chore(release): Test v7.12.3

.env.example

@@ -1,15 +1,50 @@
+# SERVER CONFIG
+HOST='localhost'
+PORT='3000'
+PROTO='http'
+SERVER_SECRET='key_SERVER_SECRET'
+# Cluster node number 0 - 1023. Must be unique per process.
+SERVER_ID='1'
+# Websocket port for the websocket server, only used in development
+SOCKET_PORT='3001'
+
+# APPLICATION
 # AMPLITUDE_WRITE_KEY='key_AMPLITUDE_WRITE_KEY'
-ATLASSIAN_CLIENT_ID='key_ATLASSIAN_CLIENT_ID'
-ATLASSIAN_CLIENT_SECRET='key_ATLASSIAN_CLIENT_SECRET'
+# Enter a short url redirect service for invitations, it needs to redirecto to /invitation-link
+# INVITATION_SHORTLINK='example.com'
+# If true, all new orgs will default to being enterprise tier. Use for PPMIs
+IS_ENTERPRISE=false
+
+# AUTHENTICATION
 AUTH_INTERNAL_DISABLED='false'
 AUTH_GOOGLE_DISABLED='false'
+AUTH_MICROSOFT_DISABLED='false'
 AUTH_SSO_DISABLED='false'
-SERVER_SECRET='key_SERVER_SECRET'
+GOOGLE_OAUTH_CLIENT_ID=''
+GOOGLE_OAUTH_CLIENT_SECRET=''
+OAUTH2_REDIRECT=''
+# could be a specific tenant for on premise installs
+MICROSOFT_TENANT_ID='common'
+MICROSOFT_CLIENT_ID=''
+MICROSOFT_CLIENT_SECRET=''
+
+# AWS
 AWS_ACCESS_KEY_ID='key_AWS_ACCESS_KEY_ID'
 AWS_REGION='key_AWS_REGION'
-AWS_S3_BUCKET='action-files.parabol.co'
 AWS_SECRET_ACCESS_KEY='key_AWS_SECRET_ACCESS_KEY'
+
+# MONITORING
+# SEGMENT_WRITE_KEY='key_SEGMENT_WRITE_KEY'
+# SENTRY_DSN='key_SENTRY_DSN'
+
+# CDN SETTINGS
 CDN_BASE_URL=''
+# FILE_STORE_PROVIDER: local | s3 | gcs
+FILE_STORE_PROVIDER='local'
+# AWS_S3_BUCKET='BUCKET_NAME'
+# GOOGLE_GCS_BUCKET='BUCKET_NAME'
+
+# CHRONOS
 CHRONOS_PULSE_EMAIL=''
 CHRONOS_PULSE_CHANNEL=''
 CHRONOS_PULSE_DAILY='0 0 4 * * *'
@@ -19,28 +54,65 @@ CHRONOS_SCHEDULE_JOBS='0 */10 * * * *'
 CHRONOS_UPDATE_TOKENS='0 0 0 1,15 * *'
 CHRONOS_PROCESS_RECURRENCE='0 */5 * * * *'
 CHRONOS_AUTOPAUSE='0 0 5 * * *'
-CI='true'
-DD_AGENT_HOST='172.17.0.1'
-DD_API_KEY='DD_API_KEY'
+
+# DATABASES
+POSTGRES_PASSWORD=parabol
+POSTGRES_USER=pgparaboladmin
+POSTGRES_DB=parabol-saas
+POSTGRES_HOST=localhost
+POSTGRES_PORT=5432
+# POSTGRES_POOL_SIZE=5
+# POSTGRES_SSL_REJECT_UNAUTHORIZED=false
+# POSTGRES_SSL_DIR='/var/lib/postgresql'
+REDIS_PASSWORD=''
+REDIS_URL='redis://localhost:6379'
+# REDIS_TLS_CERT_FILE=./certs/redis.crt
+# REDIS_TLS_KEY_FILE=./certs/redis.key
+# REDIS_TLS_CA_FILE=./certs/redisCA.crt
+# REDIS_TLS_REJECT_UNAUTHORIZED='false'
+RETHINKDB_URL='rethinkdb://localhost:28015/actionDevelopment'
+RETHINKDB_SSL='false'
+
+# DATADOG DD-Trace
+# https://ddtrace.readthedocs.io/en/stable/configuration.html
 DD_APM_ENABLED='false'
+DD_API_KEY=''
+DD_APPLICATIONID=''
+DD_APPSEC_ENABLED='true'
+DD_CLIENTTOKEN=''
+DD_ENV=''
+DD_LOGS_INJECTION='true'
+DD_RUNTIME_METRICS_ENABLED='true'
+DD_SERVICE='DD_SERVICE_NAME'
+DD_TRACE_AGENT_URL='http://localhost:8126'
 DD_TRACE_ENABLED='false'
-DD_ENV='local'
-FILE_STORE_PROVIDER='s3'
+
+# GOOGLE
+# Google Analytics Tracking ID
+# GA_TRACKING_ID=''
