You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ja...@apache.org on 2026/10/22 14:16:01 UTC
(ofbiz-framework) branch release24.09 updated (c96aa59108 -> ef2444f3a7)
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a change to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
from c96aa59108 Bump com.fasterxml.jackson.core:jackson-databind from 2.22.3 to 2.22.4
new d41bc1bd96 Change some of the GitHub Actions runners from ubuntu-latest to ubuntu-slim for improved efficiency
new ff5bd335b6 Run the Java CI workflow only when it is useful
new 8c2a3fcd10 Run the Scorecard analysis weekly instead of on every push
new 1e80f6f6e0 Run lightweight workflows on ubuntu-slim runners
new f26a1b4727 Give each push build of the Java CI workflow its own concurrency group
new ef2444f3a7 Allow the Scorecard analysis to be run by hand
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/dependency-review.yml | 2 +-
.github/workflows/gradle.yml | 38 +++++++++++++++++++++++++++++++
.github/workflows/pr-type-label.yml | 2 +-
.github/workflows/scorecard.yml | 4 ++--
5 files changed, 43 insertions(+), 5 deletions(-)
(ofbiz-framework) 06/06: Allow the Scorecard analysis to be run by hand
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit ef2444f3a7026a8697bb648b70c4c66fd44328b5
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Wed Oct 21 14:37:41 2026 +0200
Allow the Scorecard analysis to be run by hand
Now that the analysis only runs on the weekly schedule, add the
workflow_dispatch trigger so it can be re-run on demand, for example
to check that an alert is resolved without waiting for the next
scheduled run.
Thanks to Mridul Pathak for the review.
Co-Authored-By: Claude Opus 5.5 <no...@anthropic.com>
(cherry picked from commit 9de0431956c684a4f182b0cfca8b615c2da3cad8)
---
.github/workflows/scorecard.yml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ca330dd0aa..c2ad8236d2 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -45,6 +45,8 @@ on:
schedule:
# At 00:37 on Saturday
- cron: '37 0 * * 6'
+ # To re-run the analysis by hand, e.g. after fixing an alert.
+ workflow_dispatch:
# Declare default permissions as read only.
permissions: read-all
(ofbiz-framework) 03/06: Run the Scorecard analysis weekly instead of on every push
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit 8c2a3fcd1018b8948486f80af41c69b5d279b680
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Tue Oct 20 19:42:55 2026 +0200
Run the Scorecard analysis weekly instead of on every push
The Scorecard analysis requires an ubuntu-latest runner (the scorecard
action runs in a Docker container) and these runners are a limited
resource shared by all the ASF projects. Running it for every commit
pushed to trunk is not useful: the score mostly depends on repository
settings and practices that rarely change from one commit to the next.
Remove the push trigger and rely on the weekly schedule and on the
branch_protection_rule trigger to keep the results and the badge
up to date.
Co-Authored-By: Claude Opus 5.5
(cherry picked from commit 1cae5ea3bb3afe299ee266a122866c33b1589dda)
---
.github/workflows/scorecard.yml | 2 --
1 file changed, 2 deletions(-)
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 0c90eaa84f..ca330dd0aa 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -45,8 +45,6 @@ on:
schedule:
# At 00:37 on Saturday
- cron: '37 0 * * 6'
- push:
- branches: [ "trunk" ]
# Declare default permissions as read only.
permissions: read-all
(ofbiz-framework) 04/06: Run lightweight workflows on ubuntu-slim runners
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit 1e80f6f6e05610ac33b7adceb9daad96d0448c0e
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Tue Oct 20 19:44:30 2026 +0200
Run lightweight workflows on ubuntu-slim runners
The dependency
review jobs only run small scripts or JavaScript actions that call the
GitHub API. Run them on the single-CPU ubuntu-slim runners to spare the
ubuntu-latest runners, which are a limited resource shared by all the
ASF projects.
Co-Authored-By: Claude Opus 5.5
(cherry picked from commit af414fda287eff031f0b8a8e1f3c6b7b67ad36f8)
---
.github/workflows/dependency-review.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index b0e49d10e2..80e88a9e0d 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -29,7 +29,7 @@ permissions:
jobs:
dependency-review:
- runs-on: ubuntu-latest
+ runs-on: ubuntu-slim
steps:
- name: 'Checkout Repository'
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
(ofbiz-framework) 02/06: Run the Java CI workflow only when it is useful
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit ff5bd335b6800036adf8f4d0e9c7a85ebb8ff677
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Tue Oct 20 19:33:59 2026 +0200
Run the Java CI workflow only when it is useful
The ubuntu-latest runners are a limited resource shared by all the ASF
projects, so avoid using them when the build cannot be affected:
- trigger the workflow only for changes that can affect
"gradlew check javadoc": changes to documentation (*.md, *.adoc,
docs/), Windows scripts, legal/info files, Docker/IDE/devcontainer
setup and other workflows no longer start a build
- cancel the build of a pull request that is still running or queued
when a new commit is pushed to it; builds of pushes to trunk and
release* branches are never cancelled
- drop the "prep" job, which used a runner only to compute the JDK
matrix: the matrix is now computed directly with an expression
(JDK 17 for release* branches, JDK 17 and 21 otherwise)
Co-Authored-By: Claude Opus 5.5
(cherry picked from commit 3734acdb57e9a2ade75006eac0206de9ecd1a762)
---
.github/workflows/gradle.yml | 37 +++++++++++++++++++++++++++++++++++++
1 file changed, 37 insertions(+)
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 4e38fe3f58..6e8f706cbd 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -22,8 +22,45 @@ name: Java CI with Gradle
on:
push:
branches: [ trunk, release* ]
+ # Changes that cannot affect `./gradlew check javadoc` (documentation, Docker/IDE/devcontainer
+ # setup, Windows-only scripts, other workflows...) don't trigger the build: the ubuntu-latest
+ # runners are a limited resource shared by all the ASF projects.
+ # GitHub evaluates these patterns in order, so a later pattern can re-include a path that an
+ # earlier "!" pattern excluded.
+ paths: &build-paths
+ - '**'
+ - '!**.md'
+ - '!**.adoc'
+ - '!**/src/docs/**'
+ - '!docs/**'
+ - '!**.bat'
+ - '!APACHE2_HEADER'
+ - '!INSTALL'
+ - '!LICENSE'
+ - '!NOTICE'
+ - '!OPTIONAL_LIBRARIES'
+ - '!VERSION'
+ - '!.asf.yaml'
+ - '!.devcontainer/**'
+ - '!.dockerignore'
+ - '!.gitattributes'
+ - '!.gitignore'
+ - '!.hgignore'
+ - '!.idea/**'
+ - '!.pre-commit-config.yaml'
+ - '!Dockerfile'
+ - '!docker/**'
+ - '!.github/**'
+ - '.github/workflows/gradle.yml'
pull_request:
branches: [ trunk, release* ]
+ paths: *build-paths
+
+# A new push to a pull request makes its previous, still running or queued build useless.
+# Pushes to trunk and release* are never cancelled so that every commit gets its own result.
+concurrency:
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+ cancel-in-progress: ${{ github.event_name == 'pull_request' }}
permissions:
contents: read
(ofbiz-framework) 05/06: Give each push build of the Java CI workflow its own concurrency group
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit f26a1b4727af98b89dd5e8a21c1ffe35fff3eb5f
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Wed Oct 21 14:36:38 2026 +0200
Give each push build of the Java CI workflow its own concurrency group
A concurrency group holds at most one running and one pending run: when
a newer run joins the group, the pending one is cancelled even if
cancel-in-progress is false. Grouping trunk and release* pushes by
github.ref could therefore leave some commits without a build. Use
github.run_id for pushes instead, while pull requests are still grouped
by number and still have their older runs cancelled.
Thanks to Mridul Pathak for the review.
Co-Authored-By: Claude Opus 5.5 <no...@anthropic.com>
(cherry picked from commit 696e14e5b1e289cd5d80026341dc85ba2af3948d)
---
.github/workflows/gradle.yml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 6e8f706cbd..f00499b256 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -58,8 +58,9 @@ on:
# A new push to a pull request makes its previous, still running or queued build useless.
# Pushes to trunk and release* are never cancelled so that every commit gets its own result.
+# Each of them gets its own group (run_id): in a shared group a newer run would replace a pending one.
concurrency:
- group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
permissions:
(ofbiz-framework) 01/06: Change some of the GitHub Actions runners from ubuntu-latest to ubuntu-slim for improved efficiency
Posted by ja...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit d41bc1bd96fc56ee18afa1620d9e1cf2f941d2ba
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Tue Oct 20 19:30:29 2026 +0200
Change some of the GitHub Actions runners from ubuntu-latest to ubuntu-slim for improved efficiency
(cherry picked from commit b6c861cc51e5636fa16d78793d1f5fe3ad6073d6)
---
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/pr-type-label.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml
index a6ff8aa51d..0ae5198d5c 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -37,7 +37,7 @@ permissions:
jobs:
asf-allowlist-check:
- runs-on: ubuntu-latest
+ runs-on: ubuntu-slim
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
diff --git a/.github/workflows/pr-type-label.yml b/.github/workflows/pr-type-label.yml
index cbdd772f0e..c3e752097a 100644
--- a/.github/workflows/pr-type-label.yml
+++ b/.github/workflows/pr-type-label.yml
@@ -54,7 +54,7 @@ jobs:
github.event_name == 'workflow_dispatch' ||
(github.event.pull_request.user.login != 'dependabot[bot]' &&
(github.event.action != 'edited' || github.event.changes.title || github.event.changes.base))
- runs-on: ubuntu-latest
+ runs-on: ubuntu-slim
permissions:
pull-requests: write
steps: