Merge pull request #2364 from alan-turing-institute/release-v5.3.0

Release v5.3.0

.github/resources/AdGuardHome.mustache.config.json

@@ -0,0 +1,9 @@
+{
+    "admin_username": "admin",
+    "admin_password_encrypted": "password",
+    "allow_workspace_internet": true,
+    "filter_allow": [
+        "clamav.net",
+        "current.cvd.clamav.net"
+    ]
+}

.github/scripts/expand_mustache.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+echo '{"array": ["dummy"], "variable": "dummy"}' > .mustache_config.json
+
+while read -r yamlfile; do
+
+    filename=$(basename -- "$yamlfile")
+    filename="${filename%.*}"
+    test_config=".github/resources/$filename.config.json"
+
+    if [ -e "$test_config" ]; then
+        cp "$yamlfile" expanded.tmp
+        mustache "$test_config" expanded.tmp > "$yamlfile"
+    else
+        # replace mustache arrays
+        sed "s|{{\([/#]\)[^}]*}}|{{\1array}}|g" "$yamlfile" > expanded.tmp
+        # replace mustache variables
+        sed -i "s|{{[^#/].\{1,\}}}|{{variable}}|g" expanded.tmp
+        # perform mustache expansion overwriting original file
+        mustache .mustache_config.json expanded.tmp > "$yamlfile"
+    fi
+
+done < <(find . -name "*.yml" -o -name "*.yaml")
+
+rm expanded.tmp

.github/workflows/build_documentation.yaml

@@ -46,7 +46,7 @@ jobs:
         run: hatch run docs:build
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v2.1.0
+        uses: lycheeverse/lychee-action@v2.2.0
         with:
           args: --config='./.lychee.toml' --no-progress './docs/build/html/**/*.html'
           fail: true  # fail on broken links

.github/workflows/dependabot_amend.yaml

@@ -40,7 +40,7 @@ jobs:
           hatch -e test run true
 
       - name: Commit changes
-        uses: stefanzweifel/git-auto-commit-action@v5.0.1
+        uses: stefanzweifel/git-auto-commit-action@v5.1.0
         with:
           commit_message: "[dependabot skip] :wrench: Update Python requirements files"
           branch: ${{ github.head_ref }}

.github/workflows/lint_code.yaml

@@ -98,15 +98,7 @@ jobs:
         run: |
           npm install -g mustache
       - name: Expand mustache templates
-        shell: bash
-        run: |
-          echo '{"array": ["dummy"], "variable": "dummy"}' > .mustache_config.json
-          for yamlfile in $(find . -name "*.yml" -o -name "*.yaml"); do
-            sed "s|{{\([/#]\)[^}]*}}|{{\1array}}|g" $yamlfile > expanded.tmp  # replace mustache arrays
-            sed -i "s|{{[^#/].\{1,\}}}|{{variable}}|g" expanded.tmp           # replace mustache variables
-            mustache .mustache_config.json expanded.tmp > $yamlfile           # perform mustache expansion overwriting original file
-          done
-          rm expanded.tmp
+        run: .github/scripts/expand_mustache.sh
       - name: Lint YAML
         uses: karancode/yamllint-github-action@v3.0.0
         with:

.github/workflows/test_code.yaml

@@ -55,7 +55,7 @@ jobs:
         shell: bash
         run: npm install -g markdown-link-check
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v2.1.0
+        uses: lycheeverse/lychee-action@v2.2.0
         with:
           args: --config='./.lychee.toml' --no-progress --offline '**/*.md' --exclude-path './docs'
           fail: true  # fail on broken links

.github/workflows/update_docker_versions.yaml

@@ -40,7 +40,7 @@ jobs:
       - name: Create pull request
         if: ${{ ! env.ACT }}
         id: pull-request
-        uses: peter-evans/create-pull-request@v7.0.5
+        uses: peter-evans/create-pull-request@v7.0.6
         with:
           author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
           base: develop