merge changes from Oztechan

.github/workflows/main.yml

@@ -84,18 +84,18 @@ jobs:
           gpg -d --passphrase "${{ secrets.SECRET_PASSWORD }}" --batch agconnect-services.json.asc > android/app/src/release/agconnect-services.json
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v3.13.0
+        uses: actions/setup-java@v4.0.0
         with:
           java-version: 17
           distribution: 'temurin'
 
       - name: Assemble
-        uses: gradle/gradle-build-action@v2.9.0
+        uses: gradle/gradle-build-action@v3.1.0
         with:
           arguments: assemble
 
       - name: Upload Android Artifacts
-        uses: actions/upload-artifact@v3.1.3
+        uses: actions/upload-artifact@v4.3.1
         if: github.event_name == 'push'
         with:
           name: androidArtifacts
@@ -105,7 +105,7 @@ jobs:
 
       - name: Cancel other jobs if this fails
         if: failure()
-        uses: andymckay/cancel-action@0.3
+        uses: andymckay/cancel-action@0.4
 
       - name: Set Job Status
         id: status
@@ -123,7 +123,7 @@ jobs:
         uses: actions/checkout@v4.1.1
 
       - name: Download Android Artifacts
-        uses: actions/download-artifact@v3.0.2
+        uses: actions/download-artifact@v4.1.2
         with:
           name: androidArtifacts
 
@@ -144,8 +144,9 @@ jobs:
           file: huawei/release/app-huawei-release.apk
 
       - name: Delete Android Artifacts
-        uses: geekyeggo/delete-artifact@v2.0.0
+        uses: geekyeggo/delete-artifact@v4.1.0
         with:
+          token: ${{ secrets.GITHUB_TOKEN }}
           name: androidArtifacts
 
       - name: Set Job Status
@@ -184,7 +185,7 @@ jobs:
           gpg -d --passphrase "${{ secrets.SECRET_PASSWORD }}" --batch Release.xcconfig.asc > ios/CCC/Resources/Release/Config.xcconfig
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v3.13.0
+        uses: actions/setup-java@v4.0.0
         with:
           java-version: 17
           distribution: 'temurin'
@@ -194,7 +195,7 @@ jobs:
         run: fastlane build
 
       - name: Upload iOS Artifacts
-        uses: actions/upload-artifact@v3.1.3
+        uses: actions/upload-artifact@v4.3.1
         if: github.event_name == 'push'
         with:
           name: iOSArtifacts
@@ -204,14 +205,14 @@ jobs:
 
       - name: Cancel other jobs if this fails
         if: failure()
-        uses: andymckay/cancel-action@0.3
+        uses: andymckay/cancel-action@0.4
 
       - name: Set Job Status
         id: status
         run: echo "status=success" >> $GITHUB_OUTPUT
 
   DistributeIOS:
-    runs-on: macos-13
+    runs-on: ubuntu-latest
     needs: [ XCodeBuild ]
     if: github.event_name == 'push'
     outputs:
@@ -221,18 +222,22 @@ jobs:
         uses: actions/checkout@v4.1.1
 
       - name: Download iOS IPA
-        uses: actions/download-artifact@v3.0.2
+        uses: actions/download-artifact@v4.1.2
         with:
           name: iOSArtifacts
           path: ios
 
+      # was necessary to use chown to fix permission issues in linux machines
       - name: Distribute
         working-directory: ios
-        run: fastlane distribute
+        run: |
+          sudo chown -R $(whoami) /var/lib/gems/3.0.0
+          fastlane distribute
 
       - name: Delete iOS IPA
-        uses: geekyeggo/delete-artifact@v2.0.0
+        uses: geekyeggo/delete-artifact@v4.1.0
         with:
+          token: ${{ secrets.GITHUB_TOKEN }}
           name: iOSArtifacts
 
       - name: Set Job Status
@@ -251,25 +256,25 @@ jobs:
           submodules: 'recursive'
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v3.13.0
+        uses: actions/setup-java@v4.0.0
         with:
           java-version: 17
           distribution: 'temurin'
 
       - name: Run Quality Jobs
-        uses: gradle/gradle-build-action@v2.9.0
+        uses: gradle/gradle-build-action@v3.1.0
         with:
           arguments: check koverMergedXmlReport --parallel
 
       - name: Upload Coverage Report
-        uses: actions/upload-artifact@v3.1.3
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: coverageReport
           path: build/reports/kover/merged/xml/report.xml
 
       - name: Cancel other jobs if this fails
         if: failure()
-        uses: andymckay/cancel-action@0.3
+        uses: andymckay/cancel-action@0.4
 
       - name: Set Job Status
         id: status
@@ -285,13 +290,13 @@ jobs:
         uses: actions/checkout@v4.1.1
 
       - name: Download Coverage Report
-        uses: actions/download-artifact@v3.0.2
+        uses: actions/download-artifact@v4.1.2
         with:
           name: coverageReport
           path: build
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3.1.4
+        uses: codecov/codecov-action@v4.1.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: build/report.xml
@@ -303,7 +308,7 @@ jobs:
           coverage-reports: build/report.xml
 
       - name: SonarCloud Scan
-        uses: sonarsource/sonarcloud-github-action@v2.0.2
+        uses: sonarsource/sonarcloud-github-action@v2.1.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
@@ -314,8 +319,9 @@ jobs:
             -Dsonar.coverage.jacoco.xmlReportPaths=build/report.xml
 
       - name: Delete Coverage Report
-        uses: geekyeggo/delete-artifact@v2.0.0
+        uses: geekyeggo/delete-artifact@v4.1.0
         with:
+          token: ${{ secrets.GITHUB_TOKEN }}
           name: coverageReport
 
       - name: Set Job Status
@@ -334,13 +340,13 @@ jobs:
           submodules: 'recursive'
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v3.13.0
+        uses: actions/setup-java@v4.0.0
         with:
           java-version: 17
           distribution: 'temurin'
 
       - name: Detekt
-        uses: gradle/gradle-build-action@v2.9.0
+        uses: gradle/gradle-build-action@v3.1.0
         with:
           arguments: detektAll
 
@@ -351,6 +357,10 @@ jobs:
         with:
           args: --strict
 
+      - name: Cancel other jobs if this fails
+        if: failure()
+        uses: andymckay/cancel-action@0.4
+
       - name: Set Job Status
         id: status
         run: echo "status=success" >> $GITHUB_OUTPUT

.github/workflows/project.yml

@@ -14,59 +14,7 @@ on:
 
 jobs:
   ProjectAutomations:
-    runs-on: ubuntu-latest
-    steps:
-      - name: 'Add issue to project'
-        if: github.event_name == 'issues' && (github.event.action == 'opened' ||  github.event.action == 'reopened')
-        uses: leonsteinhaeuser/project-beta-automations@v2.2.1
-        with:
-          gh_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-          organization: Oztechan
-          project_id: 2
-          resource_node_id: ${{ github.event.issue.node_id }}
-          operation_mode: custom_field
-          custom_field_values: '[{\"name\": \"Iteration\",\"type\": \"iteration\",\"value\": \"@current\"}]'
-
-      - name: 'Move Related Issue to "🏗 PR Review"'
-        if: github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'ready_for_review' || github.event.action == 'reopened')
-        uses: leonsteinhaeuser/project-beta-automations@v2.2.1
-        with:
-          gh_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-          organization: Oztechan
-          project_id: 2
-          resource_node_id: ${{ github.event.pull_request.node_id }}
-          status_value: "🏗 PR Review"
-          move_related_issues: true
-
-      - name: 'Add Dependency PR by renovate to "🏗 PR Review"'
-        if: github.event_name == 'pull_request' && github.event.pull_request.user.login == 'renovate[bot]' && (github.event.action == 'opened' || github.event.action == 'ready_for_review' || github.event.action == 'reopened')
-        uses: leonsteinhaeuser/project-beta-automations@v2.2.1
-        with:
-          gh_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-          organization: Oztechan
-          project_id: 2
-          resource_node_id: ${{ github.event.pull_request.node_id }}
-          operation_mode: custom_field
-          custom_field_values: '[{\"name\": \"Iteration\",\"type\": \"iteration\",\"value\": \"@current\"}]'
-
-      - name: 'Move Related Issue to "🚧 In Progress"'
-        if: github.event_name == 'pull_request' && github.event.action == 'converted_to_draft'
-        uses: leonsteinhaeuser/project-beta-automations@v2.2.1
-        with:
-          gh_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-          organization: Oztechan
-          project_id: 2
-          resource_node_id: ${{ github.event.pull_request.node_id }}
-          status_value: "🚧 In Progress"
-          move_related_issues: true
-
-      - name: 'Move Related Issue to "✅ Done"'
-        if: github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged == true
-        uses: leonsteinhaeuser/project-beta-automations@v2.2.1
-        with:
-          gh_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
-          organization: Oztechan
-          project_id: 2
-          resource_node_id: ${{ github.event.pull_request.node_id }}
-          status_value: "✅ Done"
-          move_related_issues: true
+    uses: Oztechan/Global/.github/workflows/reusable-project.yml@v1.0.1
+    with:
+      project_id: 2
+    secrets: inherit

.github/workflows/publish.yml

@@ -8,33 +8,7 @@ on:
 jobs:
 
   PublishRelease:
-    runs-on: ubuntu-latest
-    outputs:
-      status: ${{ steps.status.outputs.status }}
-    steps:
-
-      - name: PublishRelease
-        uses: marvinpinto/action-automatic-releases@v1.2.1
-        with:
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-          prerelease: false
-
-      - name: Set Job Status
-        id: status
-        run: echo "status=success" >> $GITHUB_OUTPUT
-
-  Notify:
-    runs-on: ubuntu-latest
-    needs: [ PublishRelease ]
-    if: always()
-    steps:
-
-      - name: Notify slack fail
-        if: false == (needs.PublishRelease.outputs.status == 'success')
-        uses: voxmedia/github-action-slack-notify-build@v1.6.0
-        env:
-          SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
-        with:
-          channel: ccc-github
-          status: FAILED
-          color: danger
+    uses: Oztechan/Global/.github/workflows/reusable-publish.yml@v1.0.1
+    with:
+      slack_channel: "ccc-github"
+    secrets: inherit