ ] Opened follow-up issue in [refarch repository][refarch-create-issue-link] (if applicable)
+
+### Code
+
+- [ ] Wrote code and comments in English
+- [ ] Added unit tests
+- [ ] Removed waste on branch (e.g. `console.log`), see [code quality tooling][code-quality-link]
+
+#### Frontend / WebComponent
+
+- [ ] Added component tests (if component was changed)
+- [ ] Considered and tested accessibility (if UI change was made)
+- [ ] Checked / Updated Node.js engine requirements in `package.json` (if dependencies were changed)
+
+#### Backend / EAI
+
+- [ ] Added integration tests
+- [ ] Updated database migration scripts (if changes to model were made)
+- [ ] Added Swagger API annotations (if changes to API was made)
+- [ ] Checked Spring Boot version matching Camel version in `pom.xml` (if Camel version was bumped)
+
+### Development Stack
+
+- [ ] Approved image change company internal (if Docker image was added or version was modified)
+- [ ] Checked functionality of Docker stack (if Docker stack was modified or images were changed)
+
+## Screenshots (if UI was changed)

.github/workflows/codeql.yaml renamed to .github/workflows/codeql.yml

@@ -0,0 +1,10 @@
+name: Dependency Review
+
+on:
+  pull_request:
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5

.github/workflows/dependency-review.yml

@@ -1,13 +1,31 @@
 name: Deploy documentation website
 
 on:
-  # Runs on pushes targeting the `main` branch
+  # Runs on pushes to any branch when changes are made to docs or workflow
   push:
-    branches: [main]
     paths:
       - "docs/**"
-      - ".github/workflows/deploy-docs.yml" # define the concrete paths on which a change triggers this action, e.g. backend/**
+      - ".github/workflows/deploy-docs.yml"
+
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
+# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
+concurrency:
+  group: pages
+  cancel-in-progress: false
 
 jobs:
-  deploy-pages:
-    uses: it-at-m/.github/.github/workflows/deploy-pages.yml@main
+  deploy-docs:
+    runs-on: ubuntu-latest
+    steps:
+      - id: build_docs
+        uses: it-at-m/lhm_actions/action-templates/actions/action-build-docs@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
+      - id: deploy_docs
+        # Only deploy documentation from the main branch to prevent unauthorized changes
+
+        uses: it-at-m/lhm_actions/action-templates/actions/action-deploy-docs@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5

.github/workflows/dependency_review.yaml

@@ -0,0 +1,39 @@
+name: build all
+
+on:
+  pull_request:
+  push:
+    branches:
+      - "main"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      TZ: Europe/Berlin # timezone
+    strategy:
+      fail-fast: false
+      matrix:
+        include: # hier müssen die Pfade angegeben werden
+          - app-path: captchaservice-backend
+
+    steps:
+      - uses: it-at-m/lhm_actions/action-templates/actions/action-checkout@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
+      - if: ${{hashFiles(format('./{0}/package.json', matrix.app-path))!=null}}
+        id: node
+        uses: it-at-m/lhm_actions/action-templates/actions/action-npm-build@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
+        with:
+          app-path: "${{ matrix.app-path }}"
+      - if: ${{hashFiles(format('./{0}/pom.xml', matrix.app-path))!=null}}
+        id: maven
+        uses: it-at-m/lhm_actions/action-templates/actions/action-maven-build@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
+        with:
+          app-path: "${{ matrix.app-path }}"
+      - if: github.ref == 'refs/heads/main'
+        uses: it-at-m/lhm_actions/action-templates/actions/action-build-image@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
+        with:
+          path: "${{  matrix.app-path }}"
+          image-name: "${{  matrix.app-path }}"
+          artifact-name: ${{join(steps.*.outputs.artifact-name)}}
+          registry-password: ${{ secrets.GITHUB_TOKEN }}
+          registry-username: ${{ github.actor }}

.github/workflows/deploy-docs.yml

@@ -28,7 +28,7 @@ jobs:
       TZ: Europe/Berlin # timezone
     steps:
       - id: maven-release-step
-        uses: it-at-m/.github/.github/actions/action-maven-release@main
+        uses: it-at-m/lhm_actions/action-templates/actions/action-maven-release@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
         with:
           app-path: "/${{ github.event.inputs.app-path }}"
           releaseVersion: "${{ github.event.inputs.releaseVersion }}"
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: release-maven
     steps:
-      - uses: it-at-m/.github/.github/actions/action-build-image@main
+      - uses: it-at-m/lhm_actions/action-templates/actions/action-build-image@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
         with:
           path: "${{ github.event.inputs.app-path }}"
           image-name: "${{ github.event.inputs.app-path }}"
@@ -57,16 +57,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download a single artifact
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
+        uses: it-at-m/lhm_actions/action-templates/actions/action-create-github-release@6b19f8dd2bee160bee82bde4fa04ac9f6c1d5e1e # v1.0.5
         with:
-          name: ${{ needs.release-maven.outputs.ARTIFACT_NAME }}
-      - name: Create GitHub Release
-        id: create_release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
-        with:
-          tag_name: ${{needs.release-maven.outputs.MVN_ARTIFACT_ID}}-${{ github.event.inputs.releaseVersion }}
-          draft: false
-          prerelease: false
-          generate_release_notes: false
-          files: |
-            ${{ github.event.inputs.app-path }}/target/*.jar
+          artifact-name: ${{ needs.release-maven.outputs.ARTIFACT_NAME }}
+          tag-name: ${{needs.release-maven.outputs.MVN_ARTIFACT_ID}}-${{ github.event.inputs.releaseVersion }}
+          artifact-path: ${{ github.event.inputs.app-path }}/target/*.jar