d.o Wishlist

GitHub++

Auto publishing of Documentation

The docs directory is automatically built and published.

• https://github.com/jsdrupal/js-client/tree/main/docs
• https://github.com/jsdrupal/js-client/blob/main/.github/workflows/publish-docs.yml
• https://github.com/jsdrupal/js-client/actions?query=workflow%3Apublish-docs
• https://jsdrupal.justa.fish/

Security

Automated Dependency Updates

Dependabot alerts track security vulnerabilities that apply to your repository’s dependencies. As alerts are created, they appear here and Pull Requests are automatically created.

Code Scanning Alerts

• CodeQL Analysis https://github.com/jsdrupal/js-client/security/code-scanning
• Other options https://github.com/jsdrupal/js-client/security/code-scanning/setup
• Security dependency checks on pull requests

On Push Security Check

❯ git push
Enumerating objects: 11, done.
Counting objects: 100% (11/11), done.
Delta compression using up to 8 threads
Compressing objects: 100% (6/6), done.
Writing objects: 100% (6/6), 1.21 KiB | 1.21 MiB/s, done.
Total 6 (delta 5), reused 0 (delta 0)
remote: Resolving deltas: 100% (5/5), completed with 5 local objects.
remote: 
remote: GitHub found 1 vulnerability on myorg/myproject's default branch (1 moderate). To find out more, visit:
remote:      https://github.com/myorg/myproject/network/alert/yarn.lock/highlight.js/open
remote: 
To github.com:myorg/myproject.git
   218fc5425..1a53f9644  no-ticket-fractal -> no-ticket-fractal

Project Management

• Kanban boards https://github.com/jsdrupal/js-client/projects
• Milestones
• Issue and User moderation
  • https://docs.github.com/en/free-pro-team@latest/github/building-a-strong-community/moderating-comments-and-conversations
  • https://docs.github.com/en/free-pro-team@latest/github/building-a-strong-community/managing-reported-content-in-your-organizations-repository
  • https://docs.github.com/en/free-pro-team@latest/github/building-a-strong-community/maintaining-your-safety-on-github
• Wiki (you're here!)
• Easy to use issue commenting e.g. image uploads
• Code owners for delegation https://docs.github.com/en/free-pro-team@latest/github/creating-cloning-and-archiving-repositories/about-code-owners

Development & Workflow

• Web IDE https://docs.github.com/en/free-pro-team@latest/github/developing-online-with-codespaces/about-codespaces
• Run workflows and build steps on tags/releases
• Encrypted secret management for repositories/CI
• Flexible e-mail and mobile app notifications, this is currently not available for d.o GitLab https://www.drupal.org/project/infrastructure/issues/3154890
• Comment reactions - this is really effective for heading towards consensus on issues
• Branch protection

Publishing to npm

When a release is created of the format v[Semantic version], a GitHub action triggers which publishes to npm. Look on the right hand side of https://github.com/jsdrupal/js-client to see the latest release.

• https://github.com/jsdrupal/js-client/blob/main/.github/workflows/publish-npm.yml
• https://github.com/jsdrupal/js-client/releases
• https://github.com/orgs/jsdrupal/packages?repo_name=js-client

Code annotations

This is really confusing on d.o currently e.g. https://www.drupal.org/project/drupal/issues/3167034 GitHub can also provide automated annotations - https://github.com/jsdrupal/js-client/pull/2/files

GitHub--

• Confidential issues (GitHub only has the ability to provide a security policy)
• Don't own our comment data

Existing Drupal.org Workflow Issues

• Make commit author radios work when merging merge requests, or remove them https://www.drupal.org/project/drupalorg/issues/3177220
• Update issue status on merge request activity? https://www.drupal.org/project/drupalorg/issues/3178267
• Bump issue’s updated timestamp on merge request activity https://www.drupal.org/project/drupalorg/issues/3184867
• If I spend time reviewing an issue with code comments in gitlab committers have to do work to give credit https://www.drupal.org/project/drupalorg/issues/3185250
• Credit given for merely creating a merge request https://www.drupal.org/project/drupalorg/issues/3185576
• RTBC retests and merge requests https://www.drupal.org/project/drupalorg/issues/3187193