chore(ci): aggiorna action versions, fix auto-release e migrazione self-hosted
- Aggiorna checkout v4→v6, setup-python v5→v5.2.0, setup-android v3→v4 - Aggiorna upload-artifact v3→v4, docker/login-action v3→v4 - Aggiunge needs su auto-release in tutti gli esempi (fix esecuzione parallela) - Aggiunge token esplicito nel checkout come workaround bug Gitea #31900 - Aggiunge job dependency-outdated mancante in libreria-npm/maintenance.yml - Aggiorna schedule: libreria-npm mercoledì 02:00, microservizio lunedì 02:00 - Migra tutti i riferimenti da gitea.com/Punga78 a gitea.pzetatouch.it/devops Fixes #1 @3h
This commit is contained in:
@@ -8,9 +8,10 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
token: ${{ gitea.token }}
|
||||||
|
|
||||||
- name: Generate changelog
|
- name: Generate changelog
|
||||||
id: changelog
|
id: changelog
|
||||||
|
|||||||
@@ -39,7 +39,7 @@ jobs:
|
|||||||
runs-on: ${{ inputs.runner }}
|
runs-on: ${{ inputs.runner }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
uses: https://gitea.com/actions/setup-node@v4
|
uses: https://gitea.com/actions/setup-node@v4
|
||||||
@@ -53,7 +53,7 @@ jobs:
|
|||||||
java-version: ${{ inputs.java-version || '17' }}
|
java-version: ${{ inputs.java-version || '17' }}
|
||||||
|
|
||||||
- name: Setup Android SDK
|
- name: Setup Android SDK
|
||||||
uses: https://github.com/android-actions/setup-android@v3
|
uses: https://github.com/android-actions/setup-android@v4
|
||||||
|
|
||||||
- name: Cache npm
|
- name: Cache npm
|
||||||
uses: https://gitea.com/actions/cache@v4
|
uses: https://gitea.com/actions/cache@v4
|
||||||
@@ -145,7 +145,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Upload APK artifact
|
- name: Upload APK artifact
|
||||||
if: inputs.output-format == 'apk'
|
if: inputs.output-format == 'apk'
|
||||||
uses: https://github.com/actions/upload-artifact@v3
|
uses: https://github.com/actions/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}-apk
|
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}-apk
|
||||||
path: android/app/build/outputs/apk/${{ inputs.build-type }}/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}.apk
|
path: android/app/build/outputs/apk/${{ inputs.build-type }}/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}.apk
|
||||||
@@ -153,7 +153,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Upload AAB artifact
|
- name: Upload AAB artifact
|
||||||
if: inputs.output-format == 'aab'
|
if: inputs.output-format == 'aab'
|
||||||
uses: https://github.com/actions/upload-artifact@v3
|
uses: https://github.com/actions/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release-aab
|
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release-aab
|
||||||
path: android/app/build/outputs/bundle/release/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release.aab
|
path: android/app/build/outputs/bundle/release/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release.aab
|
||||||
@@ -161,7 +161,7 @@ jobs:
|
|||||||
|
|
||||||
- name: Upload Gradle build reports
|
- name: Upload Gradle build reports
|
||||||
if: always()
|
if: always()
|
||||||
uses: https://github.com/actions/upload-artifact@v3
|
uses: https://github.com/actions/upload-artifact@v4
|
||||||
with:
|
with:
|
||||||
name: gradle-build-reports
|
name: gradle-build-reports
|
||||||
path: android/build/reports/
|
path: android/build/reports/
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
uses: https://gitea.com/actions/setup-node@v4
|
uses: https://gitea.com/actions/setup-node@v4
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
uses: https://gitea.com/actions/setup-node@v4
|
uses: https://gitea.com/actions/setup-node@v4
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ jobs:
|
|||||||
runs-on: ${{ inputs.runner }}
|
runs-on: ${{ inputs.runner }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
uses: https://gitea.com/actions/setup-node@v4
|
uses: https://gitea.com/actions/setup-node@v4
|
||||||
@@ -54,7 +54,7 @@ jobs:
|
|||||||
run: npm run test
|
run: npm run test
|
||||||
|
|
||||||
- name: Login to container registry
|
- name: Login to container registry
|
||||||
uses: https://gitea.com/docker/login-action@v3
|
uses: https://gitea.com/docker/login-action@v4
|
||||||
with:
|
with:
|
||||||
registry: gitea.pzetatouch.it
