Merge branch 'vegardit:main' into main

Author: andyhan

.github/dependabot.yml

@@ -12,5 +12,6 @@ updates:
       prefix-development: chore
       include: scope
     labels:
-      - gha
+      - pinned
       - dependencies
+      - gha

.github/stale.yml

@@ -1,31 +1,44 @@
-# Copyright 2020-2021 by Vegard IT GmbH, Germany, https://vegardit.com
+# SPDX-FileCopyrightText: © Vegard IT GmbH (https://vegardit.com)
+# SPDX-FileContributor: Sebastian Thomschke
 # SPDX-License-Identifier: Apache-2.0
+# SPDX-ArtifactOfProjectHomePage: https://github.com/vegardit/docker-graalvm-maven
 #
-# Author: Sebastian Thomschke, Vegard IT GmbH
-#
-# https://github.com/vegardit/docker-graalvm-maven
-#
-# https://docs.github.com/en/free-pro-team@latest/actions/reference/workflow-syntax-for-github-actions
+# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
 name: Build
 
 on:
   push:
-    branches:
+    branches:    # build all branches
     - '**'
-    tags-ignore:
+    tags-ignore: # but don't build tags
     - '**'
     paths-ignore:
+    - '**/*.adoc'
     - '**/*.md'
+    - '.editorconfig'
+    - '.git*'
+    - '.github/*.yml'
+    - '.github/workflows/stale.yml'
   schedule:
     # https://docs.github.com/en/free-pro-team@latest/actions/reference/events-that-trigger-workflows
-    - cron: '0 0 * * *'
+    - cron: '0 4 * * */3' # At 04:00 on every 3rd day-of-week
+  pull_request:
   workflow_dispatch:
     # https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/
+    inputs:
+      GRAALVM_VERSION:
+        description: 'GraalVM Version'
+        required: true
+        default: 'latest'
+
+defaults:
+  run:
+    shell: bash
 
 env:
   DOCKER_IMAGE_REPO: vegardit/graalvm-maven
   TRIVY_CACHE_DIR: ~/.trivy/cache
-  
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -35,17 +48,34 @@ jobs:
       fail-fast: false
       matrix:
         include:
-        - GRAALVM_VERSION: release
+        # https://github.com/graalvm/graalvm-ce-builds/releases
+        - GRAALVM_VERSION: ${{ github.event.inputs.GRAALVM_VERSION || 'latest' }}
+          GRAALVM_JAVA_VERSION: 11
+          experimental: false
+        - GRAALVM_VERSION: ${{ github.event.inputs.GRAALVM_VERSION || 'latest' }}
+          GRAALVM_JAVA_VERSION: 17
           experimental: false
-        - GRAALVM_VERSION: latest
+        - GRAALVM_VERSION: ${{ github.event.inputs.GRAALVM_VERSION || 'latest' }}
+          GRAALVM_JAVA_VERSION: 21
+          experimental: false
+        - GRAALVM_VERSION: ${{ github.event.inputs.GRAALVM_VERSION || 'latest' }}
+          GRAALVM_JAVA_VERSION: 24
+          experimental: false
+        # https://github.com/graalvm/graalvm-ce-dev-builds/releases
+        - GRAALVM_VERSION: dev
+          GRAALVM_JAVA_VERSION: 25
           experimental: true
 
     steps:
+    - name: Show environment variables
+      run: env | sort
+
     - name: Git Checkout
-      uses: actions/checkout@v3 #https://github.com/actions/checkout
+      uses: actions/checkout@v4 #https://github.com/actions/checkout
 
     - name: Cache trivy cache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
+      if: env.ACT != 'true' # https://github.com/nektos/act#skipping-steps
       with:
         path: ${{ env.TRIVY_CACHE_DIR }}
         # https://github.com/actions/cache/issues/342#issuecomment-673371329
@@ -54,39 +84,40 @@ jobs:
           ${{ runner.os }}-trivy-
 
     - name: Cache local Maven repository
-      uses: actions/cache@v3
+      uses: actions/cache@v4
+      if: env.ACT != 'true' # https://github.com/nektos/act#skipping-steps
       with:
         path: /tmp/maven-repo
         key: ${{ runner.os }}-mvnrepo-${{ hashFiles('example/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-mvnrepo-
 
+    - name: Configure fast APT repository mirror
+      uses: vegardit/fast-apt-mirror.sh@v1
+
     - name: Install dos2unix
-      # using '-o Acquire::Retries=3' to workaround sporadic connectivity issues "Could not connect to azure.archive.ubuntu.com:80"
-      # see https://github.com/actions/virtual-environments/issues/675
-      run: sudo apt-get install -o Acquire::Retries=3 --no-install-recommends -y dos2unix
+      run: sudo apt-get install --no-install-recommends -y dos2unix
 
-    - name: Build ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}
-      shell: bash
+    - name: Build ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}-java${{ matrix.GRAALVM_JAVA_VERSION }}
       env:
         DOCKER_REGISTRY: docker.io
         DOCKER_REGISTRY_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
         DOCKER_REGISTRY_TOKEN: ${{ secrets.DOCKER_HUB_TOKEN }}
+        GITHUB_TOKEN: ${{ github.token }}
         GRAALVM_VERSION: ${{ matrix.GRAALVM_VERSION }}
+        GRAALVM_JAVA_VERSION: ${{ matrix.GRAALVM_JAVA_VERSION }}
         TRIVY_GITHUB_TOKEN: ${{ github.token }}
       run: |
-        if [ "$GITHUB_REF" == "refs/heads/main" ]; then
+        set -eu
+        if [[ $GITHUB_REF_NAME == "main" && $GITHUB_EVENT_NAME != "pull_request" && ${ACT:-} != "true" ]]; then
           export DOCKER_PUSH=1
+          echo "$DOCKER_REGISTRY_TOKEN" | docker login -u="$DOCKER_REGISTRY_USERNAME" "$DOCKER_REGISTRY" --password-stdin
         fi
-        echo "$DOCKER_REGISTRY_TOKEN" | docker login -u="$DOCKER_REGISTRY_USERNAME" "$DOCKER_REGISTRY" --password-stdin
         bash build-image.sh
 
