Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
15,392 Commits 30 Branches 330 Tags 114 MiB
Commit Graph

335 Commits

Author SHA1 Message Date
dependabot[bot] a02c041a46 Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 15:16:13 -03:00
dependabot[bot] 0bd3b9e420 Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 15:15:47 -03:00
dependabot[bot] 1bb5fe409b Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 15:15:08 -03:00
Marcus Hert Da Coregio ebef5a8783 Ignore updates in sjohnr/slack-workflow-status 
Closes gh-14325
 2023-12-14 15:07:22 -03:00
Marcus Hert Da Coregio b8b660161d Merge branch '6.2.x' 2023-12-14 15:05:40 -03:00
Marcus Hert Da Coregio 6f0ce5c2b0 Merge branch '6.1.x' into 6.2.x 2023-12-14 15:05:04 -03:00
Marcus Hert Da Coregio 87e6986de5 Revert "Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0" 
This reverts commit 40dd7a0d2d.
 2023-12-14 15:04:02 -03:00
dependabot[bot] f18bc5dac9 Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:08:06 -03:00
dependabot[bot] be0e49b464 Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:07:05 -03:00
dependabot[bot] b503867fb1 Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:06:43 -03:00
dependabot[bot] 60bb6725d1 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:06:35 -03:00
dependabot[bot] 959a8330f7 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:06:16 -03:00
dependabot[bot] dce87beb07 Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:05:20 -03:00
dependabot[bot] 3c514bd747 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:05:04 -03:00
dependabot[bot] 83585125ff Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:48 -03:00
dependabot[bot] 42432cc3de Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:37 -03:00
dependabot[bot] c9a7f2487c Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:26 -03:00
dependabot[bot] b2c3bc6b3a Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:01:21 -03:00
dependabot[bot] 652f98a88c Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:01:10 -03:00
dependabot[bot] 40dd7a0d2d Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:53 -03:00
dependabot[bot] 53b640e8e2 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:31 -03:00
dependabot[bot] c6326062da Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:22 -03:00
dependabot[bot] 10b3a9b234 Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:50 -03:00
dependabot[bot] e4cc0a4755 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:37 -03:00
dependabot[bot] ff71ef46b7 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:19 -03:00
dependabot[bot] 5593655bbf Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:09 -03:00
dependabot[bot] 47812e506f Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:00 -03:00
Marcus Hert Da Coregio 6795a49b02 Include milestones in Dependabot config 
Issue gh-14298
 2023-12-14 08:48:36 -03:00
Marcus Hert Da Coregio 5f0fa0ed7e Include GitHub Actions in the Dependabot config 
