Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
17,132 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

438 Commits

Author SHA1 Message Date
Marcus Hert Da Coregio 45f8ab3401 Add permission to Edit Dependabot PR workflow 
Issue gh-14486
 2024-01-29 10:01:10 -03:00
Marcus Hert Da Coregio 602d2bebdc Automatically assign milestone to Dependabot PR 
Issue gh-14486
 2024-01-26 10:28:09 -03:00
Marcus Hert Da Coregio 7a8f9b446e Configure Dependabot for docs-build's build.gradle 
Issue gh-14482
 2024-01-23 15:03:46 -03:00
dependabot[bot] a02c041a46 Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 15:16:13 -03:00
dependabot[bot] 0bd3b9e420 Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 15:15:47 -03:00
dependabot[bot] 1bb5fe409b Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 15:15:08 -03:00
Marcus Hert Da Coregio ebef5a8783 Ignore updates in sjohnr/slack-workflow-status 
Closes gh-14325
 2023-12-14 15:07:22 -03:00
Marcus Hert Da Coregio b8b660161d Merge branch '6.2.x' 2023-12-14 15:05:40 -03:00
Marcus Hert Da Coregio 6f0ce5c2b0 Merge branch '6.1.x' into 6.2.x 2023-12-14 15:05:04 -03:00
Marcus Hert Da Coregio 87e6986de5 Revert "Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0" 
This reverts commit 40dd7a0d2d.
 2023-12-14 15:04:02 -03:00
dependabot[bot] f18bc5dac9 Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:08:06 -03:00
dependabot[bot] be0e49b464 Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:07:05 -03:00
dependabot[bot] b503867fb1 Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:06:43 -03:00
dependabot[bot] 60bb6725d1 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:06:35 -03:00
dependabot[bot] 959a8330f7 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:06:16 -03:00
dependabot[bot] dce87beb07 Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:05:20 -03:00
dependabot[bot] 3c514bd747 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:05:04 -03:00
dependabot[bot] 83585125ff Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:48 -03:00
dependabot[bot] 42432cc3de Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:37 -03:00
dependabot[bot] c9a7f2487c Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:26 -03:00
dependabot[bot] b2c3bc6b3a Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:01:21 -03:00
dependabot[bot] 652f98a88c Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:01:10 -03:00
dependabot[bot] 40dd7a0d2d Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:53 -03:00
dependabot[bot] 53b640e8e2 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:31 -03:00
dependabot[bot] c6326062da Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:22 -03:00
dependabot[bot] 10b3a9b234 Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0 
Bumps [Gamesight/slack-workflow-status](https://github.com/gamesight/slack-workflow-status) from 1.0.1 to 1.2.0.
- [Release notes](https://github.com/gamesight/slack-workflow-status/releases)
- [Commits](https://github.com/gamesight/slack-workflow-status/compare/v1.0.1...v1.2.0)

