Trask Stalnaker
a7dc2ef5a6
Fix CodeQL build ( #7991 )
...
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2023-03-07 10:14:26 +02:00
Lauri Tulmin
160ce88aca
Set smoke test image tag before workflow branches ( #7979 )
...
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7969
2023-03-07 08:56:36 +02:00
Trask Stalnaker
d27dd892ce
Don't fail-fast for testLatestDeps ( #7992 )
...
(similar to all of the other matrix builds)
2023-03-07 08:55:01 +02:00
Trask Stalnaker
ac709f4957
Update to Gradle 7.6.1 ( #7910 )
...
Co-authored-by: Lauri Tulmin <ltulmin@splunk.com>
2023-03-01 11:27:26 -08:00
Trask Stalnaker
6cb00d3de0
Fix sdk version in release notes ( #7880 )
2023-02-23 12:38:54 +01:00
dependabot[bot]
322b15fea7
Bump gradle/wrapper-validation-action from 1.0.5 to 1.0.6 ( #7861 )
...
Bumps
[gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action )
from 1.0.5 to 1.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/wrapper-validation-action/releases ">gradle/wrapper-validation-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.0.6</h2>
<h1>Gradle Wrapper Validation</h1>
<ul>
<li>Security vulnerability: <a
href="959bfac6da
">Bump
json5 from 1.0.1 to 1.0.2</a></li>
<li>Security vulnerability: <a
href="ffa46e5c87
">Bump
qs from 6.10.1 to 6.11.0</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8d49e559aa
"><code>8d49e55</code></a>
Use Node 16 for CI workflow</li>
<li><a
href="553793aaea
"><code>553793a</code></a>
Build outputs</li>
<li><a
href="79fc16cf9b
"><code>79fc16c</code></a>
Add name to package_lock</li>
<li><a
href="bc61a16645
"><code>bc61a16</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/68 ">#68</a>
from TWiStErRob/patch-2</li>
<li><a
href="64a4451e28
"><code>64a4451</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/71 ">#71</a>
from gradle/dependabot/npm_and_yarn/json5-1.0.2</li>
<li><a
href="664dcf59c9
"><code>664dcf5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/70 ">#70</a>
from gradle/dependabot/npm_and_yarn/qs-6.11.0</li>
<li><a
href="dabb1b52d3
"><code>dabb1b5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/73 ">#73</a>
from obfusk/patch-2</li>
<li><a
href="777fab02ef
"><code>777fab0</code></a>
fix typo: diffoscope not DiffScope</li>
<li><a
href="6c56157398
"><code>6c56157</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/gradle/wrapper-validation-action/issues/72 ">#72</a>
from gradle/no/checkout-3</li>
<li><a
href="a63eded8e0
"><code>a63eded</code></a>
Update workflows to v3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/wrapper-validation-action/compare/v1.0.5...v1.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-21 09:51:56 +02:00
Lauri Tulmin
0351cfbdb5
Fix vaadin 14 test failures ( #7856 )
...
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7859
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7855
Resolves
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7854
Apparently default node version was change to 18 for github actions. I
wasn't able to reproduce the failure, nor find anything in the test
output that would help to pinpoint the exact cause of the failure.
Changing the node version to 16 seems to get vaadin 14 tests passing
again.
2023-02-20 11:58:59 +01:00
Trask Stalnaker
ee722f9a4a
Fix auto-update action ( #7804 )
...
so it doesn't keep trying to open new PRs while existing PR is open
2023-02-11 12:38:40 -08:00
Trask Stalnaker
2d776af318
Auto-update OTel SDK ( #7633 )
...
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2023-02-10 21:34:47 +00:00
Trask Stalnaker
b72e28a1a8
Use new org secret ( #7759 )
2023-02-08 08:34:17 +01:00
dependabot[bot]
0f4322ef19
Bump docker/build-push-action from 3 to 4 ( #7681 )
2023-01-30 21:26:35 -08:00
Trask Stalnaker
fc81be47e5
Fix job name ( #7654 )
2023-01-25 10:13:00 -08:00
Trask Stalnaker
90209fe53b
Add labels for running openj9 and windows tests during PR builds ( #7647 )
...
Bringing back #6314 and extending to openj9
2023-01-25 09:53:54 -08:00
Trask Stalnaker
8b0880a8e3
Partition testLatestDeps to speed up CI ( #7649 )
2023-01-25 09:51:46 -08:00
Trask Stalnaker
e869bd879b
Parallelize tests across multiple GitHub Actions jobs ( #7639 )
...
The build takes ~2 hours when there are changes to core modules that
force re-running of all tests.
Ran into the long test times (again) in #7632 .
This also affects release times since the version bump PR build takes 2
hours to run, and then another 2 hours to run release (or wait 2 hours
for CI build to run and update gradle cache).
2023-01-24 12:22:42 -08:00
Trask Stalnaker
82ea80aba7
Skip openj9 in PR build ( #7641 )
...
to help offset new parallelization in #7639
2023-01-24 12:22:24 -08:00
Trask Stalnaker
df93f3b1ee
Update misspell link ( #7612 )
...
see
https://github.com/open-telemetry/opentelemetry-java/pull/5118/files#r1070170588
2023-01-19 10:44:21 +01:00
dependabot[bot]
6b0cfa5a0c
Bump actions/stale from 6 to 7 ( #7609 )
2023-01-18 13:54:26 -08:00
Trask Stalnaker
f33a1b73ea
Add stale workflow ( #7605 )
...
This is the same workflow I added in the community repo recently.
2023-01-18 12:32:07 -08:00
Trask Stalnaker
3786acb18a
Refine required checks ( #7411 )
...
Adds these are required checks for PRs (except on release branches where
they are still not required):
* shell-script-check
* markdown-lint-check
* misspell-check
This is still NOT a required check:
* markdown-link-check
Also in this PR:
* Avoids running `markdown-link-check` at all on release branches since
it's generally expected to be red due to pinning the release download
link before tagging
2022-12-14 07:57:56 -08:00
Trask Stalnaker
a4740264c2
Use windows-latest ( #7299 )
2022-11-29 07:54:03 -08:00
Trask Stalnaker
db48ba147a
Add some comment-driven automations for PRs ( #7321 )
...
Available commands:
* `@opentelemetrybot spotless` - runs `./gradlew spotlessApply`
* `@opentelemetrybot license` - runs `./gradlew generateLicenseReport`
* `@opentelemetrybot apidiff` - runs `./gradlew jApiCmp`
* `@opentelemetrybot update` - updates branch with merge commit
* `@opentelemetrybot rerun` - re-runs failed checks (NOT IMPLEMENTED
YET)
* `@opentelemetrybot help` - displays available commands
see #7290
2022-11-29 07:47:26 -08:00
Trask Stalnaker
0e4c66a428
Update images to Windows 2022 ( #7300 )
...
preliminary step for #7299
2022-11-27 09:50:08 -08:00
Vasi Vasireddy
27805615aa
Update the usage of set-output command in GH actions ( #7260 )
...
This PR updates the usage of set-output command in GH actions.
Reference :
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
CHANGELOG entry is not required
2022-11-21 11:29:57 -08:00
Trask Stalnaker
7ccf0bd655
Update doc PR now that annotations are stable ( #7219 )
...
Co-authored-by: Mateusz Rzeszutek <mrzeszutek@splunk.com>
2022-11-18 17:19:59 +00:00
Trask Stalnaker
b0fb249a65
Post release updates ( #7213 )
...
fyi I added topic for SIG meeting in 2 weeks b/c I'd like to automate
this but have some questions:
* What is the purpose of keeping around old diffs?
* If we need them, what about not including the empty ones?
* Do we diff minor versions against patches (if any), or only against
last minor?
2022-11-18 10:55:57 +01:00
Aaron Ai
2d7395c44b
Introduce markdown lint check ( #7175 )
...
Fixes #7129
2022-11-16 20:48:42 -08:00
Trask Stalnaker
1e6fb0088a
Don't open issue on re-runs ( #7186 )
...
to avoid confusions like
https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/7181#issuecomment-1315828235
2022-11-16 09:29:37 +01:00
Trask Stalnaker
19ce0f87b9
GitHub action sync ( #7150 )
2022-11-15 09:35:30 -08:00
Trask Stalnaker
5a88cd7462
Fix sporadically failing uploads ( #7173 )
...
I've seen CI fail several times lately on something like
```
An error was encountered when uploading deadlock-detector-test-19-hotspot
```
e.g.
https://github.com/open-telemetry/opentelemetry-java-instrumentation/actions/runs/3466878562/jobs/5791191014
when otherwise the job would have succeeded.
2022-11-15 16:23:48 +01:00
Trask Stalnaker
6bc43450df
Add shell check ( #7125 )
...
