Merge branch 'master' into feat/remote-assets

.github/pr-labeler.config.yml

@@ -1,3 +1,12 @@
-# Additional labels to assign based on file changes
-"documentation":
-  - documentation/**/*
+# Patterns to match to auto-assign labels based on path changes
+# https://github.com/actions/labeler/tree/v5/?tab=readme-ov-file#match-object
+
+# Documentation
+'documentation':
+  - changed-files:
+      - any-glob-to-any-file: 'documentation/**/*'
+
+# Scripts
+'scripts':
+  - changed-files:
+      - any-glob-to-any-file: 'packages/scripts/**/*'

.github/workflows/deprecated/build-and-upload.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [16]
+        node-version: [20]
 
     steps:
       - name: Install crcmod

.github/workflows/deprecated/deployment-hosting.yml

@@ -34,7 +34,7 @@ jobs:
           echo "DEPLOYMENT_NAME=${{needs.build.outputs.DEPLOYMENT_NAME}}" >> $GITHUB_ENV
           echo "GIT_SHA=${{needs.build.outputs.GIT_SHA}}" >> $GITHUB_ENV
       - name: Download Build Artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: www
       - name: Extract Build folder
@@ -52,7 +52,7 @@ jobs:
           SENTRY_PROJECT: ${{env.DEPLOYMENT_NAME}}
         continue-on-error: true
       - name: Store sourcemaps artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: sourcemaps-$GIT_SHA
           path: www/*.map
@@ -65,7 +65,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: Download Build Artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: www
       - name: Extract Build folder

.github/workflows/deprecated/pr-build.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [16]
+        node-version: [20]
 
     steps:
       - name: Get PR Number

.github/workflows/deprecated/sourcemaps-upload.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Node ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 20.17.0
           cache: 'yarn'
       - name: Populate environment config
         env:
@@ -60,7 +60,7 @@ jobs:
           SENTRY_PROJECT: ${{env.DEPLOYMENT_NAME}}
         continue-on-error: true
       - name: Store sourcemaps artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: sourcemaps-$SHA_SHORT
           path: www/*.map

.github/workflows/deprecated/test-e2e.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Node ${{ matrix.node-version }}
         uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 20.17.0
           cache: 'yarn'
       - name: Populate firebaseConfig.ts
         env:

.github/workflows/documentation-lint.yml

@@ -17,7 +17,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 20.17.0
           cache: 'yarn'      
       - run: yarn install --immutable
       - name: Spellcheck

.github/workflows/gh-pr-label-paths.yml

@@ -0,0 +1,26 @@
+# Automatically apply labels to PR based on filepaths of modified files
+name: Github PR Label Paths
+on:
+  pull_request:
+    # https://frontside.com/blog/2020-05-26-github-actions-pull_request/
+    types:
+        - opened
+        - synchronize
+jobs:
+  label:
+    if: ${{ !contains(github.event.pull_request.labels.*.name , 'no-autolabel')}}
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout repo to access local templates (if updated)
+      - name: checkout
+        uses: actions/checkout@main
+      # Assign labels based on files modified
+      # https://github.com/actions/labeler
+      - name: Assign PR path Labels
+        uses: actions/labeler@v5
+        with:
+          configuration-path: .github/pr-labeler.config.yml
+          sync-labels: false

.github/workflows/gh-pr-label-title.yml

@@ -0,0 +1,51 @@
+# Automatically apply labels to PR based on title (if written in semantic format)
+name: Github PR Label Title
+on:
+  pull_request:
+    # https://frontside.com/blog/2020-05-26-github-actions-pull_request/
+    types:
+      - opened
+      - ready_for_review
+jobs:
+  label:
+    # Avoid re-label if title not changed or using custom label to prevent
+    # https://github.com/orgs/community/discussions/101695
+    if: |
+      ${{ !contains(github.event.pull_request.labels.*.name , 'no-autolabel')}} &&
+      (event.type == 'opened' || event.changes.title.from)
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout repo to access local templates (if updated)
+      - name: checkout
+        uses: actions/checkout@main
+      # Check if PR title matches conventional commit standard
+      # Not strictly enforced so allow continue on error
+      # https://github.com/marketplace/actions/semantic-pull-request
+      - name: Validate PR title
+        uses: amannn/action-semantic-pull-request@v5
+        continue-on-error: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        # Assign labels based on conventional PR title
+        # https://github.com/marketplace/actions/conventional-release-labels
+      - name: Assign PR Name Labels
+        uses: bcoe/[email protected]
+        with:
+          # Labels assigned based on pr name prefix
+          type_labels: |
+            {
+              "breaking": "breaking",
+              "chore": "maintenance",
+              "docs": "documentation",
+              "feat": "feature",
+              "fix": "fix",
+              "refactor": "maintenance",
+              "Breaking": "breaking",
+              "Chore": "maintenance",
+              "Docs": "documentation",
+              "Feat": "feature",
+              "Fix": "fix",
+              "Refactor": "maintenance"
+            }
+          # Do not ignore any labels (default ignores chore:)
+          ignored_types: '[]'

.github/workflows/reusable-android-build.yml

@@ -85,7 +85,7 @@ jobs:
         - name: Setup Node
           uses: actions/setup-node@v3
           with:
-            node-version: 18.x          
+            node-version: 20.17.0          
         - uses: actions/cache/restore@v3
           id: cache
           with:
@@ -104,7 +104,7 @@ jobs:
           run: yarn workflow android
 
         - name: Download Build Artifact
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4
           with:
             name: www
 
@@ -134,7 +134,7 @@ jobs:
           run: ./gradlew :app:assembleDebug
 
         - name: Upload debug apk
-          uses: actions/upload-artifact@v3
+          uses: actions/upload-artifact@v4
           with:
             name: debug_apk
             path: android/app/build/outputs/apk/debug/app-debug.apk
@@ -155,7 +155,7 @@ jobs:
             keyPassword: ${{ env.KEY_PASSWORD }}
 
         - name: Upload release bundle
-          uses: actions/upload-artifact@v3
+          uses: actions/upload-artifact@v4
           with:
             name: release_bundle
             path: ${{steps.sign_aab.outputs.signedReleaseFile}}

.github/workflows/reusable-android-release.yml

@@ -33,7 +33,7 @@ jobs:
 
         - name: Download Build Artifact
           id: download
-          uses: actions/download-artifact@v3
+          uses: actions/download-artifact@v4
           with:
             name: release_bundle
             path: ./

.github/workflows/reusable-app-build.yml

@@ -56,21 +56,21 @@ jobs:
 
       steps:
         - name: Check out app code
-          uses: actions/checkout@v3
+          uses: actions/checkout@v4
           with:
             repository: "IDEMSInternational/open-app-builder.git"
             ref: ${{env.APP_CODE_BRANCH}}
 
         - name: Checkout parent repo if needed
           if: env.PARENT_DEPLOYMENT_REPO != ''
-          uses: actions/checkout@v3
+          uses: actions/checkout@v4
           with:
             path: ".idems_app/deployments/${{env.PARENT_DEPLOYMENT_NAME}}"
             repository: ${{env.PARENT_DEPLOYMENT_REPO}}
             ref: ${{env.PARENT_DEPLOYMENT_BRANCH}}
 
         - name: Checkout deployment
-          uses: actions/checkout@v3
+          uses: actions/checkout@v4
           with:
             ref: ${{inputs.branch}}
             path: ".idems_app/deployments/${{env.DEPLOYMENT_NAME}}"
@@ -81,30 +81,40 @@ jobs:
           run: echo "${{env.DEPLOYMENT_PRIVATE_KEY}}" > ./.idems_app/deployments/${{env.DEPLOYMENT_NAME}}/encrypted/private.key
 
         - name: Setup Node
-          uses: actions/setup-node@v3
+          uses: actions/setup-node@v4
           with:
-            node-version: 18.x
+            node-version: 20.17.0
+
 
-        - name: Cache node modules
-          uses: actions/cache@v3
+      #############################################################################
+      #         Node Modules
+      # Manually restore any previous cache to speed install
+      # As immutable install will not change cache only save new cache if not hit
+      # Uses fine-grained methods from https://github.com/actions/cache
+      #############################################################################
+        - uses: actions/cache/restore@v4
+          id: cache
           with:
             path: ./.yarn/cache
-            # If cachebusting required (e.g. breaking yarn changes on update) change `v1` to another number
-            key: ${{ runner.os }}-node-modules-yarn-v1-${{ hashFiles('**/yarn.lock') }}
+            key: ${{ runner.os }}-node-modules-yarn-v1-${{ hashFiles('yarn.lock') }}
             restore-keys: |
               ${{ runner.os }}-node-modules-yarn-v1-
-  
         - name: Install node modules
-          run: yarn install
-
+          run: yarn install --immutable
+        - uses: actions/cache/save@v4
+          if: steps.cache.outputs.cache-hit != 'true'
+          with:
+            path: ./.yarn/cache
+            key: ${{ runner.os }}-node-modules-yarn-v1-${{ hashFiles('yarn.lock') }}
+
         - name: Set deployment
           run: yarn workflow deployment set $DEPLOYMENT_NAME --skip-refresh
- 
+
         - name: Build
           run: yarn build ${{inputs.build-flags}}
 
         - name: Upload artifact
-          uses: actions/upload-pages-artifact@v1.0.8
+          uses: actions/upload-pages-artifact@v3
           with:
             path: "www/"
             name: www  

.github/workflows/reusable-appetize.yml

@@ -42,7 +42,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Download Build Artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: debug_apk
           path: ./

.github/workflows/reusable-content-sync.yml

@@ -75,7 +75,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v3
         with:
-          node-version: 18.x
+          node-version: 20.17.0
 
       - name: Cache node modules
         uses: actions/cache@v3

.github/workflows/reusable-deploy-pr-preview.yml

@@ -45,7 +45,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Download Build Artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: www