---
updated-dependencies:
- dependency-name: Gamesight/slack-workflow-status
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:50 -03:00
dependabot[bot] e4cc0a4755 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:37 -03:00
dependabot[bot] ff71ef46b7 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:19 -03:00
dependabot[bot] 5593655bbf Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:09 -03:00
dependabot[bot] 47812e506f Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:00 -03:00
Marcus Hert Da Coregio 6795a49b02 Include milestones in Dependabot config 
Issue gh-14298
 2023-12-14 08:48:36 -03:00
Marcus Hert Da Coregio 5f0fa0ed7e Include GitHub Actions in the Dependabot config 
Closes gh-14298
 2023-12-14 08:46:34 -03:00
Steve Riesenberg 24a9ae06a2
Merge branch '6.2.x' 2023-12-07 14:39:37 -06:00
Steve Riesenberg 981bc1e751
Merge branch '6.1.x' into 6.2.x 2023-12-07 14:39:29 -06:00
Steve Riesenberg 1783a70fdb
Merge branch '5.8.x' into 6.1.x 2023-12-07 14:39:10 -06:00
Steve Riesenberg 9c44b700f5
Add Gradle Enterprise creds to PR builds 
Closes gh-14249
 2023-12-07 14:28:51 -06:00
Josh Cummings 93befd5f26
Ignore org.apache.directory.shared 2023-12-05 17:38:52 -07:00
Josh Cummings d50698a269
Prepare for Spring Security 6.3 
Closes gh-14210
 2023-12-05 15:49:42 -07:00
Steve Riesenberg 15febfc65f
Remove 6.0.x from scheduled releases 2023-12-04 16:02:46 -06:00
Marcus Hert Da Coregio 6f45be28a0 Remove 6.0.x from Dependabot config 
Closes gh-14227
 2023-12-01 08:45:51 -03:00
Marcus Hert Da Coregio 040b879119 Merge branch '6.1.x' 2023-11-10 11:25:26 -03:00
Marcus Hert Da Coregio d5e9478502 Merge branch '6.0.x' into 6.1.x 2023-11-10 11:25:19 -03:00
Marcus Hert Da Coregio e0758dd388 Include samples_branch into job output 
Issue gh-14127
 2023-11-10 11:25:13 -03:00
Marcus Hert Da Coregio bd48fdf744 Merge branch '6.1.x' 2023-11-10 11:17:55 -03:00
Marcus Hert Da Coregio de0b887a9c Merge branch '6.0.x' into 6.1.x 2023-11-10 11:17:42 -03:00
Marcus Hert Da Coregio 0f24194418 Rename cloneSamples to cloneRepository 
Closes gh-14127
 2023-11-10 11:16:47 -03:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Marcus Hert Da Coregio 30e3f9d932 Revert "Run CI on fork" 
This reverts commit 1c7828f2d4.
 2023-10-30 16:15:10 -03:00
Marcus Hert Da Coregio 1c7828f2d4 Run CI on fork 2023-10-30 15:08:03 -03:00
Marcus Da Coregio 02989fede7 Revert "Allow minor versions for org.springframework group id" 
This reverts commit d3f29ebd7b.
 2023-10-17 09:35:44 -03:00
Marcus Da Coregio ca5ed7f549 Include Spring Milestone Maven Registry in Dependabot 
Closes gh-14029
 2023-10-16 08:27:32 -03:00
Marcus Da Coregio d3f29ebd7b Allow minor versions for org.springframework group id 
Issue gh-14023
 2023-10-16 07:55:00 -03:00
Marcus Da Coregio 89ed2d935e Use github-actions[bot] 
Issue gh-13865
 2023-10-09 15:40:02 -03:00
Marcus Da Coregio 19ce45a080 Configure user and email for Grade Wrapper Workflow 
Issue gh-13865
 2023-10-09 14:11:17 -03:00
Marcus Da Coregio 692c013430 Set up Git configuration on Gradle Wrapper Workflow 
Issue gh-13865
 2023-10-09 07:40:42 -03:00
Marcus Da Coregio a2b55139c0 Automatically Update Gradle Wrapper 
Closes gh-13865
 2023-10-05 10:22:53 -03:00
Marcus Da Coregio 5055ee98db Merge branch '6.1.x' 2023-09-29 15:51:01 -03:00
Marcus Da Coregio 3e83e744ae Merge branch '6.0.x' into 6.1.x 2023-09-29 15:50:31 -03:00
Marcus Da Coregio e551d0b411 Merge branch '5.8.x' into 6.0.x 2023-09-29 15:50:17 -03:00
Marcus Da Coregio b9836d618a Fix Workflows 
Issue gh-13873
 2023-09-29 15:50:10 -03:00
Marcus Da Coregio 2505c08e8f Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873

(cherry picked from commit 3aae03b1b2)
 2023-09-29 15:48:12 -03:00
Marcus Da Coregio 9e877c9bc6 Do not run some workflows for Dependabot branches 
Issue gh-13873

(cherry picked from commit ab812b2b53)
 2023-09-29 15:48:11 -03:00
Marcus Da Coregio 3aae03b1b2 Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873
 2023-09-29 14:25:22 -03:00
Marcus Da Coregio 729f103cd7 Do not update ApacheDS version 
Issue gh-13873
 2023-09-29 14:18:18 -03:00
Marcus Da Coregio ab812b2b53 Do not run some workflows for Dependabot branches 
Issue gh-13873
 2023-09-29 14:03:04 -03:00
Marcus Da Coregio 99deda3b6f Configure dependabot.yml 
Closes gh-13873
 2023-09-29 13:53:00 -03:00
Marcus Da Coregio da1e949873 Merge branch '6.1.x' 
Closes gh-13879
 2023-09-28 16:02:30 -03:00
Marcus Da Coregio 376db0317c Merge branch '6.0.x' into 6.1.x 
Closes gh-13878
 2023-09-28 16:00:49 -03:00
Marcus Da Coregio 5351fe43da Merge branch '5.8.x' into 6.0.x 
Closes gh-13877
 2023-09-28 15:59:56 -03:00
Marcus Da Coregio 650692964e Fix snapshot_tests on CI workflow 
Closes gh-13876
 2023-09-28 15:58:43 -03:00
Marcus Da Coregio 5a10d2f08c Merge branch '6.1.x' 2023-09-28 15:14:55 -03:00
Marcus Da Coregio 6a97f3f982 Merge branch '6.0.x' into 6.1.x 2023-09-28 15:13:29 -03:00
Marcus Da Coregio c6841d83eb Merge branch '5.8.x' into 6.0.x 2023-09-28 15:01:58 -03:00
Marcus Da Coregio e29ea47ff7 Use Gradle's Version Catalog 
Issue gh-13868
 2023-09-28 14:57:18 -03:00
Steve Riesenberg 4905b91bdd
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-26 14:43:19 -05:00
Steve Riesenberg 2a80048340
Revert "Run tests on JDK 21" 
This reverts commit 875096ff77.
 2023-09-25 16:05:47 -05:00
Steve Riesenberg 875096ff77
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-25 12:01:32 -05:00
Steve Riesenberg d76e15d708
Revert "Run tests on JDK 21" 
This reverts commit 1dcc73ad1f.
 2023-09-19 14:11:41 -05:00
Steve Riesenberg 1dcc73ad1f
Run tests on JDK 21 
Closes gh-13811
 2023-09-19 10:39:05 -05:00
Steve Riesenberg f59131f114
Update release scheduler versions 
Closes gh-13745
 2023-08-28 11:24:53 -05:00
Josh Cummings c9b0e3cc11
Align Snapshot Data and Reactor with Boot 
Issue gh-13627
 2023-08-08 08:02:53 -06:00
Josh Cummings 5fc042f0c0
Update Snapshot Build 
Closes gh-13627
 2023-08-07 19:43:13 -06:00
Rob Winch e60261e0a7 Merge branch '6.0.x' 2023-06-08 13:47:09 -05:00
Rob Winch 8cfb6a4cdc cralwer.algolia.com performs indexing 2023-06-08 13:46:46 -05:00
Josh Cummings e8c53ac72d
Merge branch '6.0.x' 2023-02-01 15:26:06 -07:00
Josh Cummings 7dc3759f5d
Merge branch '5.8.x' into 6.0.x 2023-02-01 15:25:47 -07:00
jongwooo aad3e61f4d chore: Use cache in continuous-integration-workflow.yml 
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
 2023-02-01 14:26:25 -07:00
Steve Riesenberg fa9c7fb50d
Remove 5.6.x from scheduled releases 2023-01-23 14:40:52 -06:00
Dan Allen 786db6dd5c turn off scheduler for Deploy Docs workflow 2023-01-10 09:04:14 -06:00
Dan Allen 6bb36f1a54
sync and refactor docs build 
- add 6.0.x to release scheduler workflow
- upgrade Antora to 3.2.0-alpha.2
- remove Antora patch to support linked worktrees
- upgrade Antora Collector to latest alpha
- remove dispatch.sh script (handled by gh run workflow)
- consistently use gh run workflow to trigger workflows
- remove step to publish generated docs (no longer in use)
 2022-12-15 15:21:07 -06:00
Marcus Da Coregio 5955e89dff Merge branch '5.8.x' into 6.0.x 
Closes gh-12299
 2022-11-25 09:24:03 -03:00
Kirk Lin 9c6d90490d ci: fix GitHub Actions Deprecating save-state and set-output commands 
Closes gh-12032
 2022-11-25 09:05:28 -03:00
Dan Allen 3f2bade4f1
sync and refactor docs build 
- upgrade Antora to 3.2.0-alpha.2
- remove Antora patch to support linked worktrees
- upgrade Antora Collector to latest alpha
- remove dispatch.sh script (handled by gh run workflow)
- consistently use gh run workflow to trigger workflows
- remove step to publish generated docs (no longer in use)
 2022-11-23 17:47:26 -06:00
Dan Allen fe252f5057 sync docs build; upgrade Antora and Antora Collector to latest alpha 2022-11-21 17:26:51 -07:00
Rob Winch 968c0c2590 Merge commit '2063279d8973e0ab65e3a580080dfaf47d2ded3c' 2022-11-14 09:52:52 -06:00
Dan Allen 2063279d89 fix deploy docs workflow 
- don't use environment variable reference in checkout action
 2022-11-10 21:56:46 -06:00
Dan Allen b5bd52cb14 trigger partial docs build on push 2022-11-10 21:43:47 -06:00
Josh Cummings f2ddeaface
Merge remote-tracking branch 'origin/5.8.x' 2022-10-17 15:01:30 -06:00
Josh Cummings ff055cf07a
Remote antoraUpdateVersion task from CI 2022-10-17 14:24:13 -06:00
Marcus Da Coregio 3d92e22891 Merge branch '5.8.x' 2022-10-17 15:52:00 -03:00
Marcus Da Coregio 465d80c162 Remove antoreUpdateVersion task from release automation 2022-10-17 15:50:44 -03:00
Rob Winch 06c879b61a
Add Reference to Security Reporting 2022-10-06 21:33:21 -05:00
Marcus Da Coregio 5e4f1ba211 Merge branch '5.8.x' 
Closes gh-11826
 2022-09-16 10:19:32 -03:00
Marcus Da Coregio 7756247c3a Simplify checkSamples task 
Closes gh-11814
 2022-09-16 09:36:12 -03:00
Dan Allen b65b59d46c consolidate docs CI workflows in main branch 
- repurpose Deploy Docs as scheduler
- repurpose Rebuild Search Index as scheduler
 2022-09-12 17:36:30 -05:00
Dan Allen 3387149a0f repurpose 5.6.x branch to provide local docs build 
* remove unused workflows, scripts, and configuration (now handled by docs-build branch)
* upgrade Antora to 3.1 (and Node.js to 16)
* tune playbook settings
* reconfigure docs build for local build only
* add patch to support using linked worktree as Antora content source
* remove Antora extensions not needed for local builds
 2022-09-12 15:41:12 -05:00
Dan Allen d22ee32c7d reconfigure branch for local builds and as scheduler for docs workflows 
- set up placeholder and trigger for Deploy Docs workflow in docs-build branch
- set up placeholder and trigger for Rebuild Search Index workflow in docs-build branch
- remove obsolete Deploy Reference workflow
- upgrade Antora to 3.1
- reconfigure docs build for local build only
- add patch to support using linked worktree as Antora content source
- remove Antora extensions only needed for the production docs build
 2022-09-09 12:57:00 -05:00
Rob Winch 924c80a224 Merge branch '5.8.x' 2022-08-23 13:50:29 -05:00
Rob Winch 8c69699458 Remove backportbot.yml 
Issue gh-11736
 2022-08-23 13:46:32 -05:00
Steve Riesenberg 02459919cc
Skip workflows on forks of spring-security 2022-07-28 15:13:56 -05:00
Steve Riesenberg 57d212ddca
Use cache and user.name system property on Windows 2022-07-28 15:13:55 -05:00
Steve Riesenberg 539b17f6da
Only run prerequisites job if on upstream repo 2022-07-28 15:13:54 -05:00
Steve Riesenberg 37e1ad27fe
Simplify dependency graph 2022-07-28 15:13:53 -05:00
Steve Riesenberg 043fdd6f03
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-28 15:13:52 -05:00
Steve Riesenberg 3234e05085
Polish gh-11367 2022-07-28 15:13:51 -05:00
naveen f957e3c051
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Closes gh-11367
 2022-07-28 15:13:51 -05:00
Steve Riesenberg 9d248c7185
Skip workflows on forks of spring-security 2022-07-28 14:17:42 -05:00
Steve Riesenberg 865bf23ecc
Use cache and user.name system property on Windows 2022-07-28 13:00:15 -05:00
Steve Riesenberg f86d30f4a1
Only run prerequisites job if on upstream repo 2022-07-27 16:01:16 -05:00
Steve Riesenberg dc59d12405
Simplify dependency graph 2022-07-27 16:01:15 -05:00
Steve Riesenberg bdeb32854e
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-27 16:01:15 -05:00
Steve Riesenberg 3f4efedd23
Polish gh-11367 2022-07-26 15:33:34 -05:00
naveen 8f93a7fc94
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-26 15:33:33 -05:00
Steve Riesenberg aaf20e7b61
Build only on branches 
Issue gh-11480
 2022-07-18 11:47:25 -05:00
Steve Riesenberg 148756076c
Backport release automation and github actions 
Closes gh-11501
 2022-07-13 15:51:25 -05:00
Steve Riesenberg 92d4f1237d
Use JDK 17 for Antora 
Issue gh-11430
Issue gh-11324
 2022-07-13 14:11:31 -05:00
Steve Riesenberg 095f23d81f
Fix slack notifications in #spring-security-ci 
Issue gh-11346
 2022-07-05 17:50:27 -05:00
Marcus Da Coregio c4a55b90e3 Antora generate workflow use JDK 17 
Closes gh-11430
 2022-06-22 15:21:29 -03:00
Steve Riesenberg ac98e358a5 Add slack announcement when release is successful 
Closes gh-11307
 2022-06-14 14:10:09 -05:00
Steve Riesenberg d1cb236df5
Fix slack notifications in #spring-security-ci 
This change can be reverted if upgrading to a new version of
Gamesight/slack-workflow-status with the fix available (> 1.1.0).