|
registry: gitea.pzetatouch.it
|
||||||
username: ${{ secrets.G_USER }}
|
username: ${{ secrets.G_USER }}
|
||||||
|
|||||||
@@ -12,7 +12,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
uses: https://gitea.com/actions/setup-node@v4
|
uses: https://gitea.com/actions/setup-node@v4
|
||||||
|
|||||||
@@ -16,9 +16,10 @@ jobs:
|
|||||||
working-directory: ${{ inputs.working-directory }}
|
working-directory: ${{ inputs.working-directory }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
token: ${{ gitea.token }}
|
||||||
|
|
||||||
- name: Generate changelog
|
- name: Generate changelog
|
||||||
id: changelog
|
id: changelog
|
||||||
|
|||||||
@@ -22,10 +22,10 @@ jobs:
|
|||||||
working-directory: ${{ inputs.working-directory }}
|
working-directory: ${{ inputs.working-directory }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Python
|
- name: Setup Python
|
||||||
uses: https://github.com/actions/setup-python@v5
|
uses: https://github.com/actions/setup-python@v5.2.0
|
||||||
with:
|
with:
|
||||||
python-version: ${{ inputs.python-version || '3.11' }}
|
python-version: ${{ inputs.python-version || '3.11' }}
|
||||||
|
|
||||||
|
|||||||
@@ -22,10 +22,10 @@ jobs:
|
|||||||
working-directory: ${{ inputs.working-directory }}
|
working-directory: ${{ inputs.working-directory }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Python
|
- name: Setup Python
|
||||||
uses: https://github.com/actions/setup-python@v5
|
uses: https://github.com/actions/setup-python@v5.2.0
|
||||||
with:
|
with:
|
||||||
python-version: ${{ inputs.python-version || '3.11' }}
|
python-version: ${{ inputs.python-version || '3.11' }}
|
||||||
|
|
||||||
|
|||||||
@@ -30,10 +30,10 @@ jobs:
|
|||||||
working-directory: ${{ inputs.working-directory }}
|
working-directory: ${{ inputs.working-directory }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Python
|
- name: Setup Python
|
||||||
uses: https://github.com/actions/setup-python@v5
|
uses: https://github.com/actions/setup-python@v5.2.0
|
||||||
with:
|
with:
|
||||||
python-version: ${{ inputs.python-version || '3.11' }}
|
python-version: ${{ inputs.python-version || '3.11' }}
|
||||||
|
|
||||||
@@ -72,7 +72,7 @@ jobs:
|
|||||||
run: pytest --tb=short -q
|
run: pytest --tb=short -q
|
||||||
|
|
||||||
- name: Login to container registry
|
- name: Login to container registry
|
||||||
uses: https://gitea.com/docker/login-action@v3
|
uses: https://gitea.com/docker/login-action@v4
|
||||||
with:
|
with:
|
||||||
registry: gitea.pzetatouch.it
|
registry: gitea.pzetatouch.it
|
||||||
username: ${{ secrets.G_USER }}
|
username: ${{ secrets.G_USER }}
|
||||||
|
|||||||
@@ -23,10 +23,10 @@ jobs:
|
|||||||
working-directory: ${{ inputs.working-directory }}
|
working-directory: ${{ inputs.working-directory }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Python
|
- name: Setup Python
|
||||||
uses: https://github.com/actions/setup-python@v5
|
uses: https://github.com/actions/setup-python@v5.2.0
|
||||||
with:
|
with:
|
||||||
python-version: ${{ inputs.python-version || '3.11' }}
|
python-version: ${{ inputs.python-version || '3.11' }}
|
||||||
|
|
||||||
|
|||||||
@@ -12,7 +12,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: https://gitea.com/actions/checkout@v4
|
uses: https://gitea.com/actions/checkout@v6
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
uses: https://gitea.com/actions/setup-node@v4
|
uses: https://gitea.com/actions/setup-node@v4
|
||||||
|
|||||||
@@ -19,11 +19,11 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
quality-gates:
|
quality-gates:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
android-debug:
|
android-debug:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
build-type: debug
|
build-type: debug
|
||||||
|
|||||||
@@ -18,19 +18,19 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
branch-cleanup:
|
branch-cleanup:
|
||||||
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
dependency-audit:
|
dependency-audit:
|
||||||
if: >
|
if: >
|
||||||
gitea.event_name == 'workflow_dispatch' ||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
dependency-outdated:
|
dependency-outdated:
|
||||||
if: >
|
if: >
|
||||||
gitea.event_name == 'workflow_dispatch' ||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -18,8 +18,8 @@
