django-DefectDojo/.github/workflows/release-3-master-into-dev.yml at 5e1d668f79ab0c4791de07226d8511a4dc364482 · DefectDojo/django-DefectDojo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
name: "Release-3: PR for merging master into dev"

env:
  GIT_USERNAME: "DefectDojo release bot"
  GIT_EMAIL: "dojo-release-bot@users.noreply.github.com"
on:
  workflow_dispatch:
    inputs:
      # the actual branch that can be chosen on the UI is made irrelevant by further steps
      # because someone will forget one day to change it.
      release_number_new:
        description: "Newly just released version (x.y.z format)"
        required: true
      release_number_dev:
        description: "Future release version for dev branch (x.y.z-dev format)"
        required: true

jobs:
  create_pr_for_merge_back_into_dev:
    runs-on: ubuntu-latest
    steps:
      - id: Set-GitHub-org
        run: echo "GITHUB_ORG=${GITHUB_REPOSITORY%%/*}" >> $GITHUB_ENV

      - name: Checkout master
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: master

      - name: Create merge back branch
        run: |
          echo "NEW_BRANCH=master-into-dev/${{ inputs.release_number_new }}-${{ inputs.release_number_dev }}" >> $GITHUB_ENV

      - name: Configure git
        run: |
          git config --global user.name "${{ env.GIT_USERNAME }}"
          git config --global user.email "${{ env.GIT_EMAIL }}"

      - name: Push new branch
        run: git push origin HEAD:${NEW_BRANCH}

      - name: Checkout new branch
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: ${{ env.NEW_BRANCH }}

      - name: Update version numbers in key files
        run: |
          sed -ri 's/__version__ = ".*"/__version__ = "${{ inputs.release_number_dev }}"/' dojo/__init__.py
          sed -ri 's/"version": ".*"/"version": "${{ inputs.release_number_dev }}"/' components/package.json
          sed -ri 's/appVersion: ".*"/appVersion: "${{ inputs.release_number_dev }}"/' helm/defectdojo/Chart.yaml
          CURRENT_CHART_VERSION=$(grep -oP 'version: (\K\S*)?' helm/defectdojo/Chart.yaml | head -1)
          sed -ri "0,/version/s/version: \S+/$(echo "version: $CURRENT_CHART_VERSION" | awk -F. -v OFS=. 'NF==1{print ++$NF}; NF>1{$NF=sprintf("%0*d", length($NF), ($NF+1)); print}')-dev/" helm/defectdojo/Chart.yaml

      - name: Check numbers
        run: |
          grep version dojo/__init__.py
          grep appVersion helm/defectdojo/Chart.yaml
          grep version components/package.json

      - name: Create upgrade notes to documentation
        run: |
          minorv=$(echo ${{ inputs.release_number_dev }} | cut -d '.' -f -2)
          patchv=$(echo ${{ inputs.release_number_dev }} | cut -d '-' -f -1)
          weight=$(date +%Y%m%d)
          echo -n "---
          title: 'Upgrading to DefectDojo Version $minorv.x'
          toc_hide: true
          weight: -$weight
          description: No special instructions.
          ---
          There are no special instructions for upgrading to $minorv.x. Check the [Release Notes](https://github.com/DefectDojo/django-DefectDojo/releases/tag/$patchv) for the contents of the release.
          " > docs/content/en/open_source/upgrading/$minorv.md
          git add docs/content/en/open_source/upgrading/$minorv.md
        if: endsWith(inputs.release_number_new, '.0') && endsWith(inputs.release_number_dev, '.0-dev')

      - name: Update values in HELM chart
        run: |
          yq -i '.annotations = {}' helm/defectdojo/Chart.yaml
          yq -i '.annotations."artifacthub.io/prerelease" = "true"' helm/defectdojo/Chart.yaml
          yq -i '.annotations."artifacthub.io/changes" = ""' helm/defectdojo/Chart.yaml

      - name: Run helm-docs
        uses: losisin/helm-docs-github-action@2ccf3e77eb70dc80d62f8cc26f15d0a96b75fef4 # v1.8.0
        with:
          chart-search-root: "helm/defectdojo"

      - name: Push version changes
        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
        with:
          commit_user_name: "${{ env.GIT_USERNAME }}"
          commit_user_email: "${{ env.GIT_EMAIL }}"
          commit_author: "${{ env.GIT_USERNAME }} <${{ env.GIT_EMAIL }}>"
          commit_message: "Update versions in application files"
          branch: ${{ env.NEW_BRANCH }}

      - name: Create Pull Request
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            const pr = await github.rest.pulls.create({
              owner: '${{ env.GITHUB_ORG }}',
              repo: 'django-DefectDojo',
              title: 'Release: Merge back ${{ inputs.release_number_new }} into dev from: ${{ env.NEW_BRANCH }}',
              body: `Release triggered by \`${ process.env.GITHUB_ACTOR }\``,
              head: '${{ env.NEW_BRANCH }}',
              base: 'dev'
            })
            await github.rest.issues.addLabels({
              owner: '${{ env.GITHUB_ORG }}',
              repo: 'django-DefectDojo',
              issue_number: pr.data.number,
              labels: ['release-management']
            })

  create_pr_for_merge_back_into_bugfix:
    runs-on: ubuntu-latest
    steps:
      - id: Set-GitHub-org
        run: echo "GITHUB_ORG=${GITHUB_REPOSITORY%%/*}" >> $GITHUB_ENV

      - name: Checkout master
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: master

      - name: Create merge back branch
        run: |
          echo "NEW_BRANCH=master-into-bugfix/${{ inputs.release_number_new }}-${{ inputs.release_number_dev }}" >> $GITHUB_ENV

      - name: Configure git
        run: |
          git config --global user.name "${{ env.GIT_USERNAME }}"
          git config --global user.email "${{ env.GIT_EMAIL }}"

      - name: Push new branch
        run: git push origin HEAD:${NEW_BRANCH}

      - name: Checkout new branch
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: ${{ env.NEW_BRANCH }}

      - name: Update version numbers in key files
        run: |
          sed -ri "s/__version__ = '.*'/__version__ = '${{ inputs.release_number_dev }}'/" dojo/__init__.py
          sed -ri "s/appVersion: \".*\"/appVersion: \"${{ inputs.release_number_dev }}\"/" helm/defectdojo/Chart.yaml
          sed -ri "s/\"version\": \".*\"/\"version\": \"${{ inputs.release_number_dev }}\"/" components/package.json
          CURRENT_CHART_VERSION=$(grep -oP 'version: (\K\S*)?' helm/defectdojo/Chart.yaml | head -1)
          sed -ri "0,/version/s/version: \S+/$(echo "version: $CURRENT_CHART_VERSION" | awk -F. -v OFS=. 'NF==1{print ++$NF}; NF>1{$NF=sprintf("%0*d", length($NF), ($NF+1)); print}')-dev/" helm/defectdojo/Chart.yaml

      - name: Check numbers
        run: |
          grep version dojo/__init__.py
          grep appVersion helm/defectdojo/Chart.yaml
          grep version components/package.json

      - name: Update values in HELM chart
        run: |
          yq -i '.annotations = {}' helm/defectdojo/Chart.yaml
          yq -i '.annotations."artifacthub.io/prerelease" = "true"' helm/defectdojo/Chart.yaml
          yq -i '.annotations."artifacthub.io/changes" = ""' helm/defectdojo/Chart.yaml

      - name: Run helm-docs
        uses: losisin/helm-docs-github-action@2ccf3e77eb70dc80d62f8cc26f15d0a96b75fef4 # v1.8.0
        with:
          chart-search-root: "helm/defectdojo"

      - name: Push version changes
        uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
        with:
          commit_user_name: "${{ env.GIT_USERNAME }}"
          commit_user_email: "${{ env.GIT_EMAIL }}"
          commit_author: "${{ env.GIT_USERNAME }} <${{ env.GIT_EMAIL }}>"
          commit_message: "Update versions in application files"
          branch: ${{ env.NEW_BRANCH }}

      - name: Create Pull Request
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            const pr = await github.rest.pulls.create({
              owner: '${{ env.GITHUB_ORG }}',
              repo: 'django-DefectDojo',
              title: 'Release: Merge back ${{ inputs.release_number_new }} into bugfix from: ${{ env.NEW_BRANCH }}',
              body: `Release triggered by \`${ process.env.GITHUB_ACTOR }\``,
              head: '${{ env.NEW_BRANCH }}',
              base: 'bugfix'
            })
            await github.rest.issues.addLabels({
              owner: '${{ env.GITHUB_ORG }}',
              repo: 'django-DefectDojo',
              issue_number: pr.data.number,
              labels: ['release-management']
            })