Closes gh-11346
 2022-06-07 16:07:10 -05:00
Rob Winch 592db9180d Enable BackportBot on 5.6.x 2022-06-06 14:16:28 -05:00
Steve Riesenberg 07f28de79b
Polish gh-11184 
Propagate rename in notify_result section.
 2022-06-03 15:23:48 -05:00
Steve Riesenberg 46723a601c Add workflow step for scheduling the next milestone 
This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules:

- If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows:
  - Finds the next available release train starting month (including this month), either January or July.
  - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November
- If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month).
- In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1).

If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired.

Closes gh-10458
 2022-06-03 15:07:42 -05:00
Steve Riesenberg ad19fc1330 Add workflow for scheduling releases on maintenance branches 
Closes gh-11180
 2022-06-03 10:19:02 -05:00
Rob Winch 96caecc639
Disable pull request for backport-bot.yml 2022-06-02 11:00:46 -05:00
Rob Winch a10f707b6e
Fix spacing in backport-bot.yml 2022-06-01 16:46:54 -05:00
Rob Winch 1d4bf88a0f Cleanup backport-bot.yml 
Issue gh-11313
 2022-06-01 16:45:50 -05:00
Rob Winch b78a28be5f Add backport-bot.yml 
Closes gh-11313
 2022-05-31 21:42:56 -05:00
Steve Riesenberg 8e34b4c15e
Fix step id in conditional checks 2022-05-16 14:22:36 -05:00
Steve Riesenberg 8f4d003602
Revert "Add expression syntax to conditionals" 
This reverts commit ea0b271a73.
 2022-05-16 14:21:49 -05:00
Steve Riesenberg ea0b271a73
Add expression syntax to conditionals 
Issue gh-11158
 2022-05-16 12:39:55 -05:00
Steve Riesenberg d07c5e0804
Add quotes to boolean conditional checks 
Issue gh-11158
 2022-05-16 12:25:24 -05:00
Steve Riesenberg 0c94cfca63
Fix conditional using env namespace at job level 
Issue gh-11158
 2022-05-16 12:13:25 -05:00
Marcus Da Coregio 44e672d969 Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 16:13:34 -03:00
Marcus Da Coregio 0137f94f3b Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 12:32:16 -03:00
Rob Winch e4f5d2c6ef Fix release-next-version.yml 
- Improve speed by using single job and multiple steps
- Check output of tasks rather than rely on status codes to fail

Issue gh-11158
 2022-04-27 19:07:36 +02:00
Eleftheria Stein eba091bad5 Push tag in release workflow 
Issue gh-11023
 2022-04-26 10:10:27 +02:00
Eleftheria Stein 8914f06eca Use non-default access token in release pipeline 
This ensures that subsequent workflows are triggered

Closes gh-11022
 2022-04-26 09:54:40 +02:00
Steve Riesenberg 9601efd341 Add gradle-build-action to GitHub Actions pipelines 
Closes gh-11099
 2022-04-14 15:05:46 -05:00
Eleftheria Stein 0e7dec2d2c Tag release after updating gradle.properties 
Closes gh-11023
 2022-03-29 13:44:22 +02:00
Eleftheria Stein 992b8c38ac Update antora on next development version release 
Move commit from gradle task to workflow. Update antora.yml after project version update and before commit.

