Skip to content

ci: Add release orchestration and improve code style - #34

Merged
papazof merged 8 commits into
mainfrom
ci_add_release_orchestration
Apr 28, 2026
Merged

papazof merged 8 commits into
mainfrom
ci_add_release_orchestration

Conversation

@papazof

@papazof papazof commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

Add release orchestration and improve CI code style:

  • Integrate automatic release orchestration introduced in ci: Add automatic release orchestration pipeline vaccel#210
  • Replace PAT with vaccel-bot tokens, scoped per step
  • Group Dependabot updates, including custom actions
  • Replace third-party actions with GH CLI in generate-api-reference
  • Add annual copyright year bump workflow
  • Add SPDX license headers, tidy up workflow code style and bump dependencies
  • Update build and CI with new component versioning scheme

@papazof
papazof force-pushed the ci_add_release_orchestration branch from c17bf96 to 3899ac9 Compare April 27, 2026 20:30
@vaccel-bot

vaccel-bot Bot commented Apr 28, 2026

Copy link
Copy Markdown
Contributor

Coverage report diff

Filename Stmts Miss Cover
TOTAL 0 0 +100.00%

@papazof
papazof marked this pull request as ready for review April 28, 2026 14:44
@papazof
papazof requested a review from ananos April 28, 2026 14:44
papazof added 8 commits April 28, 2026 15:04
Update dependabot config to group github-actions updates into a single
PR and extend coverage to custom actions in `.github/actions`, reducing
PR noise from individual dependency updates

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Replace personal access token with the vaccel-bot GitHub App token
across workflows, using fine-grained per-workflow permissions to follow
the principle of least privilege. Bump `actions/create-github-app-token`
to v3.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Improve code style in CI workflows:
- Avoid direct interpolation of user-controlled inputs in run
  scripts
- Set default read-only permissions on all workflows
- Add Python venv bin path to GITHUB_PATH in `build` action to simplify
  subsequent step usage
- Remove core vAccel package download from the `run-tests` action, as it
  is now handled directly by the upstream `coverage-report` workflow
- General code style and input naming cleanup

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Integrate CI with the release orchestration process introduced in
nubificus/vaccel#210:
- Add job to notify the orchestrator after artifact build and upload
- Add workflow to prepare a release PR with core dependency bump

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Update build and CI with new component versioning scheme:
- Switch to custom versioning in `pyproject.toml`/`setup.py` to strip
  newly added version/tag metadata from wheels and generate
  PyPI-compatible versions
- Add explicit dependency to core vAccel C package in wheel metadata
- Amend `dispatch-prepare-release` workflow to reflect build versioning
  changes
- Remove local `upload-to-s3` action and override the newly introduced
  upstream `generate-latest-artifacts` action with the package
  versioning scheme

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Replace third-party actions with the GH CLI to trigger the docs update
workflow and parse the result, since the GitHub dispatch API now returns
the triggered run URL directly

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Add `schedule-update-notice` to bump the end year in the NOTICE
`Copyright YYYY-YYYY` range by triggering `update-notice-year` on
January 1st and on manual dispatch. The workflow opens a PR if the file
needs an update.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Add Apache-2.0 SPDX headers to workflows and composite actions under
`.github` following the upstream changes in `licenserc.yml` that enforce
license headers in GitHub workflows and actions

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
@vaccel-bot
vaccel-bot Bot force-pushed the ci_add_release_orchestration branch from 3899ac9 to c623006 Compare April 28, 2026 15:04
@papazof
papazof merged commit b268c98 into main Apr 28, 2026
13 checks passed
papazof added a commit that referenced this pull request Apr 28, 2026
Update dependabot config to group github-actions updates into a single
PR and extend coverage to custom actions in `.github/actions`, reducing
PR noise from individual dependency updates

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
papazof added a commit that referenced this pull request Apr 28, 2026
Replace personal access token with the vaccel-bot GitHub App token
across workflows, using fine-grained per-workflow permissions to follow
the principle of least privilege. Bump `actions/create-github-app-token`
to v3.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
papazof added a commit that referenced this pull request Apr 28, 2026
Improve code style in CI workflows:
- Avoid direct interpolation of user-controlled inputs in run
  scripts
- Set default read-only permissions on all workflows
- Add Python venv bin path to GITHUB_PATH in `build` action to simplify
  subsequent step usage
- Remove core vAccel package download from the `run-tests` action, as it
  is now handled directly by the upstream `coverage-report` workflow
- General code style and input naming cleanup

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
papazof added a commit that referenced this pull request Apr 28, 2026
Integrate CI with the release orchestration process introduced in
nubificus/vaccel#210:
- Add job to notify the orchestrator after artifact build and upload
- Add workflow to prepare a release PR with core dependency bump

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
papazof added a commit that referenced this pull request Apr 28, 2026
Update build and CI with new component versioning scheme:
- Switch to custom versioning in `pyproject.toml`/`setup.py` to strip
  newly added version/tag metadata from wheels and generate
  PyPI-compatible versions
- Add explicit dependency to core vAccel C package in wheel metadata
- Amend `dispatch-prepare-release` workflow to reflect build versioning
  changes
- Remove local `upload-to-s3` action and override the newly introduced
  upstream `generate-latest-artifacts` action with the package
  versioning scheme

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
papazof added a commit that referenced this pull request Apr 28, 2026
Replace third-party actions with the GH CLI to trigger the docs update
workflow and parse the result, since the GitHub dispatch API now returns
the triggered run URL directly

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
@papazof
papazof deleted the ci_add_release_orchestration branch April 28, 2026 15:15
papazof added a commit that referenced this pull request Apr 28, 2026
Add `schedule-update-notice` to bump the end year in the NOTICE
`Copyright YYYY-YYYY` range by triggering `update-notice-year` on
January 1st and on manual dispatch. The workflow opens a PR if the file
needs an update.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <papazof@gmail.com>
Reviewed-by: Anastassios Nanos <ananos@nubificus.co.uk>
Approved-by: Anastassios Nanos <ananos@nubificus.co.uk>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants