[ACS-12085] [release] Alfresco SDK 4.17.0-A2 alpha (#769)

.github/release-versions.yml

@@ -0,0 +1,7 @@
+env:
+  global:
+    # Both variables are required to be set before the release process starts.
+    # As the release is triggered by a commit message with "[release]" keyword,
+    # setting these variables to new values can be done in the same commit and will indicate the release and the dev versions in it.
+    - RELEASE_VERSION=4.17.0-A2
+    - DEVELOPMENT_VERSION=4.17.0-A3-SNAPSHOT

.github/workflows/ci.yml

@@ -13,6 +13,9 @@ on:
       - feature/**
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 env:
   JAVA_VERSION: '21'
   MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
@@ -20,12 +23,13 @@ env:
   MAVEN_CENTRAL_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
   MAVEN_CENTRAL_PASSWORD: ${{ secrets.OSS_SONATYPE_PASSWORD }}
   GITHUB_ACTIONS_DEPLOY_TIMEOUT: 90
+  # Note: RELEASE_VERSION and DEVELOPMENT_VERSION are loaded from .github/release-versions.yml
 
 jobs:
   pre_commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v18.15.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v15.7.1
 
   build:
     name: "Build application"
@@ -36,8 +40,8 @@ jobs:
       MAVEN_CLI_OPTS: >
         -B -q -e -fae -V -DinstallAtEnd=true -U
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.15.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
         with:
           java-version: ${{ env.JAVA_VERSION }}
       - name: "Build"
@@ -119,18 +123,18 @@ jobs:
             java-version: 11
             suite: -Pcommunity-74-tests
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.15.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.15.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
         with:
           java-version: ${{ matrix.java-version }}
       - name: "Login to Docker Hub"
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: "Login to Quay.io"
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
@@ -138,18 +142,71 @@ jobs:
       - name: "Build"
         run: mvn clean install -B ${{ matrix.suite }}
 
+  release:
+    name: "Release"
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    needs: [tests]
+    outputs:
+      release_tag: ${{ steps.release_meta.outputs.release_tag }}
+    env:
+      MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
+      MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+    if: >
+      needs.tests.result == 'success' &&
+      (github.ref_name == 'master' || startsWith(github.ref_name, 'fix/') || startsWith(github.ref_name, 'feature/')) &&
+      !contains(github.event.head_commit.message, '[no release]') &&
+      github.event_name != 'pull_request' &&
+      contains(github.event.head_commit.message, '[release]')
+    steps:
+      - name: "Generate GitHub App token"
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          client-id: ${{ vars.GH_APP_ENGINEERING_CONTRIB_CLIENT_ID }}
+          private-key: ${{ secrets.GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY }}
+          permission-contents: write
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          fetch-depth: 0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/env-load-from-yaml@v18.21.2
+        with:
+          yml_path: .github/release-versions.yml
+      - name: "Export release metadata"
+        id: release_meta
+        run: echo "release_tag=${RELEASE_VERSION}" >> "$GITHUB_OUTPUT"
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.21.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v18.21.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.2
+        with:
+          java-version: ${{ env.JAVA_VERSION }}
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-release-slim@v18.21.2
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          release-version: ${{ env.RELEASE_VERSION }}
+          development-version: ${{ env.DEVELOPMENT_VERSION }}
+          maven-args: >
+            -DskipTests
+            -DbuildNumber=${{ github.run_number }}
+
   check_version:
     name: "Check version"
     runs-on: ubuntu-latest
-    needs: [tests]
+    needs: [tests, release]
     if: >
-      contains(github.event.head_commit.message, '[publish]')
+      needs.tests.result == 'success' &&
+      contains(github.event.head_commit.message, '[publish]') &&
+      (needs.release.result == 'success' || needs.release.result == 'skipped')
     outputs:
         is_ga: ${{ steps.publish_version.outputs.is_ga }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.15.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.15.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ needs.release.outputs.release_tag || github.ref }}
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
         with:
           java-version: ${{ env.JAVA_VERSION }}
       - name: "Check version"
@@ -167,15 +224,21 @@ jobs:
   publish:
     name: "Publish artifacts"
     runs-on: ubuntu-latest
-    needs: [tests, check_version]
+    needs: [tests, check_version, release]
     if: >
-      contains(github.event.head_commit.message, '[publish]') && needs.check_version.outputs.is_ga == 'true'
+      needs.tests.result == 'success' &&
+      contains(github.event.head_commit.message, '[publish]') &&
+      needs.check_version.result == 'success' &&
+      needs.check_version.outputs.is_ga == 'true' &&
+      (needs.release.result == 'success' || needs.release.result == 'skipped')
     env:
       GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.15.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.15.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ needs.release.outputs.release_tag || github.ref }}
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
         with:
           java-version: ${{ env.JAVA_VERSION }}
       - name: "Build"

.github/workflows/dependency-graph.yml

@@ -16,8 +16,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v18.15.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v17.0.0
         with:
           java-version: '21'
           maven-version: '3.9.9'

archetypes/alfresco-allinone-archetype/pom.xml

@@ -11,7 +11,7 @@
   <parent>
     <groupId>org.alfresco.maven</groupId>
     <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.17.0-A1</version>
+    <version>4.17.0-A2</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
 

archetypes/alfresco-platform-jar-archetype/pom.xml

@@ -12,7 +12,7 @@
   <parent>
     <groupId>org.alfresco.maven</groupId>
     <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.17.0-A1</version>
+    <version>4.17.0-A2</version>
     <relativePath>../../pom.xml</relativePath>
   </parent>
 

archetypes/alfresco-share-jar-archetype/pom.xml

@@ -14,7 +14,7 @@
     <parent>
         <groupId>org.alfresco.maven</groupId>
         <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.17.0-A1</version>
+        <version>4.17.0-A2</version>
         <relativePath>../../pom.xml</relativePath>
     </parent>
 

archetypes/archetypes-it/pom.xml

@@ -17,7 +17,7 @@
     <parent>
         <groupId>org.alfresco.maven</groupId>
         <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.17.0-A1</version>
+        <version>4.17.0-A2</version>
         <relativePath>../../pom.xml</relativePath>
     </parent>
 

modules/alfresco-rad/pom.xml

@@ -10,7 +10,7 @@
     <parent>
         <groupId>org.alfresco.maven</groupId>
         <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.17.0-A1</version>
+        <version>4.17.0-A2</version>
         <relativePath>../../pom.xml</relativePath>
     </parent>
 

plugins/alfresco-maven-plugin/pom.xml

@@ -8,7 +8,7 @@
     <parent>
         <groupId>org.alfresco.maven</groupId>
         <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.17.0-A1</version>
+        <version>4.17.0-A2</version>
         <relativePath>../../pom.xml</relativePath>
     </parent>
 

pom.xml

@@ -3,7 +3,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>org.alfresco.maven</groupId>
     <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.17.0-A1</version>
+    <version>4.17.0-A2</version>
     <name>Alfresco SDK</name>
     <description>This aggregator Project builds all modules required for the Alfresco SDK</description>
     <packaging>pom</packaging>