Closes gh-14298
 2023-12-14 08:46:34 -03:00
Steve Riesenberg 24a9ae06a2
Merge branch '6.2.x' 2023-12-07 14:39:37 -06:00
Steve Riesenberg 981bc1e751
Merge branch '6.1.x' into 6.2.x 2023-12-07 14:39:29 -06:00
Steve Riesenberg 1783a70fdb
Merge branch '5.8.x' into 6.1.x 2023-12-07 14:39:10 -06:00
Steve Riesenberg 9c44b700f5
Add Gradle Enterprise creds to PR builds 
Closes gh-14249
 2023-12-07 14:28:51 -06:00
Josh Cummings 93befd5f26
Ignore org.apache.directory.shared 2023-12-05 17:38:52 -07:00
Josh Cummings d50698a269
Prepare for Spring Security 6.3 
Closes gh-14210
 2023-12-05 15:49:42 -07:00
Steve Riesenberg 15febfc65f
Remove 6.0.x from scheduled releases 2023-12-04 16:02:46 -06:00
Marcus Hert Da Coregio 6f45be28a0 Remove 6.0.x from Dependabot config 
Closes gh-14227
 2023-12-01 08:45:51 -03:00
Marcus Hert Da Coregio 040b879119 Merge branch '6.1.x' 2023-11-10 11:25:26 -03:00
Marcus Hert Da Coregio d5e9478502 Merge branch '6.0.x' into 6.1.x 2023-11-10 11:25:19 -03:00
Marcus Hert Da Coregio e0758dd388 Include samples_branch into job output 
Issue gh-14127
 2023-11-10 11:25:13 -03:00
Marcus Hert Da Coregio bd48fdf744 Merge branch '6.1.x' 2023-11-10 11:17:55 -03:00
Marcus Hert Da Coregio de0b887a9c Merge branch '6.0.x' into 6.1.x 2023-11-10 11:17:42 -03:00
Marcus Hert Da Coregio 0f24194418 Rename cloneSamples to cloneRepository 
Closes gh-14127
 2023-11-10 11:16:47 -03:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Marcus Hert Da Coregio 30e3f9d932 Revert "Run CI on fork" 
This reverts commit 1c7828f2d4.
 2023-10-30 16:15:10 -03:00
Marcus Hert Da Coregio 1c7828f2d4 Run CI on fork 2023-10-30 15:08:03 -03:00
Marcus Da Coregio 02989fede7 Revert "Allow minor versions for org.springframework group id" 
This reverts commit d3f29ebd7b.
 2023-10-17 09:35:44 -03:00
Marcus Da Coregio ca5ed7f549 Include Spring Milestone Maven Registry in Dependabot 
Closes gh-14029
 2023-10-16 08:27:32 -03:00
Marcus Da Coregio d3f29ebd7b Allow minor versions for org.springframework group id 
Issue gh-14023
 2023-10-16 07:55:00 -03:00
Marcus Da Coregio 89ed2d935e Use github-actions[bot] 
Issue gh-13865
 2023-10-09 15:40:02 -03:00
Marcus Da Coregio 19ce45a080 Configure user and email for Grade Wrapper Workflow 
Issue gh-13865
 2023-10-09 14:11:17 -03:00
Marcus Da Coregio 692c013430 Set up Git configuration on Gradle Wrapper Workflow 
Issue gh-13865
 2023-10-09 07:40:42 -03:00
Marcus Da Coregio a2b55139c0 Automatically Update Gradle Wrapper 
Closes gh-13865
 2023-10-05 10:22:53 -03:00
Marcus Da Coregio 5055ee98db Merge branch '6.1.x' 2023-09-29 15:51:01 -03:00
Marcus Da Coregio 3e83e744ae Merge branch '6.0.x' into 6.1.x 2023-09-29 15:50:31 -03:00
Marcus Da Coregio e551d0b411 Merge branch '5.8.x' into 6.0.x 2023-09-29 15:50:17 -03:00
Marcus Da Coregio b9836d618a Fix Workflows 
Issue gh-13873
 2023-09-29 15:50:10 -03:00
Marcus Da Coregio 2505c08e8f Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873

