root
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Actions 21 Packages Projects Releases Wiki Activity
18,975 Commits 47 Branches 367 Tags 124 MiB
Commit Graph

154 Commits

Author SHA1 Message Date
dependabot[bot] 83585125ff Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:48 -03:00
dependabot[bot] 42432cc3de Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:37 -03:00
dependabot[bot] c9a7f2487c Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:03:26 -03:00
dependabot[bot] b2c3bc6b3a Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:01:21 -03:00
dependabot[bot] 652f98a88c Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:01:10 -03:00
dependabot[bot] 40dd7a0d2d Bump sjohnr/slack-workflow-status from 1.pre.beta to 1.1.0 
Bumps [sjohnr/slack-workflow-status](https://github.com/sjohnr/slack-workflow-status) from 1.pre.beta to 1.1.0.
- [Commits](https://github.com/sjohnr/slack-workflow-status/compare/v1-beta...v1.1.0)

---
updated-dependencies:
- dependency-name: sjohnr/slack-workflow-status
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:53 -03:00
dependabot[bot] 53b640e8e2 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 09:00:31 -03:00
dependabot[bot] e4cc0a4755 Bump slackapi/slack-github-action from 1.19.0 to 1.24.0 
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.19.0 to 1.24.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.24.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:37 -03:00
dependabot[bot] ff71ef46b7 Bump actions/setup-java from 3 to 4 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:19 -03:00
dependabot[bot] 5593655bbf Bump spring-io/spring-gradle-build-action from 1 to 2 
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:09 -03:00
dependabot[bot] 47812e506f Bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-12-14 08:58:00 -03:00
Marcus Hert Da Coregio 040b879119 Merge branch '6.1.x' 2023-11-10 11:25:26 -03:00
Marcus Hert Da Coregio e0758dd388 Include samples_branch into job output 
Issue gh-14127
 2023-11-10 11:25:13 -03:00
Marcus Hert Da Coregio bd48fdf744 Merge branch '6.1.x' 2023-11-10 11:17:55 -03:00
Marcus Hert Da Coregio 0f24194418 Rename cloneSamples to cloneRepository 
Closes gh-14127
 2023-11-10 11:16:47 -03:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Marcus Hert Da Coregio 30e3f9d932 Revert "Run CI on fork" 
This reverts commit 1c7828f2d4.
 2023-10-30 16:15:10 -03:00
Marcus Hert Da Coregio 1c7828f2d4 Run CI on fork 2023-10-30 15:08:03 -03:00
Marcus Da Coregio 5055ee98db Merge branch '6.1.x' 2023-09-29 15:51:01 -03:00
Marcus Da Coregio e551d0b411 Merge branch '5.8.x' into 6.0.x 2023-09-29 15:50:17 -03:00
Marcus Da Coregio b9836d618a Fix Workflows 
Issue gh-13873
 2023-09-29 15:50:10 -03:00
Marcus Da Coregio 2505c08e8f Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873

(cherry picked from commit 3aae03b1b2)
 2023-09-29 15:48:12 -03:00
Marcus Da Coregio 9e877c9bc6 Do not run some workflows for Dependabot branches 
Issue gh-13873

(cherry picked from commit ab812b2b53)
 2023-09-29 15:48:11 -03:00
Marcus Da Coregio 3aae03b1b2 Do Not Run Some Workflows on Dependabot's PRs 
Issue gh-13873
 2023-09-29 14:25:22 -03:00
Marcus Da Coregio ab812b2b53 Do not run some workflows for Dependabot branches 
Issue gh-13873
 2023-09-29 14:03:04 -03:00
Marcus Da Coregio da1e949873 Merge branch '6.1.x' 
Closes gh-13879
 2023-09-28 16:02:30 -03:00
Marcus Da Coregio 5351fe43da Merge branch '5.8.x' into 6.0.x 
Closes gh-13877
 2023-09-28 15:59:56 -03:00
Marcus Da Coregio 650692964e Fix snapshot_tests on CI workflow 
Closes gh-13876
 2023-09-28 15:58:43 -03:00
Marcus Da Coregio 5a10d2f08c Merge branch '6.1.x' 2023-09-28 15:14:55 -03:00
Marcus Da Coregio c6841d83eb Merge branch '5.8.x' into 6.0.x 2023-09-28 15:01:58 -03:00
Marcus Da Coregio e29ea47ff7 Use Gradle's Version Catalog 
Issue gh-13868
 2023-09-28 14:57:18 -03:00
Steve Riesenberg 4905b91bdd
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-26 14:43:19 -05:00
Steve Riesenberg 2a80048340
Revert "Run tests on JDK 21" 
This reverts commit 875096ff77.
 2023-09-25 16:05:47 -05:00
Steve Riesenberg 875096ff77
Run tests on JDK 21 
Closes gh-13811

