Merge pull request #2 from SpineEventEngine/initial-content-with-config

Integrate the `config` Git module

.codecov.yml

@@ -0,0 +1,29 @@
+#
+# See default configuration here: https://github.com/codecov/support/blob/master/codecov.yml
+#
+# For more options see: https://gist.github.com/stevepeak/53bee7b2c326b24a9b4a
+#
+# Codecov documentation is available here: https://codecov.io/docs
+
+coverage:
+  ignore:
+    - "**/generated/**/*"
+    - "**/examples/**/*"
+    - "**/test/**/*"
+  status:
+    # https://docs.codecov.com/docs/github-checks#yaml-configuration-for-github-checks-and-codecov
+    patch: false
+    # https://docs.codecov.com/docs/commit-status
+    project:
+      default:
+        target: auto
+        threshold: 0.05%
+        base: auto
+        paths:
+          - "src"
+        if_ci_failed: error
+        informational: false
+        only_pulls: true
+
+comment:
+  layout: "header, diff, changes, uncovered"

.github/workflows/build-on-ubuntu.yml

@@ -1,22 +1,23 @@
-name: CI Build (under Ubuntu)
+name: Build under Ubuntu
 
-on:
-  pull_request:
-    branches:
-      - master
+on: push
 
 jobs:
   build:
-
+    name: Build under Ubuntu
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
-    - name: Set up JDK 11
-      uses: actions/setup-java@v4
-      with:
-        java-version: '11'
-        distribution: 'temurin'
+      - uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+
+      - uses: actions/setup-java@v4
+        with:
+          java-version: 11
+          distribution: zulu
+          cache: gradle
 
-    - name: Build all libraries
-      run: ./gradlew clean build --stacktrace
+      - name: Build all libraries
+        shell: bash
+        run: ./gradlew build --stacktrace

.github/workflows/build-on-windows.yml

@@ -1,26 +1,28 @@
-name: CI Build (under Windows)
+name: Build under Windows
 
-on:
-  pull_request:
-    branches:
-      - master
-
-permissions:
-  contents: read
+on: pull_request
 
 jobs:
   build:
-
+    name: Build under Windows
     runs-on: windows-latest
 
     steps:
       - uses: actions/checkout@v4
-      - name: Set up JDK 11
-        uses: actions/setup-java@v4
         with:
-          java-version: '11'
-          distribution: 'temurin'
+          submodules: 'true'
+
+      - uses: actions/setup-java@v4
+        with:
+          java-version: 11
+          distribution: zulu
+          cache: gradle
+
+      # See: https://github.com/al-cheb/configure-pagefile-action
+      - name: Configure Pagefile
+        uses: al-cheb/configure-pagefile-action@v1.3
 
-      - name: Build all libraries
+      - name: Build project and run tests
         shell: cmd
-        run: gradlew.bat build --stacktrace
+        # For the reason on `--no-daemon` see https://github.com/actions/cache/issues/454
+        run: gradlew.bat build --stacktrace --no-daemon

.github/workflows/gradle-wrapper-validation.yml

@@ -0,0 +1,19 @@
+name: Validate Gradle Wrapper
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - '**'
+
+jobs:
+  validation:
+    name: Validation
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout latest code
+        uses: actions/checkout@v4
+
+      - name: Validate Gradle Wrapper
+        uses: gradle/wrapper-validation-action@v1

.github/workflows/publish.yml

@@ -0,0 +1,63 @@
+name: Publish
+
+on:
+  push:
+    branches: [master]
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: 'true'
+
+      - uses: actions/setup-java@v4
+        with:
+          java-version: 11
+          distribution: zulu
+          cache: gradle
+
+      - name: Decrypt CloudRepo credentials
+        run: ./config/scripts/decrypt.sh "$CLOUDREPO_CREDENTIALS_KEY" ./.github/keys/cloudrepo.properties.gpg ./cloudrepo.properties
+        env:
+          CLOUDREPO_CREDENTIALS_KEY: ${{ secrets.CLOUDREPO_CREDENTIALS_KEY }}
+
+      - name: Decrypt Git SSH credentials
+        run: ./config/scripts/decrypt.sh "$GIT_CREDENTIALS_KEY" ./.github/keys/deploy_key_rsa.gpg ./deploy_key_rsa
+        env:
+          GIT_CREDENTIALS_KEY: ${{ secrets.GIT_CREDENTIALS_KEY }}
+
+        # Make sure the SSH key is not "too visible". SSH agent will not accept it otherwise.
+      - name: Set file system permissions
+        run: chmod 400 ./deploy_key_rsa && chmod +x ./config/scripts/register-ssh-key.sh
+
+      - name: Decrypt GCS credentials
+        run: ./config/scripts/decrypt.sh "$GCS_CREDENTIALS_KEY" ./.github/keys/gcs-auth-key.json.gpg ./gcs-auth-key.json
+        env:
+          GCS_CREDENTIALS_KEY: ${{ secrets.GCS_CREDENTIALS_KEY }}
+
+      - name: Decrypt GCAR credentials
+        run: ./config/scripts/decrypt.sh "$MAVEN_PUBLISHER_KEY" ./.github/keys/maven-publisher.json.gpg ./maven-publisher.json
+        env:
+          MAVEN_PUBLISHER_KEY: ${{ secrets.MAVEN_PUBLISHER_KEY }}
+
+      - name: Decrypt Git SSH credentials
+        run: ./config/scripts/decrypt.sh "$GRADLE_PORTAL_CREDENTIALS_KEY" ./.github/keys/gradle-plugin-portal.secret.properties.gpg ./gradle-plugin-portal.secret.properties
+        env:
+          GRADLE_PORTAL_CREDENTIALS_KEY: ${{ secrets.GRADLE_PORTAL_CREDENTIALS_KEY }}
+
+      - name: Append Gradle properties
+        run: cat ./gradle-plugin-portal.secret.properties >> ./gradle.properties
+
+      - name: Publish artifacts to Maven
+        # Since we're in the `master` branch already, this means that tests of a PR passed.
+        # So, no need to run the tests again when publishing.
+        run: ./gradlew publish -x test --stacktrace
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          FORMAL_GIT_HUB_PAGES_AUTHOR: developers@spine.io
+          # https://docs.github.com/en/actions/reference/environment-variables
+          REPO_SLUG: $GITHUB_REPOSITORY    # e.g. SpineEventEngine/core-java
+          GOOGLE_APPLICATION_CREDENTIALS: ./maven-publisher.json
+          NPM_TOKEN: ${{ secrets.NPM_SECRET }}

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "config"]
+	path = config
+	url = https://github.com/SpineEventEngine/config