(cherry picked from commit 3aae03b1b2)
 2023-09-29 15:48:12 -03:00
Marcus Da Coregio 9e877c9bc6 Do not run some workflows for Dependabot branches 
Issue gh-13873

(cherry picked from commit ab812b2b53)
 2023-09-29 15:48:11 -03:00
Marcus Da Coregio 3aae03b1b2 Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873
 2023-09-29 14:25:22 -03:00
Marcus Da Coregio 729f103cd7 Do not update ApacheDS version 
Issue gh-13873
 2023-09-29 14:18:18 -03:00
Marcus Da Coregio ab812b2b53 Do not run some workflows for Dependabot branches 
Issue gh-13873
 2023-09-29 14:03:04 -03:00
Marcus Da Coregio 99deda3b6f Configure dependabot.yml 
Closes gh-13873
 2023-09-29 13:53:00 -03:00
Marcus Da Coregio da1e949873 Merge branch '6.1.x' 
Closes gh-13879
 2023-09-28 16:02:30 -03:00
Marcus Da Coregio 376db0317c Merge branch '6.0.x' into 6.1.x 
Closes gh-13878
 2023-09-28 16:00:49 -03:00
Marcus Da Coregio 5351fe43da Merge branch '5.8.x' into 6.0.x 
Closes gh-13877
 2023-09-28 15:59:56 -03:00
Marcus Da Coregio 650692964e Fix snapshot_tests on CI workflow 
Closes gh-13876
 2023-09-28 15:58:43 -03:00
Marcus Da Coregio 5a10d2f08c Merge branch '6.1.x' 2023-09-28 15:14:55 -03:00
Marcus Da Coregio 6a97f3f982 Merge branch '6.0.x' into 6.1.x 2023-09-28 15:13:29 -03:00
Marcus Da Coregio c6841d83eb Merge branch '5.8.x' into 6.0.x 2023-09-28 15:01:58 -03:00
Marcus Da Coregio e29ea47ff7 Use Gradle's Version Catalog 
Issue gh-13868
 2023-09-28 14:57:18 -03:00
Steve Riesenberg 4905b91bdd
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-26 14:43:19 -05:00
Steve Riesenberg 2a80048340
Revert "Run tests on JDK 21" 
This reverts commit 875096ff77.
 2023-09-25 16:05:47 -05:00
Steve Riesenberg 875096ff77
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-25 12:01:32 -05:00
Steve Riesenberg d76e15d708
Revert "Run tests on JDK 21" 
This reverts commit 1dcc73ad1f.
 2023-09-19 14:11:41 -05:00
Steve Riesenberg 1dcc73ad1f
Run tests on JDK 21 
Closes gh-13811
 2023-09-19 10:39:05 -05:00
Steve Riesenberg f59131f114
Update release scheduler versions 
Closes gh-13745
 2023-08-28 11:24:53 -05:00
Josh Cummings c9b0e3cc11
Align Snapshot Data and Reactor with Boot 
Issue gh-13627
 2023-08-08 08:02:53 -06:00
Josh Cummings 5fc042f0c0
Update Snapshot Build 
Closes gh-13627
 2023-08-07 19:43:13 -06:00
Rob Winch e60261e0a7 Merge branch '6.0.x' 2023-06-08 13:47:09 -05:00
Rob Winch 8cfb6a4cdc cralwer.algolia.com performs indexing 2023-06-08 13:46:46 -05:00
Josh Cummings e8c53ac72d
Merge branch '6.0.x' 2023-02-01 15:26:06 -07:00
Josh Cummings 7dc3759f5d
Merge branch '5.8.x' into 6.0.x 2023-02-01 15:25:47 -07:00
jongwooo aad3e61f4d chore: Use cache in continuous-integration-workflow.yml 
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
 2023-02-01 14:26:25 -07:00
Steve Riesenberg fa9c7fb50d
Remove 5.6.x from scheduled releases 2023-01-23 14:40:52 -06:00
Dan Allen 786db6dd5c turn off scheduler for Deploy Docs workflow 2023-01-10 09:04:14 -06:00
Dan Allen 6bb36f1a54
sync and refactor docs build 
- add 6.0.x to release scheduler workflow
- upgrade Antora to 3.2.0-alpha.2
- remove Antora patch to support linked worktrees
- upgrade Antora Collector to latest alpha
- remove dispatch.sh script (handled by gh run workflow)
- consistently use gh run workflow to trigger workflows
- remove step to publish generated docs (no longer in use)
 2022-12-15 15:21:07 -06:00
Marcus Da Coregio 5955e89dff Merge branch '5.8.x' into 6.0.x 
Closes gh-12299
 2022-11-25 09:24:03 -03:00
Kirk Lin 9c6d90490d ci: fix GitHub Actions Deprecating save-state and set-output commands 
Closes gh-12032
 2022-11-25 09:05:28 -03:00
Dan Allen 3f2bade4f1
sync and refactor docs build 
- upgrade Antora to 3.2.0-alpha.2
- remove Antora patch to support linked worktrees
- upgrade Antora Collector to latest alpha
- remove dispatch.sh script (handled by gh run workflow)
- consistently use gh run workflow to trigger workflows
- remove step to publish generated docs (no longer in use)
 2022-11-23 17:47:26 -06:00
Dan Allen fe252f5057 sync docs build; upgrade Antora and Antora Collector to latest alpha 2022-11-21 17:26:51 -07:00
Rob Winch 968c0c2590 Merge commit '2063279d8973e0ab65e3a580080dfaf47d2ded3c' 2022-11-14 09:52:52 -06:00
Dan Allen 2063279d89 fix deploy docs workflow 
- don't use environment variable reference in checkout action