Closes gh-11021
 2022-03-29 12:28:37 +02:00
Eleftheria Stein 4a25264404 Stage changes before committing in release pipeline 
Issue gh-11020
 2022-03-29 12:28:05 +02:00
Eleftheria Stein 55c956ee68 Add task to update version in antora.yml 
This task updates the docs version based on the version in gradle.properties

Closes gh-11020
 2022-03-28 18:11:20 +02:00
Steve Riesenberg 155fe11815 Update release pipeline scheduled time to 5pm UTC 
Issue gh-10455
 2022-03-18 13:43:37 -05:00
Steve Riesenberg 43142a8137 Update CI pipeline to push next snapshot version after release 
Issue gh-10461
 2022-03-18 13:43:37 -05:00
Steve Riesenberg d7ac254b3d Do not run CI on tags 
Issue gh-10457
 2022-03-16 11:47:14 -05:00
Steve Riesenberg 5f37ee2f64 Add missing output and checkout 
Issue gh-10928
 2022-03-09 10:47:48 -06:00
Steve Riesenberg aa0005b1e1 Update CI process to create GitHub releases with release notes 
Closes gh-10928
 2022-03-08 17:41:57 -06:00
Eleftheria Stein 8c95ed6568 Update release pipeline to push next milestone 
- Check that all associated issues are closed
- Update gradle.properties and push change

Issue gh-10451
 2022-03-01 16:10:25 +01:00
Eleftheria Stein eb31913b2b Rearrange env variables in release pipeline 
Issue gh-10451
 2022-03-01 15:37:25 +01:00
Eleftheria Stein e472cc1cc8 Update release time to 1pm UTC 
Issue gh-10451
 2022-03-01 15:37:05 +01:00
Eleftheria Stein c7f3ad89f3 Re-enable check samples CI task 
Issue gh-10832

This reverts commit 85de423756.
 2022-02-14 13:04:32 +01:00
Eleftheria Stein 85de423756 Temporarily disable check samples CI task 
Issue gh-10832
 2022-02-14 12:53:48 +01:00
Eleftheria Stein d225d46749 Automated release should not trigger on git push 
Issue gh-10451
 2022-02-03 10:28:31 +01:00
Eleftheria Stein 1a1ef42094 Add workflow that triggers release on due date 
Add 2 Gradle tasks, one that calculates the next release milestone based on the current version and one that checks if it is due today.

Issue gh-10451
Issue gh-10455
 2022-02-03 10:11:46 +01:00
Rob Winch 8eeacf4a36 Fix Antora for Milestone & RC 
- Verify Antora display_version
- Run workflow for tags
- Allow run workflow manually

