DPBI-523: Merge upstream 1.40.2

.github/actions/gcloud/action.yml

@@ -0,0 +1,18 @@
+name: GCloud
+description: Authenticate to Google Cloud and install SDK
+
+inputs:
+  credentials_json:
+    required: true
+    description: The Google Cloud JSON service account key to use for authentication
+
+runs:
+  using: composite
+  steps:
+    - name: Authenticate to Google Cloud
+      uses: google-github-actions/auth@v1
+      with:
+        credentials_json: ${{ inputs.credentials_json }}
+
+    - name: Setup Cloud SDK
+      uses: google-github-actions/setup-gcloud@v1

.github/actions/setup/action.yml

@@ -0,0 +1,21 @@
+name: Setup
+description: Setup build
+
+inputs:
+  node-version:
+    required: true
+    default: '16'
+    description: Node version
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node.js ${{ inputs.node-version }}
+      uses: actions/setup-node@v3
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: 'npm'
+
+    - name: Install dependencies
+      shell: bash
+      run: npm ci

.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "bundler"
+    directory: "/docs"
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-name: "cypress"
+      - dependency-name: "plywood*"

.github/workflows/ci.yml

@@ -0,0 +1,73 @@
+name: CI
+
+on:
+  workflow_dispatch: ~
+  push:
+    branches:
+      - master
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ./.github/actions/setup
+      - run: npm run lint
+
+  unit-test:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: ['14', '16']
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ./.github/actions/setup
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm run build
+      - run: npm run test
+
+  e2e-test:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: ['14', '16']
+
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ./.github/actions/setup
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm run build
+      - run: npm run e2e
+
+  required-checks:
+    needs: [lint, unit-test, e2e-test]
+    runs-on: ubuntu-latest
+    steps:
+      - run: exit 0
+
+  deploy:
+    needs: required-checks
+    uses: ./.github/workflows/deploy.yml
+    secrets: inherit
+
+  reports:
+    needs: required-checks
+    uses: ./.github/workflows/reports.yml
+    secrets: inherit
+
+  all-checks:
+    needs: [required-checks, deploy, reports]
+    runs-on: ubuntu-latest
+    steps:
+      - run: exit 0

.github/workflows/dependabot.yml

@@ -0,0 +1,16 @@
+name: Dependabot
+
+on: pull_request
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+
+    env:
+      PR_URL: ${{ github.event.pull_request.html_url }}
+      GITHUB_TOKEN: ${{ secrets.DEPENDABOT }}
+
+    steps:
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --squash "$PR_URL"

.github/workflows/deploy.yml

@@ -1,51 +1,73 @@
 name: Deploy
 
 on:
-  push:
-    branches:
-      - master
+  workflow_dispatch: ~
+  workflow_call: ~
 
 jobs:
   deploy:
-
     runs-on: ubuntu-latest
 
+    # disable for PRs from forks
+    if: ${{ !github.event.pull_request.head.repo.fork }}
+
     env:
-      IMAGE_NAME: eu.gcr.io/${{ secrets.GCP_PROJECT_ID }}/turnilo
+      TAG_NAME: ${{ github.head_ref || 'latest' }}
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
-      - name: Authenticate on GCP
-        uses: google-github-actions/setup-gcloud@master
+      - name: Setup GCloud
+        uses: ./.github/actions/gcloud
         with:
-          project_id: ${{ secrets.GCP_PROJECT_ID }}
-          service_account_key: ${{ secrets.GCP_SA_KEY }}
-          export_default_credentials: true
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+
+      - name: Set Docker image name
+        run: echo "IMAGE_NAME=eu.gcr.io/$GCP_PROJECT/turnilo" >> $GITHUB_ENV
 
       - name: Configure Docker
         run: gcloud auth configure-docker --quiet
 
       - name: Build Docker image
-        run: docker build . -t $IMAGE_NAME:latest
+        run: docker build . -t $IMAGE_NAME:${TAG_NAME//[^a-z0-9]/-}
 
       - name: Push Docker image
-        run: docker push $IMAGE_NAME:latest
+        run: docker push $IMAGE_NAME:${TAG_NAME//[^a-z0-9]/-}
 
-      - name: Deploy on GCP
+      - name: Deploy app
         run: |
-          gcloud run deploy turnilo \
-            --image $IMAGE_NAME:latest \
+          gcloud run deploy turnilo-${TAG_NAME//[^a-z0-9]/-} \
+            --image $IMAGE_NAME:${TAG_NAME//[^a-z0-9]/-} \
             --region europe-west1 \
             --platform managed \
             --allow-unauthenticated \
             --quiet \
             --port 9090 \
             --cpu 1 --memory 1G --max-instances 1 --concurrency 80 \
-            --args="--examples"
+            --args="run-examples"
+
+      - name: Get app URL
+        if: ${{ github.head_ref }}
+        id: app-url
+        run: |
+          echo ::set-output name=app_url::$(gcloud run services describe turnilo-${TAG_NAME//[^a-z0-9]/-} --region europe-west1 --format 'value(status.url)')
+
+      - name: Print app URL
+        if: ${{ github.head_ref }}
+        uses: actions/github-script@v6
+        env:
+          APP_URL: ${{ steps.app-url.outputs.app_url }}
+        with:
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: ':white_check_mark: Deployed successfully to: ' + process.env.APP_URL
+            })
 
-      - name: Delete previous Docker image
+      - name: Delete previous Docker image(s)
         run: |
           gcloud container images list-tags $IMAGE_NAME --filter='-tags:*' --format='get(digest)' --limit=unlimited | \
           xargs -I {digest} gcloud container images delete "$IMAGE_NAME@{digest}" --quiet

.github/workflows/release-beta.yml

@@ -5,10 +5,10 @@ on:
     inputs:
       increment:
         description: 'Defines which part of a SemVer should be increased during the release process, e.g "major", "minor", "patch" or empty for consecutive release'
+        required: false
 
 jobs:
   build:
-
     runs-on: ubuntu-latest
 
     steps:
@@ -20,42 +20,19 @@ jobs:
           # release must bypass branch protection rules, built-in GITHUB_TOKEN doesn't work
           token: ${{ secrets.RELEASE_GH_TOKEN }}
 
-      - name: Use Node.js
-        uses: actions/setup-node@v1
-        with:
-          node-version: '14.x'
-
-      - name: Cache Node.js modules
-        uses: actions/cache@v2
-        with:
-          path: ~/.npm
-          key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.OS }}-node-
-            ${{ runner.OS }}-
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Lint
-        run: npm run lint
-
-      - name: Build
-        run: npm run build
-
-      - name: Unit Test
-        run: npm run test
-
-      - name: E2E Test
-        run: npm run e2e
+      - uses: ./.github/actions/setup
+      - run: npm run lint
+      - run: npm run build
+      - run: npm run test
+      - run: npm run e2e
 
       - name: Configure GIT
         run: |
           git config user.name "${GITHUB_ACTOR}"
           git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
 
       - name: Install release-it
-        run: npm install -g release-it@13.7.1
+        run: npm install -g release-it@14.6.1
 
       - name: Beta Release
         env: