updated the share version

ACS-11700 - CVE Vulnerabilities in Alfresco SDK
ACS-11627 Migrate alfresco-sdk to GHAS (#747 )
2026-09-16 18:13:23 +00:00 · 2026-05-19 13:59:31 +05:30 · 2026-05-18 13:39:14 +05:30 · 2026-05-14 05:25:41 +05:30 · 2026-03-26 14:17:15 +01:00 · 2026-03-12 17:51:45 +05:30
4 changed files with 87 additions and 11 deletions
@@ -0,0 +1,48 @@
+version: 2
+registries:
+  maven-alfresco-internal:
+    type: maven-repository
+    url: https://artifacts.alfresco.com/nexus/content/groups/internal
+    username: ${{secrets.NEXUS_USERNAME}}
+    password: ${{secrets.NEXUS_PASSWORD}}
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    registries:
+      - maven-alfresco-internal
+    schedule:
+      interval: "daily"
+      time: "22:00"
+      timezone: "Europe/London"
+    open-pull-requests-limit: 10
+    allow:
+      - dependency-type: "direct"
+    ignore:
+      - dependency-name: "org.alfresco.maven:*"
+      - dependency-name: "org.alfresco.maven.plugin:*"
+      - dependency-name: "org.alfresco.maven.archetype:*"
+    groups:
+      spring:
+        patterns:
+          - "org.springframework*"
+      alfresco:
+        patterns:
+          - "org.alfresco*"
+      apache-maven:
+        patterns:
+          - "org.apache.maven*"
+      commons:
+        patterns:
+          - "commons-*"
+          - "org.apache.commons*"
+      slf4j:
+        patterns:
+          - "org.slf4j*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
@@ -19,7 +19,6 @@ env:
  MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
  MAVEN_CENTRAL_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
  MAVEN_CENTRAL_PASSWORD: ${{ secrets.OSS_SONATYPE_PASSWORD }}
-  GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
  GITHUB_ACTIONS_DEPLOY_TIMEOUT: 90

 jobs:
@@ -35,7 +34,7 @@ jobs:
      github.ref_name == 'master' ||
      github.event_name == 'pull_request'
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
@@ -56,7 +55,7 @@ jobs:
      MAVEN_CLI_OPTS: >
        -B -q -e -fae -V -DinstallAtEnd=true -U
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
          java-version: ${{ env.JAVA_VERSION }}
@@ -136,18 +135,18 @@ jobs:
            java-version: 11
            suite: -Pcommunity-74-tests
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
          java-version: ${{ matrix.java-version }}
      - name: "Login to Docker Hub"
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
      - name: "Login to Quay.io"
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
        with:
          registry: quay.io
          username: ${{ secrets.QUAY_USERNAME }}
@@ -164,7 +163,7 @@ jobs:
    outputs:
        is_ga: ${{ steps.publish_version.outputs.is_ga }}
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
@@ -187,8 +186,10 @@ jobs:
    needs: [tests, check_version]
    if: >
      contains(github.event.head_commit.message, '[publish]') && needs.check_version.outputs.is_ga == 'true'
+    env:
+      GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
@@ -0,0 +1,27 @@
+name: "Load Dependency Graph"
+
+on:
+  push:
+    branches:
+      - "master"
+  schedule:
+    - cron: '0 6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  scan-dependencies:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v17.0.0
+        with:
+          java-version: '21'
+          maven-version: '3.9.9'
+          maven-args: -Dscopes=compile,runtime
+          maven-username: ${{ secrets.NEXUS_USERNAME }}
+          maven-password: ${{ secrets.NEXUS_PASSWORD }}
+          maven-settings-path: ".ci.settings.xml"
@@ -56,9 +56,9 @@
        <alfresco.sdk.tests.exclude>*/*-enterprise*/*</alfresco.sdk.tests.exclude>

        <alfresco.bomDependency.artifactId>acs-community-packaging</alfresco.bomDependency.artifactId>
-        <alfresco.platform.version>26.1.0</alfresco.platform.version>
+        <alfresco.platform.version>26.2.0-A.14</alfresco.platform.version>
        <alfresco.platform.docker.user>alfresco</alfresco.platform.docker.user>
-        <alfresco.share.docker.version>26.1.0</alfresco.share.docker.version>
+        <alfresco.share.docker.version>26.2.0-A.14</alfresco.share.docker.version>
        <!--
             The following value is now obtained by looking at the
             - alfresco-community-share.version (eg. https://github.com/Alfresco/acs-community-packaging/blob/25.1.0/pom.xml#L17)
@@ -66,7 +66,7 @@
             - alfresco-enterprise-share.version (eg. https://github.com/Alfresco/acs-packaging/blob/25.1.0/pom.xml#L18)
             for the GitHub Tag related to the above Docker version.
         -->
-        <alfresco.share.version>26.1.0.45</alfresco.share.version>
+        <alfresco.share.version>26.2.0.28</alfresco.share.version>
        <alfresco.platform.docker.image>alfresco/alfresco-content-repository-community</alfresco.platform.docker.image>
        <alfresco.share.docker.image>alfresco/alfresco-share</alfresco.share.docker.image>
        <keystore.settings>
Author	SHA1	Message	Date
Arindam Roy	541153da5c	updated the share version	2026-05-19 13:59:31 +05:30
Arindam Roy	cfe67cb7e4	ACS-11700 - CVE Vulnerabilities in Alfresco SDK	2026-05-18 13:39:14 +05:30
Satyam Sah	05cc667b51	ACS-11627 Migrate alfresco-sdk to GHAS (#747 )	2026-05-14 05:25:41 +05:30
Copilotandgionn	6c749e8d20	Scope GPG_SIGNING_PASSPHRASE to publish job and SHA-pin third-party actions (#744 ) Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: gionn <71768+gionn@users.noreply.github.com>	2026-03-26 14:17:15 +01:00
Vivek Kumar	801cb5075b	[ACS-11188]: [publish] Release GA Alfresco SDK 4.15.0 (#742 )	2026-03-12 17:51:45 +05:30