-
Notifications
You must be signed in to change notification settings - Fork 23
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* Add renovate * Migrate config renovate.json * Do not match on type * hmm * Add solr * Make sha update script more generic * Add composer * Add solr-ocrhighlighting * fixup * Use advanced capture for github releases * Update matchPackageNames * Use advanced capture for apache repos * Add cantaloupe * Add FITS * Add blazegraph log4j * Add some docs around renovate * matchDepNames * match all * Remove double quotes around version * Fix semver for some repos and better multi file support * put blazegraph log4j hash back * Update README.md * Add renovate validation action * Also update version in README * fix typo * Explicitly enable managers we want instead of disabling ones renovate auto-detected
- Loading branch information
Showing
14 changed files
with
282 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| name: validate renovate.json | ||
|
|
||
| on: | ||
| pull_request: | ||
|
|
||
| env: | ||
| LOG_LEVEL: debug | ||
|
|
||
| jobs: | ||
| renovate-config-validator: | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 10 | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 | ||
|
|
||
| - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4 | ||
| with: | ||
| node-version: 20 | ||
|
|
||
| - run: npx -p renovate renovate-config-validator renovate.json |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,116 @@ | ||
| #!/usr/bin/env bash | ||
|
|
||
| set -eou pipefail | ||
|
|
||
| DEP=$1 | ||
| OLD_VERSION=$2 | ||
| NEW_VERSION=$3 | ||
| URL="" | ||
| ARG="" | ||
| DOCKERFILES=() | ||
| README="" | ||
|
|
||
| echo "Updating SHA for $DEP@$NEW_VERSION" | ||
|
|
||
| if [ "$DEP" = "apache-tomcat" ]; then | ||
| URL="https://downloads.apache.org/tomcat/tomcat-9/v$NEW_VERSION/bin/apache-tomcat-$NEW_VERSION.tar.gz" | ||
| ARG="TOMCAT_FILE_SHA256" | ||
| DOCKERFILES=("tomcat/Dockerfile") | ||
| README="tomcat/README.md" | ||
|
|
||
| elif [ "$DEP" = "apache-activemq" ]; then | ||
| URL="https://downloads.apache.org/activemq/$NEW_VERSION/apache-activemq-$NEW_VERSION-bin.tar.gz" | ||
| ARG="ACTIVEMQ_FILE_SHA256" | ||
| DOCKERFILES=("activemq/Dockerfile") | ||
| README="activemq/README.md" | ||
|
|
||
| elif [ "$DEP" = "apache-solr" ]; then | ||
| URL="https://downloads.apache.org/solr/solr/$NEW_VERSION/solr-$NEW_VERSION.tgz" | ||
| ARG="SOLR_FILE_SHA256" | ||
| DOCKERFILES=("solr/Dockerfile") | ||
| README="solr/README.md" | ||
|
|
||
| elif [ "$DEP" = "custom-composer" ]; then | ||
| URL="https://getcomposer.org/download/${NEW_VERSION}/composer.phar" | ||
| ARG="COMPOSER_SHA256" | ||
| DOCKERFILES=("nginx/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "solr-ocrhighlighting" ]; then | ||
| URL=https://github.com/dbmdz/solr-ocrhighlighting/releases/download/${NEW_VERSION}/solr-ocrhighlighting-${NEW_VERSION}.jar | ||
| ARG="OCRHIGHLIGHT_FILE_SHA256" | ||
| DOCKERFILES=("solr/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "alpine-pkg-glibc" ]; then | ||
| URL="https://github.com/sgerrand/alpine-pkg-glibc/releases/download/${NEW_VERSION}/glibc-${NEW_VERSION}.apk" | ||
| ARG="GLIBC_SHA256" | ||
| DOCKERFILES=("code-server/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "fcrepo" ]; then | ||
| URL="https://github.com/fcrepo/fcrepo/releases/download/fcrepo-${NEW_VERSION}/fcrepo-webapp-${NEW_VERSION}.war" | ||
| ARG="FCREPO_SHA256" | ||
| DOCKERFILES=("fcrepo6/Dockerfile") | ||
| README="fcrepo6/README.md" | ||
|
|
||
| elif [ "$DEP" = "islandora-syn" ]; then | ||
| URL="https://github.com/Islandora/Syn/releases/download/v${NEW_VERSION}/islandora-syn-${NEW_VERSION}-all.jar" | ||
| ARG="SYN_SHA256" | ||
| DOCKERFILES=("fcrepo6/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "fcrepo-import-export" ]; then | ||
| URL="https://github.com/fcrepo-exts/fcrepo-import-export/releases/download/fcrepo-import-export-${NEW_VERSION}/fcrepo-import-export-${NEW_VERSION}.jar" | ||
| ARG="IMPORT_EXPORT_SHA256" | ||
| DOCKERFILES=("fcrepo6/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "fcrepo-upgrade-utils" ]; then | ||
| URL="https://github.com/fcrepo-exts/fcrepo-upgrade-utils/releases/download/fcrepo-upgrade-utils-${NEW_VERSION}/fcrepo-upgrade-utils-${NEW_VERSION}.jar" | ||
| ARG="UPGRADE_UTILS_SHA256" | ||
| DOCKERFILES=("fcrepo6/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "cantaloupe" ]; then | ||
| URL="https://github.com/cantaloupe-project/cantaloupe/releases/download/v${NEW_VERSION}/cantaloupe-${NEW_VERSION}.zip" | ||
| ARG="CANTALOUPE_SHA256" | ||
| DOCKERFILES=("cantaloupe/Dockerfile") | ||
| README="cantaloupe/README.md" | ||
|
|
||
| elif [ "$DEP" = "fits-servlet" ]; then | ||
| URL="https://github.com/harvard-lts/FITSservlet/releases/download/${NEW_VERSION}/fits-service-${NEW_VERSION}.war" | ||
| ARG="FITSSERVLET_SHA256" | ||
| DOCKERFILES=("fits/Dockerfile") | ||
|
|
||
| elif [ "$DEP" = "fits" ]; then | ||
| URL="https://github.com/harvard-lts/fits/releases/download/${NEW_VERSION}/fits-${NEW_VERSION}.zip" | ||
| ARG="FITS_SHA256" | ||
| DOCKERFILES=("fits/Dockerfile") | ||
| README="fits/README.md" | ||
|
|
||
| elif [ "$DEP" = "apache-log4j" ]; then | ||
| URL="https://archive.apache.org/dist/logging/log4j/${NEW_VERSION}/apache-log4j-${NEW_VERSION}-bin.zip" | ||
| ARG="LOG4J_FILE_SHA256" | ||
| DOCKERFILES=( | ||
| "blazegraph/Dockerfile" | ||
| "fits/Dockerfile" | ||
| ) | ||
|
|
||
| else | ||
| echo "DEP not found" | ||
| exit 0 | ||
| fi | ||
|
|
||
| # update the Dockerfile(s) SHA256 with the file we're downloading | ||
| SHA=$(curl -s "$URL" \ | ||
| | shasum -a 256 \ | ||
| | awk '{print $1}') | ||
| if [[ "$OSTYPE" == "darwin"* ]]; then | ||
| sed -i '' 's|^ARG '"$ARG"'=.*|ARG '"$ARG"'="'"$SHA"'"|g' "${DOCKERFILES[@]}" | ||
| else | ||
| sed -i 's|^ARG '"$ARG"'=.*|ARG '"$ARG"'="'"$SHA"'"|g' "${DOCKERFILES[@]}" | ||
| fi | ||
|
|
||
| # update the README to specify the new version | ||
| if [ "$README" != "" ]; then | ||
| if [[ "$OSTYPE" == "darwin"* ]]; then | ||
| sed -i '' "s/${OLD_VERSION}\.$/${NEW_VERSION}\./" "$README" | ||
| else | ||
| sed -i "s/${OLD_VERSION}\.$/${NEW_VERSION}\./" "$README" | ||
| fi | ||
| fi |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,80 @@ | ||
| { | ||
| "extends": [ | ||
| "config:best-practices", | ||
| ":rebaseStalePrs" | ||
| ], | ||
| "enabledManagers": [ | ||
| "custom.regex" | ||
| ], | ||
| "packageRules": [ | ||
| { | ||
| "matchPackageNames": [ | ||
| "apache/activemq", | ||
| "apache/logging-log4j2", | ||
| "fcrepo/fcrepo", | ||
| "fcrepo-exts/fcrepo-import-export", | ||
| "fcrepo-exts/fcrepo-upgrade-utils" | ||
| ], | ||
| "extractVersion": "^(fcrepo|activemq|rel|fcrepo-import-export|fcrepo-upgrade-utils)(\/|-)(?<version>\\d+\\.\\d+\\.\\d+)$", | ||
| "versioning": "semver" | ||
| }, | ||
| { | ||
| "packagePatterns": ["^apache/solr$"], | ||
| "extractVersion": "^releases/solr/(?<version>\\d+\\.\\d+\\.\\d+)$", | ||
| "versioning": "semver" | ||
| }, | ||
| { | ||
| "matchUpdateTypes": [ | ||
| "major" | ||
| ], | ||
| "enabled": false | ||
| }, | ||
| { | ||
| "groupName": "all non-major dependencies", | ||
| "matchUpdateTypes": [ | ||
| "minor", | ||
| "patch", | ||
| "digest" | ||
| ], | ||
| "matchDepNames": [ | ||
| "alpine-pkg-glibc", | ||
| "apache-activemq", | ||
| "apache-log4j", | ||
| "apache-solr", | ||
| "apache-tomcat", | ||
| "cantaloupe", | ||
| "custom-composer", | ||
| "fcrepo", | ||
| "fcrepo-import-export", | ||
| "fcrepo-upgrade-utils", | ||
| "fits", | ||
| "fits-servlet", | ||
| "islandora-syn", | ||
| "solr-ocrhighlighting" | ||
| ], | ||
| "postUpgradeTasks": { | ||
| "commands": [ | ||
| "bash ci/update-sha.sh \"{{{depName}}}\" \"{{{currentVersion}}}\" \"{{{newVersion}}}\"" | ||
| ] | ||
| } | ||
| } | ||
| ], | ||
| "customManagers": [ | ||
| { | ||
| "customType": "regex", | ||
| "description": "Update _VERSION variables in Dockerfiles", | ||
| "fileMatch": ["(^|/|\\.)Dockerfile$", "(^|/)Dockerfile\\.[^/]*$"], | ||
| "matchStrings": [ | ||
| "# renovate: datasource=(?<datasource>[a-z-]+?)(?: depName=(?<depName>.+?))? packageName=(?<packageName>.+?)(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG) .+?_VERSION=(?<currentValue>.+?)(\\s|$)" | ||
| ] | ||
| } | ||
| ], | ||
| "labels": [ | ||
| "dependencies" | ||
| ], | ||
| "osvVulnerabilityAlerts": true, | ||
| "dependencyDashboardOSVVulnerabilitySummary": "unresolved", | ||
| "vulnerabilityAlerts": { | ||
| "enabled": true | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.