Issue gh-10765
 2022-01-18 14:20:47 -06:00
Rob Winch b96a2ae5a6 Generate Antora workflow_dispatch 
Issue gh-10765
 2022-01-18 12:56:29 -06:00
Rob Winch 2c38bfe59c Generate Antora for tags 
Issue gh-10765
 2022-01-18 12:56:06 -06:00
Rob Winch 4f88bb8e5f Antora Playbook 2021-11-11 13:37:08 -06:00
Rob Winch 127e10e607 Antora Playbook 2021-11-11 13:34:54 -06:00
Marcus Da Coregio e5ff13901e Switch workflows to use a JDK17 baseline 
Closes gh-10353
 2021-11-01 09:02:42 -03:00
Josh Cummings d779cd1d48 Support Structure101 License ID 
Closes gh-10443
 2021-10-28 13:26:02 -06:00
Josh Cummings cb6ca7f470 GitHub Actions uses spring-builds+github user 
This is more clear than spring-builds user
 2021-10-26 11:25:42 -06:00
Rob Winch efb9fcfb66 Use repository_name too 2021-10-25 15:05:06 -05:00
Rob Winch cb6e64fc97 Extract Branch Name 2021-10-25 14:56:53 -05:00
Rob Winch e5747fe860 Use env.GENERATED_BRANCH_NAME 2021-10-25 14:21:55 -05:00
Rob Winch 0d4959d514 Use GENERATED_BRANCH_NAME 2021-10-25 14:15:19 -05:00
Rob Winch ce58a868c9 Use branch name instead of entire ref 2021-10-25 14:10:00 -05:00
Rob Winch 132723bc8c Use repository + ref for generated docs 2021-10-25 14:04:02 -05:00
Rob Winch 1f5ebdda97 Use github.repository 2021-10-25 13:14:04 -05:00
Rob Winch e87775bb1a GITHUB_REPOSITORY instead of env.GITHUB_REPOSITORY 2021-10-25 13:12:38 -05:00
Rob Winch 8cb36c24ba Generated docs use env 2021-10-25 13:09:06 -05:00
Rob Winch 0f4b77a52f
Use https://spring.io/security-policy 2021-10-20 09:15:29 -05:00
Rob Winch cff0bde1a3 GitHub Actions uses spring-builds+github user 
This is more clear than spring-builds user
 2021-09-28 15:09:03 -05:00
Josh Cummings 770c57ecc9 Add Structure101 to CI Build 
Closes gh-6236
 2021-09-27 16:23:19 -06:00
Rob Winch b57caf22af Use GH_ACTIONS_REPO_TOKEN 2021-09-27 13:29:29 -05:00
Rob Winch e4ce7249cc Generate antora.yml and push to spring-security-docs-generated 2021-09-23 15:50:14 -05:00
Rob Winch 59e7a10732 Add dispatch 2021-09-23 15:45:22 -05:00
Marcus Da Coregio d0fbe6b501 Update CI deployments to be dependent on Check Samples 
Closes gh-10207
 2021-08-19 10:13:38 -03:00
Marcus Da Coregio be91a78781 Update Check Samples job to run in parallel 
Issue gh-9846
 2021-08-17 11:15:10 -03:00
Rob Winch 71f1cf1e0b Remove Remaining Sonar Reference 
Issue gh-10205
 2021-08-16 14:45:33 -05:00
Rob Winch 829733896c Remove unused Sonar from Build 
Closes gh-10205
 2021-08-16 14:42:38 -05:00
Marcus Da Coregio c562d56ff4 Add checkSamples task 
Closes gh-9846
 2021-07-27 14:11:51 -03:00
Rob Winch e98b6c617b Add Name for Check Milestone 
Issue gh-9989
 2021-06-22 14:04:37 -05:00
Rob Winch 3656e08b49 Notify if Milestone Invalid 
Issue gh-9989
 2021-06-22 13:54:18 -05:00
Rob Winch 1545ccb406 Add milestone-spring-releasetrain.yml 
Check if milestones are part of the release train

Closes gh-9989
 2021-06-22 13:49:54 -05:00
Josh Cummings 98326dfae4
Use stack-workflow-status Action 
Closes gh-9792
 2021-06-15 13:41:11 -06:00
Marcus Hert da Coregio 2d61fda1af Combine multiple OS builds into one 
Closes gh-9790
 2021-05-25 10:40:28 -06:00
Marcus Hert da Coregio fa7ba5e3db Update Env Variables in Build Windows Job 
Closes gh-9761
 2021-05-25 10:40:28 -06:00
Josh Cummings f7f435d3f4
Include all configured branches in CI 
Closes gh-9775
 2021-05-18 15:57:40 -06:00
Rob Winch 081e3301ad Use GPG_PRIVATE_KEY directly 
Closes gh-9776
 2021-05-18 16:44:29 -05:00
Rob Winch 03924951a2 Update GitHub Actions to use publishArtifacts 2021-05-17 23:40:43 -05:00
Eleftheria Stein 8ace670479 Configure user name for Gradle CI builds 
Closes gh-9747
 2021-05-17 11:07:35 +02:00
Marcus Hert da Coregio 85fb9c09a5 Update Check Windows CI Workflow 
- Add slack integration for error reporting
- Rename from check_windows to build_windows
- Change the build command to match the one in build_jdk_11
- Add build_windows to the needs of deployment and failure check jobs

Issue gh-9727
 2021-05-14 15:07:38 -06:00
Marcus Hert da Coregio d3f5521cbf
Add New Job to Verify Windows Build on CI Workflow 
Issue gh-9727
 2021-05-12 14:47:52 -06:00
Josh Cummings 441b9f8187
Adjust Needs Output 
- There is no need to emit the value of RUN_JOBS to the rest of the
workflow. As a boolean, it is sufficient to ask whether or not the
corresponding output is present at all
- Prerequisites is apparently easy to misspell