Motivated by @mateuszrzeszutek's
https://github.com/signalfx/splunk-otel-java/pull/992
2022-11-11 14:58:05 -08:00
Trask Stalnaker
d9c4784952
Stabilize annotations ( #7046 )
...
Resolves #6494
2022-11-08 08:46:11 -08:00
Trask Stalnaker
1a91fced2a
Remove -contrib and -docs workflows ( #7051 )
...
No longer needed because of
* https://github.com/open-telemetry/opentelemetry-java-contrib/pull/568 ,
and
* https://github.com/open-telemetry/opentelemetry-java-docs/pull/60
2022-11-08 08:45:55 -08:00
Trask Stalnaker
cd95517ddc
Add OWASP dependency check ( #6978 )
...
See comment in the github action that explains why I think this is
helpful:
> the benefit of this over dependabot is that this also analyzes
transitive dependencies
> while dependabot (at least currently) only analyzes top-level
dependencies
2022-10-27 19:21:38 -07:00
Trask Stalnaker
2642c116bd
Fix play smoke-test image publishing ( #6988 )
...
Resolves #6983
2022-10-27 13:30:52 +03:00
Trask Stalnaker
28459d890c
Use component owners extension matching ( #6966 )
...
I have submitted a PR to add support for this to the component-owners
action: https://github.com/dyladan/component-owners/pull/14 , but we can
use my fork for now.
2022-10-26 11:23:02 -07:00
Trask Stalnaker
0575ab4fe3
Remove usage of deprecated docker image ( #6969 )
2022-10-26 11:22:34 -07:00
Trask Stalnaker
2778062528
Add gradle wrapper validation to required-status-checks ( #6976 )
...
So we can't accidentally merge a PR with this check failing.
Currently built on top of #6975
2022-10-26 11:16:20 -07:00
Trask Stalnaker
0ba68177e3
More reuse in github actions ( #6975 )
2022-10-26 09:09:48 -07:00
dependabot[bot]
89b173c5ae
Bump gradle/wrapper-validation-action from 1.0.4 to 1.0.5 ( #6970 )
2022-10-25 14:07:27 -07:00
Trask Stalnaker
b7602c746b
Remove CodeQL workaround ( #6949 )
...
same as
https://github.com/open-telemetry/opentelemetry-java-contrib/pull/556
2022-10-23 09:29:28 -07:00
Trask Stalnaker
034cac3f76
Fix comment ( #6926 )
...
First I tried to update to `20`, but looks like there are no ea releases
available, I think I "mispoke" in that comment, so fixed it.
2022-10-20 14:01:00 -07:00
Trask Stalnaker
bac8b0c8b0
Don't assign PRs to component owners ( #6918 )
...
It will still assign @theletterf as a reviewer
2022-10-19 13:42:22 -07:00
Trask Stalnaker
9621ea08cf
Update repo settings ( #6862 )
...
it seems that github recently tightened up the branch protection
restrictions (in a way that makes more sense than the prior behavior)
2022-10-13 20:07:36 -07:00
Trask Stalnaker
63302ccd3e
Split out license check as separate github action ( #6863 )
...
I've been having a bit of trouble with the license check in our distro
repo, and I think it's helpful for it to be a separate github action
(also for visibility).
2022-10-13 19:09:22 -07:00
Trask Stalnaker
b1bc39db59
Fix website PR ( #6869 )
...
Need to manually run the action after merging.
2022-10-13 07:32:30 -07:00
Trask Stalnaker
c5cd8d67a3
Fix create website pull request ( #6852 )
2022-10-11 18:07:56 -07:00
Mateusz Rzeszutek
709ab76dd2
Add @theletterf as docs codeowner ( #6830 )
...
cc @theletterf
2022-10-07 12:08:34 -07:00
Trask Stalnaker
06b6f0a2f2
Split out separate spotless CI check ( #6743 )
...
To make it clearer when the only problem with a PR is spotless (and may
follow-up with a comment-driven automation to apply spotless to a PR)
2022-10-05 17:17:01 -07:00
Trask Stalnaker
93a578b8db
Enable testLatestDeps in PRs ( #6744 )
...
but do not make it a required check.
The reason for my change of mind here is:
When new library versions are released which break testLatestDeps, the
quick fix is to temporarily limit the upper bound, but it's not clear
what the quick fix is if we end up merging in a change which breaks
testLatestDeps (short of reverting the change, which then potentially
requires reengaging the contributor after they have moved on from the
PR).
2022-09-29 10:59:26 -07:00