Commit Graph

67 Commits

Author SHA1 Message Date
Jan Bartel de3adc861d
Update version limits for dependencies (#9406) 2023-02-24 11:14:12 +11:00
Joakim Erdfelt 55d9238961
Issue #8942 - Downgrading logback to 1.3.0
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-11-28 10:39:20 -06:00
Simone Bordet d1e0a7f612 Do not hard fail the documentation if Java < 19.
Require Java 19 to build the release.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2022-11-25 17:21:01 +01:00
Olivier Lamy 55a6cdad9d
add back dependabot for 9.4.x branch and force timezone to try get this done on weekend (#8820)
Signed-off-by: Olivier Lamy <olamy@apache.org>

Signed-off-by: Olivier Lamy <olamy@apache.org>
2022-11-02 14:56:13 +10:00
Olivier Lamy 3565d60f08
make log readable with using batch mode -B
Signed-off-by: Olivier Lamy <olamy@apache.org>
2022-10-01 19:36:00 +10:00
Joakim Erdfelt ab2a65f74f
Rework GitHub Projects tasks (#8588)
* Rework GitHub Projects tasks
2022-09-23 10:07:58 -05:00
Olivier Lamy 270f491ea8
add a step to push tag to a fork (#8577)
* add a step to push tag to a fork
* add creation of branch release/
2022-09-15 07:14:48 +10:00
Varun Sharma 7a3372fc3f [GitHub] Add minimum GitHub token permissions for workflows
Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
2022-08-31 15:50:47 -07:00
Olivier Lamy eb6ff577ae
codeql correctly setup maven to not depend on default installation (#8334)
* setup Maven via a GHA
2022-07-28 07:02:45 +10:00
Olivier Lamy e3b0e80857
skip test for CodeQL (#8324)
* skip test for CodeQL
* remove javascript and use clean
2022-07-21 06:55:13 -05:00
Joakim Erdfelt 5f93e02a6d
Updating issue templates for EOL (#8321) 2022-07-20 17:01:05 -05:00
Joakim Erdfelt ee739ff01e
Remove `jetty-9.4.x` configuration from dependabot (#8297)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-07-14 13:09:43 +10:00
Jonathan Leitschuh ea3dd1eca7
Add codeql-analysis.yml GitHub Actions Workflow (#7961) 2022-06-30 16:54:27 -05:00
Olivier Lamy 0d13cbe9a7
change-dependabot-interval-to-monthly (#8140)
* Update dependabot.yml

* modify after review and discussion
2022-06-09 11:33:52 +10:00
Greg Wilkins 9ae1387ed8
Update release-template.md (#8147)
Update to include an optional step to manually run dependabot and review resulting PRs for inclusion before freezing release.
2022-06-09 09:48:35 +10:00
Joakim Erdfelt 2b9e3db76f
More restrictions on dependencies (#8127)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-06-07 09:33:33 +10:00
Olivier Lamy 3fba189368
ignore xml bind upgrade >=3 and fix pattern jaxws-rt as star looks to not be supported for artifactId (#7952)
* ignore xml bind upgrade >=3 and fix pattern jaxws-rt as star looks to not be supported for artifactId

Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>

* fix duplicate

Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-05-05 06:44:03 +10:00
Olivier Lamy 809ed64b12
ignore too recent weld version for 9.4.x branch (#7607)
Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-02-18 13:31:56 +10:00
Joakim Erdfelt 1aaf2835df
Adding back jetty-11 config
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-01-28 11:12:12 -06:00
Joakim Erdfelt 72eb04a8fa
Fix quoting on infinispan rule
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-01-27 10:59:54 -06:00
Joakim Erdfelt 9d31dd6089
Adding version range limits for cdi & interceptor APIs
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2022-01-27 10:56:41 -06:00
Olivier Lamy 1ee37a850f dependabot should manage infinispan only < 12
Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2022-01-27 14:12:46 +10:00
Simone Bordet 95f5773cb8
Fixed typo. 2022-01-11 16:41:34 +01:00
Joakim Erdfelt 5de3e4901c
Issue #7219 - Migrate to Github Workflow Stale (#7221)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-12-07 11:55:56 -06:00
Greg Wilkins 80ddc3ba2d
Update CVE releated issues with CVE number (#6949)
It can be hard to find issues associated with CVEs after the fact.  We should update the issue description to include the CVE number once published.
2021-10-18 07:27:54 +11:00
Greg Wilkins 8186a3ebed
Issue template to discourage security issues (#6960)
Update the issue template to discourage security issues
2021-10-06 14:31:45 +11:00
Simone Bordet f12c5b668c
Updated release-template.md
- Added step to create the next GitHub Projects.
- Updated staging of Jetty 10 and 11 using Java 17.
2021-09-21 21:59:57 +02:00
Olivier Lamy e4eaedb439 dependabot should ignore jakarta.transaction >= 2.0
Signed-off-by: Olivier Lamy <oliver.lamy@gmail.com>
2021-09-15 13:03:18 +10:00
Joakim Erdfelt 1098fc3dff
Restrict com.sun.xml.ws:jaxws version range
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-14 11:26:58 -05:00
Joakim Erdfelt 798d8936a1
Restrict org.jboss.weld.servlet to 3.x series
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-14 10:48:39 -05:00
Joakim Erdfelt 30a0b39e4e
Temporarily disable 11.0.x dependabot config until we catchup with our backlog. (#6805)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-14 14:02:40 +10:00
Joakim Erdfelt c46875de95
Add milestone hints to created PRs
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-13 11:53:15 -05:00
Joakim Erdfelt ea15b40913
Ignore jakarta.servlet.jsp.jstl by version
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-13 11:20:31 -05:00
Joakim Erdfelt 8eddbe0a4a
Change dependabot interval to daily (#6768)
* Only chose to change branches 9.4.x and 10.0.x to daily.
  Leaving 11.0.x at weekly, so that it's updates
  can trail behind the 10.0.x ones that are
  merged forward to 11.0.x
* Remove github-actions config

Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-13 06:10:55 -05:00
Simone Bordet 6023e13a01
Simplified release ticklist. (#6700)
Integrated test bullets into main ticklist.
Normalized spaces at 2 rather than 3 or 4.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-09-08 09:31:08 +02:00
Joakim Erdfelt eb0755dfb2
Adding back dependabot configuration (#6686)
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2021-09-08 10:40:51 +10:00
Olivier Lamy 9a4ee7ad16
Extend stale mechanism to Pull Request. Mark them as stale after 15 days inactivity and not assigned to a project (uhmm not sure if this ignore draft) (#6421)
Signed-off-by: olivier lamy <oliver.lamy@gmail.com>
2021-07-07 16:53:16 +10:00
Greg Wilkins b3322f0f43
Update release-template.md (#6484)
Add a notification step in testing.
2021-07-01 21:42:55 +10:00
Greg Wilkins 4665f3f718
Update release-template.md
quote parameters
2021-06-21 18:12:32 +10:00
Greg Wilkins 8db318e4f0
Update release-template.md 2021-06-21 18:09:39 +10:00
Greg Wilkins c1867df53b
Release process issue template
Release process issue template.

Merging without a positive review as we need a process and this one has been used twice without significant problems.   Any concerns can be raised in new PRs against it.

Signed-off-by: Greg Wilkins <gregw@webtide.com>
2021-06-21 11:34:04 +10:00
Greg Wilkins dceb4184f8
Update enhancement-template.md
removed Enhancement from the title since the label is sufficient
2021-06-09 14:22:20 +10:00
Greg Wilkins fc44ddacf8
Update issue-template.md
Added Bug label
2021-06-09 14:21:27 +10:00
Greg Wilkins 3a155e992e
Create enhancement-template.md
Added template for enhancement
2021-06-09 14:16:01 +10:00
Greg Wilkins 7aa5ed114b
Create config.yml
Added a config.yml in order to add reference to security guideline page
2021-06-09 14:01:48 +10:00
Simone Bordet cb9abedb54 Removed the release template to avoid confusing users that open issues.
Template can be copied/pasted as necessary.

Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
2021-06-08 17:50:17 +02:00
Greg Wilkins 842f513397
create release issue template
Created template for a release process.
2021-06-08 16:42:59 +10:00
Simone Bordet 8d46d3fc8f Added hint to use java -version to report the Java version/vendor.
Signed-off-by: Simone Bordet <simone.bordet@gmail.com>
(cherry picked from commit e5f28dbc16)
2021-05-06 22:14:35 +02:00
Joakim Erdfelt 7da43cafba
Removing dependabot.yml temporarily
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2020-11-25 15:22:48 -06:00
Joakim Erdfelt 63fba2763b
Minor tweaks to dependabot.yml
Signed-off-by: Joakim Erdfelt <joakim.erdfelt@gmail.com>
2020-11-09 14:40:15 -06:00