 2022-11-10 21:56:46 -06:00
Dan Allen b5bd52cb14 trigger partial docs build on push 2022-11-10 21:43:47 -06:00
Josh Cummings f2ddeaface
Merge remote-tracking branch 'origin/5.8.x' 2022-10-17 15:01:30 -06:00
Josh Cummings ff055cf07a
Remote antoraUpdateVersion task from CI 2022-10-17 14:24:13 -06:00
Marcus Da Coregio 3d92e22891 Merge branch '5.8.x' 2022-10-17 15:52:00 -03:00
Marcus Da Coregio 465d80c162 Remove antoreUpdateVersion task from release automation 2022-10-17 15:50:44 -03:00
Rob Winch 06c879b61a
Add Reference to Security Reporting 2022-10-06 21:33:21 -05:00
Marcus Da Coregio 5e4f1ba211 Merge branch '5.8.x' 
Closes gh-11826
 2022-09-16 10:19:32 -03:00
Marcus Da Coregio 7756247c3a Simplify checkSamples task 
Closes gh-11814
 2022-09-16 09:36:12 -03:00
Dan Allen b65b59d46c consolidate docs CI workflows in main branch 
- repurpose Deploy Docs as scheduler
- repurpose Rebuild Search Index as scheduler
 2022-09-12 17:36:30 -05:00
Dan Allen 3387149a0f repurpose 5.6.x branch to provide local docs build 
* remove unused workflows, scripts, and configuration (now handled by docs-build branch)
* upgrade Antora to 3.1 (and Node.js to 16)
* tune playbook settings
* reconfigure docs build for local build only
* add patch to support using linked worktree as Antora content source
* remove Antora extensions not needed for local builds
 2022-09-12 15:41:12 -05:00
Dan Allen d22ee32c7d reconfigure branch for local builds and as scheduler for docs workflows 
- set up placeholder and trigger for Deploy Docs workflow in docs-build branch
- set up placeholder and trigger for Rebuild Search Index workflow in docs-build branch
- remove obsolete Deploy Reference workflow
- upgrade Antora to 3.1
- reconfigure docs build for local build only
- add patch to support using linked worktree as Antora content source
- remove Antora extensions only needed for the production docs build
 2022-09-09 12:57:00 -05:00
Rob Winch 924c80a224 Merge branch '5.8.x' 2022-08-23 13:50:29 -05:00
Rob Winch 8c69699458 Remove backportbot.yml 
Issue gh-11736
 2022-08-23 13:46:32 -05:00
Steve Riesenberg 02459919cc
Skip workflows on forks of spring-security 2022-07-28 15:13:56 -05:00
Steve Riesenberg 57d212ddca
Use cache and user.name system property on Windows 2022-07-28 15:13:55 -05:00
Steve Riesenberg 539b17f6da
Only run prerequisites job if on upstream repo 2022-07-28 15:13:54 -05:00
Steve Riesenberg 37e1ad27fe
Simplify dependency graph 2022-07-28 15:13:53 -05:00
Steve Riesenberg 043fdd6f03
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-28 15:13:52 -05:00
Steve Riesenberg 3234e05085
Polish gh-11367 2022-07-28 15:13:51 -05:00
naveen f957e3c051
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Closes gh-11367
 2022-07-28 15:13:51 -05:00
Steve Riesenberg 9d248c7185
Skip workflows on forks of spring-security 2022-07-28 14:17:42 -05:00
Steve Riesenberg 865bf23ecc
Use cache and user.name system property on Windows 2022-07-28 13:00:15 -05:00
Steve Riesenberg f86d30f4a1
Only run prerequisites job if on upstream repo 2022-07-27 16:01:16 -05:00
Steve Riesenberg dc59d12405
Simplify dependency graph 2022-07-27 16:01:15 -05:00
Steve Riesenberg bdeb32854e
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-27 16:01:15 -05:00
Steve Riesenberg 3f4efedd23
Polish gh-11367 2022-07-26 15:33:34 -05:00
naveen 8f93a7fc94
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-26 15:33:33 -05:00
Steve Riesenberg aaf20e7b61
Build only on branches 
Issue gh-11480
 2022-07-18 11:47:25 -05:00
Steve Riesenberg 148756076c
Backport release automation and github actions 
Closes gh-11501
 2022-07-13 15:51:25 -05:00
Steve Riesenberg 92d4f1237d
Use JDK 17 for Antora 
Issue gh-11430
Issue gh-11324
 2022-07-13 14:11:31 -05:00
Steve Riesenberg 095f23d81f
Fix slack notifications in #spring-security-ci 
Issue gh-11346
 2022-07-05 17:50:27 -05:00
Marcus Da Coregio c4a55b90e3 Antora generate workflow use JDK 17 
Closes gh-11430
 2022-06-22 15:21:29 -03:00
Steve Riesenberg ac98e358a5 Add slack announcement when release is successful 
Closes gh-11307
 2022-06-14 14:10:09 -05:00
Steve Riesenberg d1cb236df5
Fix slack notifications in #spring-security-ci 
This change can be reverted if upgrading to a new version of
Gamesight/slack-workflow-status with the fix available (> 1.1.0).