Issue gh-9701
 2021-05-11 17:07:32 -06:00
Josh Cummings a493660cdb Stop CI Jobs on Forks 
Closes gh-9701
 2021-05-07 13:40:19 -06:00
Rob Winch 006b9b9607 master->main 
Closes gh-9683
 2021-04-26 16:55:43 -05:00
Rob Winch 6e0d9e679e Remove test_alternative_jdks 
JDK 12 is no longer supported and JDK 16 requires Gradle 7 which has
not been released yet.
 2021-04-05 12:30:55 -05:00
Josh Cummings dd3b90379b
Change to GPG_PRIVATE_KEY_NO_HEADER 
Closes gh-9531
 2021-03-30 12:55:00 -06:00
Josh Cummings f9c4dbae61
Update Git Workflows to Use JDK 11 
Closes gh-9417
 2021-02-17 11:53:51 -07:00
Eleftheria Stein 793781fb67 Add manual trigger to CI workflow 
Closes gh-9360
 2021-01-21 14:02:54 +01:00
Rob Winch ef3b4d49d9 Add artifactoryUsername/Password to other workflow steps 
Added artifactoryUsername/Password to other CI workflow steps to ensure
all steps will pass if a new dependency is added.
 2020-11-16 13:11:07 -06:00
Rob Winch 47bb9b945c Add artifactoryUsername/Password to download new dependencies 2020-11-16 13:02:11 -06:00
Ellie Bahadori 649443f67e
Build GitHub Actions CI pipeline 2020-11-10 10:25:16 -05:00
Ellie Bahadori d69032a68d Prevent PR builds from running on forks 2020-10-26 11:07:25 -05:00
Ellie Bahadori 7ef3f61924
Add build scans to PR builds 2020-09-30 10:20:12 -04:00
Ellie Bahadori 7319e81701 Change pipeline to run for all base branches 
Issue gh-8680
 2020-06-17 16:05:41 -05:00
Ellie Bahadori e213e6430a Create Github Actions pipeline for PR build workflow 2020-06-11 11:07:34 -07:00
Rob Winch b1c8affec0 Update issue templates 
Remove old templates
 2020-04-16 16:05:40 -05:00
Rob Winch 5eb7134ee0 Update issue templates 
Improve descriptions
 2020-04-16 16:03:57 -05:00
Rob Winch 27b711a0a9 Add `status: waiting-for-triage` to issue templates 2020-04-16 16:02:26 -05:00
Rob Winch 71fcd5835b Remove legacy issue template 
Issue gh-8395
 2020-04-15 16:36:08 -05:00
Rob Winch 62fa697863 Add GitHub Issue Templates 
Closes gh-8395
 2020-04-15 16:12:45 -05:00
Rob Winch 59dcc36dd1
Use https link to Stack Overflow 2019-06-19 12:44:43 -05:00
Rob Winch df14e18299
Add links to Stack Overflow Reply Template 2019-06-19 11:27:57 -05:00
Rob Winch 9f52e9b5ce
Update to align with Spring Boot's Stack Overflow 2019-06-19 11:27:10 -05:00
Rob Winch ead28a3cee
Add create issue for features 2019-05-07 13:34:08 -05:00
Joe Grandja 21a0e45622 Update ISSUE_REPLY_TEMPLATES 2019-04-05 09:17:42 -04:00
Joe Grandja 4e9c37b1ae Manual URL Cleanup 2019-03-29 13:24:11 -04:00
Joe Grandja 575d943f1a Add GitHub Issue reply templates 2019-01-09 14:45:08 -05:00
Rob Winch e4255c9793
Add Security Vulnerabilities 2018-03-20 22:42:46 -05:00
Rob Winch 332c395875
Add Security Vulnerabilities Location 2018-03-20 22:42:15 -05:00
Rob Winch e7fd6f6c3f Remove the CLA confirmation from template 
We now use the new CLA tooling which automates this
 2016-06-13 13:20:22 -05:00
Vedran Pavić e9cb92bb74 Add GitHub Pull Request template 
Added a Pull Request template for GitHub
 2016-04-12 16:08:16 -05:00
Rob Winch 4fd9fd2939 Update ISSUE_TEMPLATE.md 2016-04-08 09:30:50 -05:00
Rob Winch 5bba6c9111 Create ISSUE_TEMPLATE.md 2016-04-08 09:29:44 -05:00