-    - name: Test ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}
-      shell: bash
-      env:
-        DOCKER_IMAGE: ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}
+    - name: Test ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}-java${{ matrix.GRAALVM_JAVA_VERSION }}
       run: |
-        docker run --rm -t vegardit/graalvm-maven:release /bin/bash -c "
+        docker run --rm -t ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}-java${{ matrix.GRAALVM_JAVA_VERSION }} /bin/bash -c "
           cd /tmp
           echo 'class HelloWorld { public static void main(String[] args) { System.out.println(\"HelloWorld!\"); }}' > HelloWorld.java
           javac HelloWorld.java
@@ -96,15 +127,46 @@ jobs:
           ./helloworld
 
           # test static executable
-          native-image --static HelloWorld
+          native-image HelloWorld
           ./helloworld
         "
 
-    - name: Test ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }} via Maven
-      shell: bash
+    - name: Test ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}-java${{ matrix.GRAALVM_JAVA_VERSION }} via Maven
       env:
-        DOCKER_IMAGE: ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}
+        RUN_IN_DOCKER_IMAGE: ${{ env.DOCKER_IMAGE_REPO }}:${{ matrix.GRAALVM_VERSION }}-java${{ matrix.GRAALVM_JAVA_VERSION }}
+      if: ${{ !env.ACT }} # https://github.com/nektos/act#skipping-steps
       run: |
+        set -eux
         bash example/tools/run-in-docker.sh mvn clean package
         bash example/tools/run-in-docker.sh bash -c target/example
-        
+
+    - name: Publish Docker image to GH registry
+      if: ${{ github.ref_name == 'main' && github.event_name != 'pull_request' && !env.ACT }} # https://github.com/nektos/act#skipping-steps
+      run: |
+        set -eux
+
+        echo "${{ github.token }}" | docker login https://ghcr.io -u ${{ github.actor }} --password-stdin
+
+        image_name="$DOCKER_IMAGE_REPO:${{ matrix.GRAALVM_VERSION }}-java${{ matrix.GRAALVM_JAVA_VERSION }}"
+        docker image tag $image_name ghcr.io/$image_name
+        docker push ghcr.io/$image_name
+
+  purge-untagged-images:
+    runs-on: ubuntu-latest
+    needs: [build]
+    steps:
+    - name: Delete untagged images
+      uses: actions/github-script@v7
+      if: ${{ github.ref_name == 'main' && github.event_name != 'pull_request' && !env.ACT }} # https://github.com/nektos/act#skipping-steps
+      with:
+        github-token: ${{ secrets.GHA_DELETE_PACKAGES }}
+        script: |
+          const imageName = /[^/]*$/.exec(process.env.DOCKER_IMAGE_REPO)[0]
+          const basePath = `/orgs/${{ github.repository_owner }}/packages/container/${imageName}/versions`
+          for (version of (await github.request(`GET ${basePath}`, { per_page: 100 })).data) {
+            if (version.metadata.container.tags.length == 0) {
+              console.log(`deleting ${version.name}...`)
+              const delResponse = await github.request(`DELETE ${basePath}/${version.id}`)
+              console.log(`status: ${delResponse.status}`)
+            }
+          }

.github/workflows/build.yml

@@ -0,0 +1,61 @@
+# SPDX-FileCopyrightText: © Sebastian Thomschke and contributors
+# SPDX-License-Identifier: AGPL-3.0-or-later
+# SPDX-ArtifactOfProjectHomePage: https://github.com/Second-Hand-Friends/kleinanzeigen-bot/
+#
+# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
+name: Stale issues
+
+on:
+  schedule:
+    - cron: '0 16 * * *'
+  workflow_dispatch:
+    # https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/
+
+permissions:
+  contents: write # only for delete-branch option
+  issues: write
+  pull-requests: write
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Git checkout
+      uses: actions/checkout@v4  # https://github.com/actions/checkout
+
+    - name: Run stale action
+      uses: actions/stale@v9  # https://github.com/actions/stale
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        days-before-stale: 90
+        days-before-close: 14
+        stale-issue-message: >
+          This issue has been automatically marked as stale because it has not had
+          recent activity. It will be closed in 14 days if no further activity occurs.
+          If the issue is still valid, please add a respective comment to prevent this 
+          issue from being closed automatically. Thank you for your contributions.
+        stale-issue-label: stale
+        close-issue-label: wontfix
+        exempt-issue-labels: |
+          enhancement
+          pinned
+          security
+
+    - name: Run stale action
+      uses: actions/stale@v9  # https://github.com/actions/stale
+      with:
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        days-before-stale: 360
+        days-before-close: 14
+        stale-issue-message: >
+          This issue has been automatically marked as stale because it has not had
+          recent activity. It will be closed in 14 days if no further activity occurs.
+          If the issue is still valid, please add a respective comment to prevent this 
+          issue from being closed automatically. Thank you for your contributions.
+        stale-issue-label: stale
+        close-issue-label: wontfix
+        only-labels: enhancement
+        exempt-issue-labels: |
+          pinned
+          security

.github/workflows/stale.yml

@@ -0,0 +1,2 @@
+# secrets - false positive
+github-app-token