You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ja...@apache.org on 2026/03/24 13:15:39 UTC
(ofbiz-framework) branch release24.09 updated: Copy GitHub workflow definition files from the default branch (trunk) since they now work correctly in any branch without modification
This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new 414bfbf8c0 Copy GitHub workflow definition files from the default branch (trunk) since they now work correctly in any branch without modification
414bfbf8c0 is described below
commit 414bfbf8c03fd2423c0f0c164280ae0221be948f
Author: Jacopo Cappellato <ja...@gmail.com>
AuthorDate: Tue Mar 24 14:02:45 2026 +0100
Copy GitHub workflow definition files from the default branch (trunk) since they now work correctly in any branch without modification
---
.github/dependabot.yml | 21 +++++++++++++++++----
.github/workflows/codeql-analysis.yml | 15 +++++----------
.github/workflows/dependency-review.yml | 9 ++-------
.github/workflows/docker-image.yaml | 23 +++++++++--------------
.github/workflows/gradle.yaml | 11 +++--------
.github/workflows/scorecard.yml | 14 +++++---------
6 files changed, 41 insertions(+), 52 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b6e9dc16d9..7a04ccb0ba 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,13 +20,25 @@
version: 2
updates:
- - package-ecosystem: "npm" # See documentation for possible values
- directory: "themes/common-theme/webapp/common-theme/js" # Location of package manifests
+ - package-ecosystem: "npm"
+ directory: "themes/common-theme/webapp/common-theme/js"
schedule:
interval: "daily"
+ - package-ecosystem: "npm"
+ directory: "themes/common-theme/webapp/common-theme/js"
+ target-branch: "release24.09"
+ schedule:
+ interval: "daily"
+
+ - package-ecosystem: github-actions
+ directory: /
+ schedule:
+ interval: daily
+
- package-ecosystem: github-actions
directory: /
+ target-branch: "release24.09"
schedule:
interval: daily
@@ -35,7 +47,8 @@ updates:
schedule:
interval: daily
- - package-ecosystem: npm
- directory: /themes/common-theme/webapp/common-theme/js
+ - package-ecosystem: docker
+ directory: /
+ target-branch: "release24.09"
schedule:
interval: daily
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7de905d3fd..34b9e52e29 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -28,7 +28,7 @@ on:
branches: [ trunk, release* ]
pull_request:
# The branches below must be a subset of the branches above
- branches: [ trunk ]
+ branches: [ trunk, release* ]
schedule:
- cron: '27 15 * * 1'
@@ -55,17 +55,12 @@ jobs:
# https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
steps:
- - name: Harden Runner
- uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
- with:
- egress-policy: audit
-
- name: Checkout repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+ uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
with:
languages: ${{ matrix.language }}
debug: true
@@ -77,7 +72,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
- uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+ uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
# âšī¸ Command-line programs to run using the OS shell.
# đ https://git.io/JvXDl
@@ -91,4 +86,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+ uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index dffc76cca5..130090e1a9 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -31,12 +31,7 @@ jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- - name: Harden Runner
- uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
- with:
- egress-policy: audit
-
- name: 'Checkout Repository'
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: 'Dependency Review'
- uses: actions/dependency-review-action@0efb1d1d84fc9633afcdaad14c485cbbc90ef46c # v2.5.1
+ uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
diff --git a/.github/workflows/docker-image.yaml b/.github/workflows/docker-image.yaml
index b143b8b365..93d0b15ea8 100644
--- a/.github/workflows/docker-image.yaml
+++ b/.github/workflows/docker-image.yaml
@@ -40,7 +40,7 @@ name: Build and push docker images
on:
push:
- branches: [ release24.09 ]
+ branches: [ trunk, release* ]
tags:
- '**'
@@ -53,17 +53,12 @@ jobs:
name: Build and push OFBiz docker container images
runs-on: ubuntu-latest
steps:
- - name: Harden Runner
- uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
- with:
- egress-policy: audit
-
- name: Check out OFBiz sources
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Log in to the Container registry
if: ${{ !env.ACT && vars.DO_DOCKER_PUSH == 'true' }}
- uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+ uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
with:
registry: ghcr.io
username: ${{ github.actor }}
@@ -73,7 +68,7 @@ jobs:
# Build and push a container image of the OFBiz Framework without any data loaded.
- name: Determine metadata (tags, labels) for Docker runtime build
id: runtimemeta
- uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+ uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
with:
images: ghcr.io/apache/ofbiz
tags: |
@@ -101,7 +96,7 @@ jobs:
- name: Build and push runtime docker image
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
with:
context: .
target: runtime
@@ -113,7 +108,7 @@ jobs:
# Build and push a container image of the OFBiz Framework preloaded with demo data
- name: Determine metadata (tags, labels) for Docker demo-preload build
id: demometa
- uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+ uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
with:
images: ghcr.io/apache/ofbiz
tags: |
@@ -121,7 +116,7 @@ jobs:
type=ref,event=branch,suffix=-preloaddemo-snapshot,priority=650
- name: Build and push demo docker image
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
with:
context: .
target: demo
@@ -138,7 +133,7 @@ jobs:
run: ./pullAllPluginsSource.sh
- name: Determine metadata (tags, labels) for Docker framework with plugins build
id: pluginsmeta
- uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+ uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
with:
images: ghcr.io/apache/ofbiz
tags: |
@@ -146,7 +141,7 @@ jobs:
type=ref,event=branch,suffix=-plugins-snapshot,priority=650
- name: Build and push framework with plugins docker image
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
with:
context: .
target: runtime
diff --git a/.github/workflows/gradle.yaml b/.github/workflows/gradle.yaml
index 414c186bc8..bcf27d6e01 100644
--- a/.github/workflows/gradle.yaml
+++ b/.github/workflows/gradle.yaml
@@ -21,9 +21,9 @@ name: Java CI with Gradle
on:
push:
- branches: [ trunk ]
+ branches: [ trunk, release* ]
pull_request:
- branches: [ trunk ]
+ branches: [ trunk, release* ]
permissions:
contents: read
@@ -37,13 +37,8 @@ jobs:
DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
steps:
- - name: Harden Runner
- uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
- with:
- egress-policy: audit
-
- name: Check out OFBiz sources
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up JDK 17
uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b6c47f80c5..792ac33bec 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -41,8 +41,9 @@ on:
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
branch_protection_rule:
# To guarantee Maintained check is occasionally updated. See
- # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
+ # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule:
+ # At 00:37 on Saturday
- cron: '37 0 * * 6'
push:
branches: [ "trunk" ]
@@ -64,18 +65,13 @@ jobs:
# actions: read
steps:
- - name: Harden Runner
- uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
- with:
- egress-policy: audit
-
- name: "Checkout code"
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
+ uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
with:
results_file: results.sarif
results_format: sarif
@@ -107,6 +103,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
if: ${{ !env.ACT }}
- uses: github/codeql-action/upload-sarif@cf7e9f23492505046de9a37830c3711dd0f25bb3 # v2.16.2
+ uses: github/codeql-action/upload-sarif@05b1a5d28f8763fd11e77388fe57846f1ba8e766 # v2.16.2
with:
sarif_file: results.sarif