|
|||||||
# }
|
# }
|
||||||
# }
|
# }
|
||||||
#
|
#
|
||||||
# NOTA: i job girano in parallelo (no needs).
|
# NOTA: gitea-release attende entrambe le build Android via needs.
|
||||||
# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
|
# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
|
||||||
|
|
||||||
name: Release
|
name: Release
|
||||||
|
|
||||||
@@ -30,19 +30,20 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
android-apk:
|
android-apk:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
build-type: release
|
build-type: release
|
||||||
output-format: apk
|
output-format: apk
|
||||||
|
|
||||||
android-aab:
|
android-aab:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
build-type: release
|
build-type: release
|
||||||
output-format: aab
|
output-format: aab
|
||||||
|
|
||||||
gitea-release:
|
gitea-release:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
|
needs: [android-apk, android-aab]
|
||||||
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -16,5 +16,5 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
quality-gates:
|
quality-gates:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -1,5 +1,9 @@
|
|||||||
# Copia in: .gitea/workflows/maintenance.yml
|
# Copia in: .gitea/workflows/maintenance.yml
|
||||||
# Combina branch-cleanup (PR merge) e dependency-check (settimanale)
|
# Trigger:
|
||||||
|
# - PR merged → cleanup branch sorgente
|
||||||
|
# - Ogni lunedì 08:00 → security audit vulnerabilità (settimanale)
|
||||||
|
# - Ogni 1° del mese → controllo pacchetti obsoleti (mensile)
|
||||||
|
# - Manuale → workflow_dispatch (esegue tutti i job di manutenzione)
|
||||||
|
|
||||||
name: Maintenance
|
name: Maintenance
|
||||||
|
|
||||||
@@ -7,16 +11,26 @@ on:
|
|||||||
pull_request:
|
pull_request:
|
||||||
types: [closed]
|
types: [closed]
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '0 8 * * 1'
|
- cron: '0 2 * * 3' # ogni mercoledì alle 02:00 → security audit
|
||||||
|
- cron: '0 2 1 * *' # ogni 1° del mese alle 02:00 → outdated check
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
branch-cleanup:
|
branch-cleanup:
|
||||||
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
dependency-check:
|
dependency-audit:
|
||||||
if: gitea.event_name == 'schedule' || gitea.event_name == 'workflow_dispatch'
|
if: >
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 3')
|
||||||
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
|
||||||
|
secrets: inherit
|
||||||
|
|
||||||
|
dependency-outdated:
|
||||||
|
if: >
|
||||||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 1 * *')
|
||||||
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -1,8 +1,8 @@
|
|||||||
# Copia in: .gitea/workflows/release.yml
|
# Copia in: .gitea/workflows/release.yml
|
||||||
# Trigger: git tag v* → pubblica su npm + crea release Gitea
|
# Trigger: git tag v* → pubblica su npm + crea release Gitea
|
||||||
#
|
#
|
||||||
# NOTA: i job girano in parallelo (non sequenziali con needs).
|
# NOTA: auto-release attende npm-publish via needs.
|
||||||
# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
|
# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
|
||||||
|
|
||||||
name: Release
|
name: Release
|
||||||
|
|
||||||
@@ -13,9 +13,10 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
npm-publish:
|
npm-publish:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/npm-publish.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/npm-publish.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
auto-release:
|
auto-release:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
|
needs: [npm-publish]
|
||||||
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -16,7 +16,7 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
quality-gates:
|
quality-gates:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
# with:
|
# with:
|
||||||
# node-version: '22.17' # opzionale, default già impostato
|
# node-version: '22.17' # opzionale, default già impostato
|
||||||
|
|||||||
@@ -11,26 +11,26 @@ on:
|
|||||||
pull_request:
|
pull_request:
|
||||||
types: [closed]
|
types: [closed]
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '0 8 * * 1' # ogni lunedì alle 08:00 → security audit
|
- cron: '0 2 * * 1' # ogni lunedì alle 02:00 → security audit
|
||||||
- cron: '0 8 1 * *' # ogni 1° del mese alle 08:00 → outdated check
|
- cron: '0 4 1 * *' # ogni 1° del mese alle 04:00 → outdated check
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
branch-cleanup:
|
branch-cleanup:
|
||||||
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
dependency-audit:
|
dependency-audit:
|
||||||
if: >
|
if: >
|
||||||
gitea.event_name == 'workflow_dispatch' ||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 1')
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
dependency-outdated:
|
dependency-outdated:
|
||||||
if: >
|
if: >
|
||||||
gitea.event_name == 'workflow_dispatch' ||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 4 1 * *')
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -1,8 +1,8 @@
|
|||||||
# Copia in: .gitea/workflows/release.yml
|
# Copia in: .gitea/workflows/release.yml
|
||||||
# Trigger: git tag v* → build Docker + crea release Gitea
|
# Trigger: git tag v* → build Docker + crea release Gitea
|
||||||
#
|
#
|
||||||
# NOTA: i job girano in parallelo (non sequenziali con needs).
|
# NOTA: auto-release attende docker-release via needs.
|
||||||
# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
|
# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
|
||||||
|
|
||||||
name: Release
|
name: Release
|
||||||
|
|
||||||
@@ -14,11 +14,12 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
docker-release:
|
docker-release:
|
||||||
runs-on: catthehacker-latest # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
|
runs-on: catthehacker-latest # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/docker-release.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/docker-release.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
runner: catthehacker-latest # runner con Docker pre-installato
|
runner: catthehacker-latest # runner con Docker pre-installato
|
||||||
|
|
||||||
auto-release:
|
auto-release:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
|
needs: [docker-release]
|
||||||
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
@@ -24,7 +24,7 @@ on:
|
|||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
quality-gates:
|
quality-gates:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-quality-gates.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-quality-gates.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
# with:
|
# with:
|
||||||
# python-version: '3.11' # opzionale, default già impostato
|
# python-version: '3.11' # opzionale, default già impostato
|
||||||
|
|||||||
@@ -18,14 +18,14 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
branch-cleanup:
|
branch-cleanup:
|
||||||
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
dependency-audit:
|
dependency-audit:
|
||||||
if: >
|
if: >
|
||||||
gitea.event_name == 'workflow_dispatch' ||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-dependency-check.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-dependency-check.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
# with:
|
# with:
|
||||||
# python-version: '3.11'
|
# python-version: '3.11'
|
||||||
@@ -35,7 +35,7 @@ jobs:
|
|||||||
if: >
|
if: >
|
||||||
gitea.event_name == 'workflow_dispatch' ||
|
gitea.event_name == 'workflow_dispatch' ||
|
||||||
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
|
(gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-dependency-outdated.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-dependency-outdated.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
# with:
|
# with:
|
||||||
# python-version: '3.11'
|
# python-version: '3.11'
|
||||||
|
|||||||
@@ -1,8 +1,8 @@
|
|||||||
# Copia in: .gitea/workflows/release.yml
|
# Copia in: .gitea/workflows/release.yml
|
||||||
# Trigger: git tag v* → build Docker + crea release Gitea
|
# Trigger: git tag v* → build Docker + crea release Gitea
|
||||||
#
|
#
|
||||||
# NOTA: i job girano in parallelo (non sequenziali con needs).
|
# NOTA: auto-release attende docker-release via needs.
|
||||||
# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
|
# Workaround Gitea bug #31900: token esplicito nel checkout di python-auto-release.yml.
|
||||||
#
|
#
|
||||||
# Prerequisiti:
|
# Prerequisiti:
|
||||||
# - Dockerfile presente nella root del progetto
|
# - Dockerfile presente nella root del progetto
|
||||||
@@ -19,7 +19,7 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
docker-release:
|
docker-release:
|
||||||
runs-on: catthehacker-latest # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
|
runs-on: catthehacker-latest # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-docker-release.yml@v1
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-docker-release.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
with:
|
with:
|
||||||
runner: catthehacker-latest # runner con Docker pre-installato
|
runner: catthehacker-latest # runner con Docker pre-installato
|
||||||
@@ -27,5 +27,6 @@ jobs:
|
|||||||
# install-extras: 'dev' # opzionale
|
# install-extras: 'dev' # opzionale
|
||||||
|
|
||||||
auto-release:
|
auto-release:
|
||||||
uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-auto-release.yml@v1
|
needs: [docker-release]
|
||||||
|
uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-auto-release.yml@v1
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|||||||
Reference in New Issue
Block a user