Closes gh-11346
 2022-06-07 16:07:10 -05:00
Rob Winch 592db9180d Enable BackportBot on 5.6.x 2022-06-06 14:16:28 -05:00
Steve Riesenberg 07f28de79b
Polish gh-11184 
Propagate rename in notify_result section.
 2022-06-03 15:23:48 -05:00
Steve Riesenberg 46723a601c Add workflow step for scheduling the next milestone 
This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules:

- If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows:
  - Finds the next available release train starting month (including this month), either January or July.
  - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November
- If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month).
- In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1).

If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired.

Closes gh-10458
 2022-06-03 15:07:42 -05:00
Steve Riesenberg ad19fc1330 Add workflow for scheduling releases on maintenance branches 
Closes gh-11180
 2022-06-03 10:19:02 -05:00
Rob Winch 96caecc639
Disable pull request for backport-bot.yml 2022-06-02 11:00:46 -05:00
Rob Winch a10f707b6e
Fix spacing in backport-bot.yml 2022-06-01 16:46:54 -05:00
Rob Winch 1d4bf88a0f Cleanup backport-bot.yml 
Issue gh-11313
 2022-06-01 16:45:50 -05:00
Rob Winch b78a28be5f Add backport-bot.yml 
Closes gh-11313
 2022-05-31 21:42:56 -05:00
Steve Riesenberg 8e34b4c15e
Fix step id in conditional checks 2022-05-16 14:22:36 -05:00
Steve Riesenberg 8f4d003602
Revert "Add expression syntax to conditionals" 
This reverts commit ea0b271a73.
 2022-05-16 14:21:49 -05:00
Steve Riesenberg ea0b271a73
Add expression syntax to conditionals 
Issue gh-11158
 2022-05-16 12:39:55 -05:00
Steve Riesenberg d07c5e0804
Add quotes to boolean conditional checks 
Issue gh-11158
 2022-05-16 12:25:24 -05:00
Steve Riesenberg 0c94cfca63
Fix conditional using env namespace at job level 
Issue gh-11158
 2022-05-16 12:13:25 -05:00
Marcus Da Coregio 44e672d969 Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 16:13:34 -03:00
Marcus Da Coregio 0137f94f3b Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 12:32:16 -03:00
Rob Winch e4f5d2c6ef Fix release-next-version.yml 
- Improve speed by using single job and multiple steps
- Check output of tasks rather than rely on status codes to fail

Issue gh-11158
 2022-04-27 19:07:36 +02:00
Eleftheria Stein eba091bad5 Push tag in release workflow 
Issue gh-11023
 2022-04-26 10:10:27 +02:00
Eleftheria Stein 8914f06eca Use non-default access token in release pipeline 
This ensures that subsequent workflows are triggered

Closes gh-11022
 2022-04-26 09:54:40 +02:00
Steve Riesenberg 9601efd341 Add gradle-build-action to GitHub Actions pipelines 
Closes gh-11099
 2022-04-14 15:05:46 -05:00
Eleftheria Stein 0e7dec2d2c Tag release after updating gradle.properties 
Closes gh-11023
 2022-03-29 13:44:22 +02:00
Eleftheria Stein 992b8c38ac Update antora on next development version release 
Move commit from gradle task to workflow. Update antora.yml after project version update and before commit.

Closes gh-11021
 2022-03-29 12:28:37 +02:00
Eleftheria Stein 4a25264404 Stage changes before committing in release pipeline 
Issue gh-11020
 2022-03-29 12:28:05 +02:00