+GOOGLE_CLOUD_CLIENT_EMAIL='key_GOOGLE_CLOUD_CLIENT_EMAIL'
+GOOGLE_CLOUD_PRIVATE_KEY='key_GOOGLE_CLOUD_PRIVATE_KEY'
+GOOGLE_CLOUD_PRIVATE_KEY_ID='key_GOOGLE_CLOUD_PRIVATE_KEY_ID'
+
+# INTEGRATIONS
+ATLASSIAN_CLIENT_ID='key_ATLASSIAN_CLIENT_ID'
+ATLASSIAN_CLIENT_SECRET='key_ATLASSIAN_CLIENT_SECRET'
+AZUREDEVOPS_CLIENT_ID=''
+AZUREDEVOPS_CLIENT_SECRET=''
 GITHUB_CLIENT_ID='key_GITHUB_CLIENT_ID'
 GITHUB_CLIENT_SECRET='key_GITHUB_CLIENT_SECRET'
-GITHUB_WEBHOOK_SECRET='key_GITHUB_WEBHOOK_SECRET'
 GITLAB_CLIENT_ID='key_GITLAB_CLIENT_ID'
 GITLAB_CLIENT_SECRET='key_GITLAB_CLIENT_SECRET'
-GOOGLE_CLOUD_CLIENT_EMAIL='key_GOOGLE_CLOUD_CLIENT_EMAIL'
-GOOGLE_CLOUD_PRIVATE_KEY='key_GOOGLE_CLOUD_PRIVATE_KEY'
-GOOGLE_CLOUD_PRIVATE_KEY_ID='key_GOOGLE_CLOUD_PRIVATE_KEY_ID'
-GRAPHQL_HOST='localhost:3000'
-GRAPHQL_PROTOCOL='http'
-HOST='localhost'
-#if true, all new orgs will default to being enterprise tier. Use for PPMIs
-IS_ENTERPRISE=false
-# Enter a short url redirect service for invitations, it needs to redirecto to /invitation-link
-# INVITATION_SHORTLINK='example.com'
+HUBSPOT_API_KEY=''
+HUBSPOT_SALES_PIPELINE_ACTIVE_STAGES=''
+HUBSPOT_SALES_PIPELINE_ID=''
+OPEN_AI_API_KEY=''
+OPEN_AI_ORG_ID=''
+RECALL_AI_KEY=''
+SLACK_CLIENT_ID='key_SLACK_CLIENT_ID'
+SLACK_CLIENT_SECRET='key_SLACK_CLIENT_SECRET'
+
+# MAIL
 # MAIL GLOBALS. PROVIDER: mailgun | google | debug | smtp
 MAIL_PROVIDER='debug'
 MAIL_FROM='key_MAIL_FROM'
@@ -54,37 +126,12 @@ MAIL_SMTP_USER='key_MAIL_SMTP_USER'
 MAIL_SMTP_PASSWORD='key_MAIL_SMTP_PASSWORD'
 MAIL_SMTP_USE_TLS='1' # set to '0' for false
 MAIL_SMTP_CIPHERS='HIGH:MEDIUM:!aNULL:!eNULL:@STRENGTH:!DH:!kEDH'
-MIN_LOG_DURATION='200'
-OAUTH2_REDIRECT=''
-PGADMIN_DEFAULT_EMAIL='pgadmin4@pgadmin.org'
-PGADMIN_DEFAULT_PASSWORD='admin'
-PORT='3000'
-POSTGRES_PASSWORD=parabol
-POSTGRES_USER=pgparaboladmin
-POSTGRES_DB=parabol-saas
-POSTGRES_HOST=localhost
-POSTGRES_PORT=5432
-POSTGRES_POOL_SIZE=5
-POSTGRES_SSL_REJECT_UNAUTHORIZED=false
-POSTGRES_SSL_DIR='/var/lib/postgresql'
-PROTO='http'
-REDIS_PASSWORD=''
-REDIS_URL='redis://localhost:6379'
-REDIS_TLS_CERT_FILE=./certs/redis.crt
-REDIS_TLS_KEY_FILE=./certs/redis.key
-REDIS_TLS_CA_FILE=./certs/redisCA.crt
-REDIS_TLS_REJECT_UNAUTHORIZED='false'
-RETHINKDB_URL='rethinkdb://localhost:28015/actionDevelopment'
-RETHINKDB_SSL='false'
-SENTRY_AUTH_TOKEN='key_SENTRY_AUTH_TOKEN'
-# SENTRY_DSN='key_SENTRY_DSN'
-# Cluster node number 0 - 1023
-SERVER_ID='1'
-SLACK_CLIENT_ID='key_SLACK_CLIENT_ID'
-SLACK_CLIENT_SECRET='key_SLACK_CLIENT_SECRET'
-SOCKET_PORT='3001'
-# https://stripe.com/docs/keys
 STRIPE_SECRET_KEY='sk_test_4eC39HqLyjWDarjtT1zdp7dc'
 STRIPE_PUBLISHABLE_KEY='pk_test_TYooMQauvdEDq54NiTphI7jx'
 STRIPE_WEBHOOK_SECRET='sk_test_4eC39HqLyjWDarjtT1zdp7dc'
+
+# DEVELOPER VARIABLES
+CI='true'
+PGADMIN_DEFAULT_EMAIL='pgadmin4@pgadmin.org'
+PGADMIN_DEFAULT_PASSWORD='admin'
 ULTRAHOOK_API_KEY='key_ULTRAHOOK_API_KEY'

.github/ISSUE_TEMPLATE/release_test.md

@@ -31,6 +31,8 @@ Run through this list at least once at [staging](https://action.parabol.fun):
 - [ ] Created a 2nd team
 - [ ] Created a 2nd organization
 - [ ] Upgraded to Team (Credit card number: `4242 4242 4242 4242`, expiration date: any month in the future, CVC: `123`)
+- [ ] Upgraded to Team with a 3D Secure card (Credit card number: `4000 0000 0000 3063`, expiration date: any month in the future, CVC: `123`)
+- [ ] Tried and failed to upgrade with a card with insufficient funds (Credit card number: `4000 0000 0000 9995`, expiration date: any month in the future, CVC: `123`). Error feedback is shown in the UI.
 - [ ] Smoke tested the app on a mobile device (e.g. navigate between views, smoke test a Retro meeting, etc.)
 - [ ] Test previously existed meetings to make sure that existing data is not corrupted
 - [ ] Create a task in the discussion thread of a meeting

.github/reviewers.yml

@@ -17,6 +17,7 @@ reviewers:
     devops:
       - rafaelromcar-parabol
       - adaniels-parabol
+      - dbumblis-parabol
     none:
 
   per_author:
@@ -39,6 +40,8 @@ files:
     - data
   "**/analytics/**":
     - data
+  ".env.example":
+    - devops
 options:
   ignore_draft: true
   ignored_keywords:

.github/workflows/assign_reviewers.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Request review based on files changes and/or groups the author belongs to
-        uses: necojackarc/auto-request-review@v0.7.0
+        uses: necojackarc/auto-request-review@v0.11.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           config: .github/reviewers.yml # Config file location override

.github/workflows/migration-order.yml

@@ -0,0 +1,39 @@
+name: Migration Order
+on:
+  pull_request:
+    paths:
+      - packages/server/postgres/migrations/*.ts
+jobs:
+  migration-order:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout master
+        uses: actions/checkout@v3
+        with:
+          ref: master
+
+      - name: Get newest migration on master
+        run: |
+          MAX_OLD_MIGRATION=$(ls packages/server/postgres/migrations | tail -n 1)
+          echo MAX_OLD_MIGRATION=$MAX_OLD_MIGRATION >> $GITHUB_ENV
+
+      - name: Checkout PR
+        uses: actions/checkout@v3
+
+      - name: Get new migrations
+        id: new-migrations
+        uses: tj-actions/changed-files@v41
+        with:
+          files: packages/server/postgres/migrations/*.ts
+
+      - name: Check migration conflicts
+        run: |
+          for file in ${{ steps.new-migrations.outputs.added_files }}; do
+            FILE_NAME=$(basename $file)
+            if [[ "$FILE_NAME" < "${{ env.MAX_OLD_MIGRATION }}" ]]; then
+              echo "$FILE_NAME predates ${{ env.MAX_OLD_MIGRATION}}. Please rename it"
+              exit 1
+            else
+              echo "$FILE_NAME does not conflict with existing migrations on master"
+            fi
+          done

.github/workflows/release-please.yml

@@ -2,7 +2,7 @@ on:
   push:
     branches:
       - master
-      - hotfix-*
+      - hotfix**
 name: release-please
 jobs:
   release-please:
@@ -19,4 +19,4 @@ jobs:
           command: manifest
           default-branch: ${{ github.ref_name}}
           release-type: node
-          token: ${{ steps.generate_token.outputs.token }}
+          token: ${{ steps.generate_token.outputs.token }}

.github/workflows/release-to-prod.yml

@@ -0,0 +1,32 @@
+name: Release to Production
+on:
+  pull_request:
+    branches:
+      - production
+    types: [closed]
+jobs:
+  release:
+    if: ${{ github.event.pull_request.merged == true }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: "read"
+      id-token: "write"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Push to Production Server
+        run: |
+          JOB_ID=$(echo ${{ github.event.pull_request.body}} | perl -ne 'print "$1\n" and exit if m/^Production Job Id:\s(\w+)/;')
+          echo "JOB_ID=${JOB_ID}" >> $GITHUB_ENV
+          curl "https://gitlab.com/api/v4/projects/${{ vars.GITLAB_PROJECT_ID }}/jobs/$JOB_ID/play" \
+            --request POST \
+            --header 'PRIVATE-TOKEN: ${{ secrets.GITLAB_API_TOKEN }}'
+      - name: Poll Production Release
+        uses: artiz/poll-endpoint@1.0.2
+        with:
+          url: https://gitlab.com/api/v4/projects/${{ vars.GITLAB_PROJECT_ID }}/jobs/${{ env.JOB_ID }}
+          method: GET
+          expect-status: 200
+          expect-response-regex: '"status":"success"'
+          timeout: 120000
+          interval: 3000