Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,483 Commits 30 Branches 330 Tags 114 MiB
Commit Graph

88 Commits

Author SHA1 Message Date
Marcus Hert Da Coregio 30e3f9d932 Revert "Run CI on fork" 
This reverts commit 1c7828f2d4.
 2023-10-30 16:15:10 -03:00
Marcus Hert Da Coregio 1c7828f2d4 Run CI on fork 2023-10-30 15:08:03 -03:00
Marcus Da Coregio 5055ee98db Merge branch '6.1.x' 2023-09-29 15:51:01 -03:00
Marcus Da Coregio e551d0b411 Merge branch '5.8.x' into 6.0.x 2023-09-29 15:50:17 -03:00
Marcus Da Coregio b9836d618a Fix Workflows 
Issue gh-13873
 2023-09-29 15:50:10 -03:00
Marcus Da Coregio 2505c08e8f Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873

(cherry picked from commit 3aae03b1b2)
 2023-09-29 15:48:12 -03:00
Marcus Da Coregio 9e877c9bc6 Do not run some workflows for Dependabot branches 
Issue gh-13873

(cherry picked from commit ab812b2b53)
 2023-09-29 15:48:11 -03:00
Marcus Da Coregio 3aae03b1b2 Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873
 2023-09-29 14:25:22 -03:00
Marcus Da Coregio ab812b2b53 Do not run some workflows for Dependabot branches 
Issue gh-13873
 2023-09-29 14:03:04 -03:00
Marcus Da Coregio da1e949873 Merge branch '6.1.x' 
Closes gh-13879
 2023-09-28 16:02:30 -03:00
Marcus Da Coregio 5351fe43da Merge branch '5.8.x' into 6.0.x 
Closes gh-13877
 2023-09-28 15:59:56 -03:00
Marcus Da Coregio 650692964e Fix snapshot_tests on CI workflow 
Closes gh-13876
 2023-09-28 15:58:43 -03:00
Marcus Da Coregio 5a10d2f08c Merge branch '6.1.x' 2023-09-28 15:14:55 -03:00
Marcus Da Coregio c6841d83eb Merge branch '5.8.x' into 6.0.x 2023-09-28 15:01:58 -03:00
Marcus Da Coregio e29ea47ff7 Use Gradle's Version Catalog 
Issue gh-13868
 2023-09-28 14:57:18 -03:00
Steve Riesenberg 4905b91bdd
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-26 14:43:19 -05:00
Steve Riesenberg 2a80048340
Revert "Run tests on JDK 21" 
This reverts commit 875096ff77.
 2023-09-25 16:05:47 -05:00
Steve Riesenberg 875096ff77
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-25 12:01:32 -05:00
Steve Riesenberg d76e15d708
Revert "Run tests on JDK 21" 
This reverts commit 1dcc73ad1f.
 2023-09-19 14:11:41 -05:00
Steve Riesenberg 1dcc73ad1f
Run tests on JDK 21 
Closes gh-13811
 2023-09-19 10:39:05 -05:00
Josh Cummings c9b0e3cc11
Align Snapshot Data and Reactor with Boot 
Issue gh-13627
 2023-08-08 08:02:53 -06:00
Josh Cummings 5fc042f0c0
Update Snapshot Build 
Closes gh-13627
 2023-08-07 19:43:13 -06:00
Josh Cummings 7dc3759f5d
Merge branch '5.8.x' into 6.0.x 2023-02-01 15:25:47 -07:00
jongwooo aad3e61f4d chore: Use cache in continuous-integration-workflow.yml 
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
 2023-02-01 14:26:25 -07:00
Marcus Da Coregio 5955e89dff Merge branch '5.8.x' into 6.0.x 
Closes gh-12299
 2022-11-25 09:24:03 -03:00
Kirk Lin 9c6d90490d ci: fix GitHub Actions Deprecating save-state and set-output commands 
Closes gh-12032
 2022-11-25 09:05:28 -03:00
Josh Cummings f2ddeaface
Merge remote-tracking branch 'origin/5.8.x' 2022-10-17 15:01:30 -06:00
Josh Cummings ff055cf07a
Remote antoraUpdateVersion task from CI 2022-10-17 14:24:13 -06:00
Marcus Da Coregio 5e4f1ba211 Merge branch '5.8.x' 
Closes gh-11826
 2022-09-16 10:19:32 -03:00
Marcus Da Coregio 7756247c3a Simplify checkSamples task 
Closes gh-11814
 2022-09-16 09:36:12 -03:00
Steve Riesenberg 57d212ddca
Use cache and user.name system property on Windows 2022-07-28 15:13:55 -05:00
Steve Riesenberg 539b17f6da
Only run prerequisites job if on upstream repo 2022-07-28 15:13:54 -05:00
Steve Riesenberg 37e1ad27fe
Simplify dependency graph 2022-07-28 15:13:53 -05:00
Steve Riesenberg 043fdd6f03
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-28 15:13:52 -05:00
Steve Riesenberg 3234e05085
Polish gh-11367 2022-07-28 15:13:51 -05:00
naveen f957e3c051
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Closes gh-11367
 2022-07-28 15:13:51 -05:00
Steve Riesenberg 865bf23ecc
Use cache and user.name system property on Windows 2022-07-28 13:00:15 -05:00
Steve Riesenberg f86d30f4a1
Only run prerequisites job if on upstream repo 2022-07-27 16:01:16 -05:00
Steve Riesenberg dc59d12405
Simplify dependency graph 2022-07-27 16:01:15 -05:00
Steve Riesenberg bdeb32854e
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-27 16:01:15 -05:00
Steve Riesenberg 3f4efedd23
Polish gh-11367 2022-07-26 15:33:34 -05:00
naveen 8f93a7fc94
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-26 15:33:33 -05:00
Steve Riesenberg aaf20e7b61
Build only on branches 
Issue gh-11480
 2022-07-18 11:47:25 -05:00
Steve Riesenberg 148756076c
Backport release automation and github actions 
Closes gh-11501
 2022-07-13 15:51:25 -05:00
Steve Riesenberg 095f23d81f
Fix slack notifications in #spring-security-ci 
Issue gh-11346
 2022-07-05 17:50:27 -05:00
Steve Riesenberg ac98e358a5 Add slack announcement when release is successful 
Closes gh-11307
 2022-06-14 14:10:09 -05:00
Steve Riesenberg d1cb236df5
Fix slack notifications in #spring-security-ci 
This change can be reverted if upgrading to a new version of
Gamesight/slack-workflow-status with the fix available (> 1.1.0).

Closes gh-11346
 2022-06-07 16:07:10 -05:00
Steve Riesenberg 07f28de79b
Polish gh-11184 
Propagate rename in notify_result section.
 2022-06-03 15:23:48 -05:00
Steve Riesenberg 46723a601c Add workflow step for scheduling the next milestone 
This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules:

- If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows:
  - Finds the next available release train starting month (including this month), either January or July.
  - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November
- If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month).
- In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1).

If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired.

Closes gh-10458
 2022-06-03 15:07:42 -05:00
Marcus Da Coregio 44e672d969 Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 16:13:34 -03:00