(cherry picked from commit 1dcc73ad1f)
 2023-09-25 12:01:32 -05:00
Steve Riesenberg d76e15d708
Revert "Run tests on JDK 21" 
This reverts commit 1dcc73ad1f.
 2023-09-19 14:11:41 -05:00
Steve Riesenberg 1dcc73ad1f
Run tests on JDK 21 
Closes gh-13811
 2023-09-19 10:39:05 -05:00
Josh Cummings c9b0e3cc11
Align Snapshot Data and Reactor with Boot 
Issue gh-13627
 2023-08-08 08:02:53 -06:00
Josh Cummings 5fc042f0c0
Update Snapshot Build 
Closes gh-13627
 2023-08-07 19:43:13 -06:00
Josh Cummings 7dc3759f5d
Merge branch '5.8.x' into 6.0.x 2023-02-01 15:25:47 -07:00
jongwooo aad3e61f4d chore: Use cache in continuous-integration-workflow.yml 
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
 2023-02-01 14:26:25 -07:00
Marcus Da Coregio 5955e89dff Merge branch '5.8.x' into 6.0.x 
Closes gh-12299
 2022-11-25 09:24:03 -03:00
Kirk Lin 9c6d90490d ci: fix GitHub Actions Deprecating save-state and set-output commands 
Closes gh-12032
 2022-11-25 09:05:28 -03:00
Josh Cummings f2ddeaface
Merge remote-tracking branch 'origin/5.8.x' 2022-10-17 15:01:30 -06:00
Josh Cummings ff055cf07a
Remote antoraUpdateVersion task from CI 2022-10-17 14:24:13 -06:00
Marcus Da Coregio 5e4f1ba211 Merge branch '5.8.x' 
Closes gh-11826
 2022-09-16 10:19:32 -03:00
Marcus Da Coregio 7756247c3a Simplify checkSamples task 
Closes gh-11814
 2022-09-16 09:36:12 -03:00
Steve Riesenberg 57d212ddca
Use cache and user.name system property on Windows 2022-07-28 15:13:55 -05:00
Steve Riesenberg 539b17f6da
Only run prerequisites job if on upstream repo 2022-07-28 15:13:54 -05:00
Steve Riesenberg 37e1ad27fe
Simplify dependency graph 2022-07-28 15:13:53 -05:00
Steve Riesenberg 043fdd6f03
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-28 15:13:52 -05:00
Steve Riesenberg 3234e05085
Polish gh-11367 2022-07-28 15:13:51 -05:00
naveen f957e3c051
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Closes gh-11367
 2022-07-28 15:13:51 -05:00
Steve Riesenberg 865bf23ecc
Use cache and user.name system property on Windows 2022-07-28 13:00:15 -05:00
Steve Riesenberg f86d30f4a1
Only run prerequisites job if on upstream repo 2022-07-27 16:01:16 -05:00
Steve Riesenberg dc59d12405
Simplify dependency graph 2022-07-27 16:01:15 -05:00
Steve Riesenberg bdeb32854e
Use Spring Gradle Build Action 
Closes gh-11630
 2022-07-27 16:01:15 -05:00
Steve Riesenberg 3f4efedd23
Polish gh-11367 2022-07-26 15:33:34 -05:00
naveen 8f93a7fc94
Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.

- Included permissions for the action.

https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
 2022-07-26 15:33:33 -05:00
Steve Riesenberg aaf20e7b61
Build only on branches 
Issue gh-11480
 2022-07-18 11:47:25 -05:00
Steve Riesenberg 148756076c
Backport release automation and github actions 
Closes gh-11501
 2022-07-13 15:51:25 -05:00
Steve Riesenberg 095f23d81f
Fix slack notifications in #spring-security-ci 
Issue gh-11346
 2022-07-05 17:50:27 -05:00
Steve Riesenberg ac98e358a5 Add slack announcement when release is successful 
Closes gh-11307
 2022-06-14 14:10:09 -05:00
Steve Riesenberg d1cb236df5
Fix slack notifications in #spring-security-ci 
This change can be reverted if upgrading to a new version of
Gamesight/slack-workflow-status with the fix available (> 1.1.0).

Closes gh-11346
 2022-06-07 16:07:10 -05:00
Steve Riesenberg 07f28de79b
Polish gh-11184 
Propagate rename in notify_result section.
 2022-06-03 15:23:48 -05:00
Steve Riesenberg 46723a601c Add workflow step for scheduling the next milestone 
This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules:

- If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows:
  - Finds the next available release train starting month (including this month), either January or July.
  - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November
- If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month).
- In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1).

If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired.

Closes gh-10458
 2022-06-03 15:07:42 -05:00
Marcus Da Coregio 44e672d969 Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 16:13:34 -03:00
Marcus Da Coregio 0137f94f3b Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 12:32:16 -03:00
Steve Riesenberg 9601efd341 Add gradle-build-action to GitHub Actions pipelines 
Closes gh-11099
 2022-04-14 15:05:46 -05:00
Eleftheria Stein 992b8c38ac Update antora on next development version release 
Move commit from gradle task to workflow. Update antora.yml after project version update and before commit.

Closes gh-11021
 2022-03-29 12:28:37 +02:00
Steve Riesenberg 43142a8137 Update CI pipeline to push next snapshot version after release 
Issue gh-10461
 2022-03-18 13:43:37 -05:00
Steve Riesenberg d7ac254b3d Do not run CI on tags 
Issue gh-10457
 2022-03-16 11:47:14 -05:00
Steve Riesenberg 5f37ee2f64 Add missing output and checkout 
Issue gh-10928
 2022-03-09 10:47:48 -06:00
Steve Riesenberg aa0005b1e1 Update CI process to create GitHub releases with release notes 
Closes gh-10928
 2022-03-08 17:41:57 -06:00
Eleftheria Stein c7f3ad89f3 Re-enable check samples CI task 
Issue gh-10832

This reverts commit 85de423756.
 2022-02-14 13:04:32 +01:00
Eleftheria Stein 85de423756 Temporarily disable check samples CI task 
Issue gh-10832
 2022-02-14 12:53:48 +01:00
Marcus Da Coregio e5ff13901e Switch workflows to use a JDK17 baseline 
Closes gh-10353
 2021-11-01 09:02:42 -03:00
Josh Cummings d779cd1d48 Support Structure101 License ID 
Closes gh-10443
 2021-10-28 13:26:02 -06:00
Josh Cummings cb6ca7f470 GitHub Actions uses spring-builds+github user 
This is more clear than spring-builds user
 2021-10-26 11:25:42 -06:00
Rob Winch cff0bde1a3 GitHub Actions uses spring-builds+github user 
This is more clear than spring-builds user
 2021-09-28 15:09:03 -05:00
Josh Cummings 770c57ecc9 Add Structure101 to CI Build 
Closes gh-6236
 2021-09-27 16:23:19 -06:00
Marcus Da Coregio d0fbe6b501 Update CI deployments to be dependent on Check Samples 
Closes gh-10207
 2021-08-19 10:13:38 -03:00
Marcus Da Coregio be91a78781 Update Check Samples job to run in parallel 
Issue gh-9846
 2021-08-17 11:15:10 -03:00
Rob Winch 71f1cf1e0b Remove Remaining Sonar Reference 
Issue gh-10205
 2021-08-16 14:45:33 -05:00
Rob Winch 829733896c Remove unused Sonar from Build 
Closes gh-10205
 2021-08-16 14:42:38 -05:00
Marcus Da Coregio c562d56ff4 Add checkSamples task 
Closes gh-9846
 2021-07-27 14:11:51 -03:00
Josh Cummings 98326dfae4
Use stack-workflow-status Action 
Closes gh-9792
 2021-06-15 13:41:11 -06:00
Marcus Hert da Coregio 2d61fda1af Combine multiple OS builds into one 
Closes gh-9790
 2021-05-25 10:40:28 -06:00
Marcus Hert da Coregio fa7ba5e3db Update Env Variables in Build Windows Job 
Closes gh-9761
 2021-05-25 10:40:28 -06:00
Josh Cummings f7f435d3f4
Include all configured branches in CI 
Closes gh-9775
 2021-05-18 15:57:40 -06:00
Rob Winch 081e3301ad Use GPG_PRIVATE_KEY directly 
Closes gh-9776
 2021-05-18 16:44:29 -05:00
Rob Winch 03924951a2 Update GitHub Actions to use publishArtifacts 2021-05-17 23:40:43 -05:00
Eleftheria Stein 8ace670479 Configure user name for Gradle CI builds 
Closes gh-9747
 2021-05-17 11:07:35 +02:00
Marcus Hert da Coregio 85fb9c09a5 Update Check Windows CI Workflow 
- Add slack integration for error reporting
- Rename from check_windows to build_windows
- Change the build command to match the one in build_jdk_11
- Add build_windows to the needs of deployment and failure check jobs

Issue gh-9727
 2021-05-14 15:07:38 -06:00
Marcus Hert da Coregio d3f5521cbf
Add New Job to Verify Windows Build on CI Workflow 
Issue gh-9727
 2021-05-12 14:47:52 -06:00
Josh Cummings 441b9f8187
Adjust Needs Output 
- There is no need to emit the value of RUN_JOBS to the rest of the
workflow. As a boolean, it is sufficient to ask whether or not the
corresponding output is present at all
- Prerequisites is apparently easy to misspell

Issue gh-9701
 2021-05-11 17:07:32 -06:00
Josh Cummings a493660cdb Stop CI Jobs on Forks 
Closes gh-9701
 2021-05-07 13:40:19 -06:00
Rob Winch 006b9b9607 master->main 
Closes gh-9683
 2021-04-26 16:55:43 -05:00
Rob Winch 6e0d9e679e Remove test_alternative_jdks 
JDK 12 is no longer supported and JDK 16 requires Gradle 7 which has
not been released yet.
 2021-04-05 12:30:55 -05:00
Josh Cummings dd3b90379b
Change to GPG_PRIVATE_KEY_NO_HEADER 
Closes gh-9531
 2021-03-30 12:55:00 -06:00
Josh Cummings f9c4dbae61
Update Git Workflows to Use JDK 11 
Closes gh-9417
 2021-02-17 11:53:51 -07:00