Release/2.12.2 (#319)

* #308 - improve ci (using GitHub Action) - done (#310) * #309 - Deploy using GitHub actions for dev branch (#312) * Remove unused step from GitHub workflow * Switch to new Maven Central view * update license String (#313) * house keeping * update dow * Build release with actions (#314) #311 Build release via actions * change owasp from 'check' to 'aggregate' * check owasp * add owasp suppressions * update owasp suppressions * update owasp suppressions * update owasp suppressions * update owasp suppressions * update owasp suppressions * update owasp suppressions * update owasp suppression * update owasp suppression * update owasp suppression * update owasp suppression * update license * add note to wiki * update wiki * add suppression for CVE-2023-2798 * update guava to 32.1.1-jre * update owasp suppression * update owasp suppression * #317 - execitung the stopLoadingCommand of the unbind-method will not reset the hash - fixed (#318) * update read me * Update build.yaml to inspect checksum validation * Update build.yaml automatic checksum algorithm selection * update maven-deploy-plugin to 3.1.1 * add version to dependencies * house keeping * set version to 2.12.2 --------- Co-authored-by: philkohl <[email protected]> Co-authored-by: philipp <[email protected]>
NaluKit · Jul 12, 2023 · bac8a72 · bac8a72
1 parent 75b3d5d
commit bac8a72
Show file tree

Hide file tree

Showing 882 changed files with 2,006 additions and 1,698 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -1,5 +1,5 @@
 #
-# Copyright © 2020 The GWT Project Authors
+# Copyright © 2018 - Frank Hossfeld
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -14,22 +14,179 @@
 # limitations under the License.
 #
 
-name: CI
+name: Build & Deploy
 
 on:
   push:
     branches:
+      - dev
       - main
     pull_request:
       branches:
+        - dev
         - main
-
 jobs:
   build:
     runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: adopt
+          java-version: '8'
+          cache: maven
+      - name: Compile with Maven
+        run: mvn compile -ntp
+
+  test:
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: adopt
+          java-version: '8'
+          cache: maven
+      - name: Test with Maven
+        run: mvn test -ntp
+      - uses: actions/upload-artifact@v3
+        if: failure()
+        with:
+          name: surefire-report
+          path: target/surefire-reports/
 
+  build-and-owasp:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    needs: test
+    services:
+      owasp-db:
+        image: philkohl/owasp-maven-action:latest
+        options: --entrypoint /bin/sh --name owasp-db --hostname owasp-db
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: adopt
+          java-version: '8'
+          cache: maven
       - name: Build with Maven
-        run: JAVA_HOME=$JAVA_HOME_8_X64 mvn -V -B -ntp -U -e verify
+        run: mvn install -ntp
+      - name: Copy owasp database from container to runner
+        run: docker cp $(docker ps -aqf "name=owasp-db"):/dependency-check/data ./dependency-checker-db/
+      - name: OWASP Check
+        run: |
+          mvn org.owasp:dependency-check-maven:aggregate \
+          -DdataDirectory=./dependency-checker-db \
+          -DfailBuildOnCVSS=7 \
+          -Dodc.outputDirectory=reports \
+          -Dformat=HTML \
+          -DautoUpdate=false \
+          -DsuppressionFiles=./owasp/owasp-suppressions.xml
+      - name: Upload OWASP results
+        if: always()
+        uses: actions/upload-artifact@master
+        with:
+          name: OWASP report
+          path: ${{github.workspace}}/**/reports/dependency-check-report.html
 
+  maven-deploy-dev:
+    runs-on: ubuntu-latest
+    needs: build-and-owasp
+    if: github.ref == 'refs/heads/dev'
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: adopt
+          java-version: '8'
+          cache: maven
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+      - name: Extract Maven project version
+        run: echo "version=$(mvn -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)" >> $GITHUB_OUTPUT
+        id: project
+      - name: Show extracted Maven project version
+        run: echo ${{ steps.project.outputs.version }}
+      - name: Check version
+        if: ${{ !endsWith(steps.project.outputs.version, '-SNAPSHOT') }}
+        uses: actions/github-script@v6
+        with:
+          script: |
+            core.setFailed('Version not valid for dev')
+      - id: install-secret-key
+        name: Install GPG secret key
+        run: |
+          # Install gpg secret key
+          cat <(echo -e "${{ secrets.OSSRH_GPG_KEY }}") | gpg --batch --import
+          # Verify gpg secret key
+          gpg --list-secret-keys --keyid-format LONG
+      - name: Deploy with Maven
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
+        run: mvn deploy -ntp -Dgpg.passphrase=${{ secrets.OSSRH_GPG_SECRET_KEY_PASSWORD_NALUKIT_GITHUB_USER }} -DskipTests
+
+  maven-deploy-main:
+    runs-on: ubuntu-latest
+    needs: build-and-owasp
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          distribution: adopt
+          java-version: '8'
+          cache: maven
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+      - name: Extract Maven project version
+        run: echo "version=$(mvn -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)" >> $GITHUB_OUTPUT
+        id: project
+      - name: Show extracted Maven project version
+        run: echo ${{ steps.project.outputs.version }}
+      - name: Check version
+        if: ${{ endsWith(steps.project.outputs.version, '-SNAPSHOT') }}
+        uses: actions/github-script@v6
+        with:
+          script: |
+            core.setFailed('Version not valid for main')
+      - name: Check if tag already exists
+        id: version-check
+        run: |
+          echo $(git tag -l "${{ steps.project.outputs.version }}")
+          if [ $(git tag -l "${{ steps.project.outputs.version }}") ]; then
+            echo Version ${{ steps.project.outputs.version }} already exists!
+            echo "already-exists=true" >> "$GITHUB_OUTPUT"
+          else
+            echo Version ${{ steps.project.outputs.version }} do not exists!
+            echo "already-exists=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Test unique version
+        run: |
+          echo Version '${{ steps.project.outputs.version }}' already exists! Do not release!
+          exit 1
+        if: ${{ steps.version-check.outputs.already-exists == 'true' }}
+      - name: Release
+        uses: softprops/action-gh-release@v1
+        with:
+          body: Relase of version ${{ steps.project.outputs.version }}
+          tag_name: ${{ steps.project.outputs.version }}
+      - id: install-secret-key
+        name: Install GPG secret key
+        run: |
+          # Install gpg secret key
+          cat <(echo -e "${{ secrets.OSSRH_GPG_KEY }}") | gpg --batch --import
+          # Verify gpg secret key
+          gpg --list-secret-keys --keyid-format LONG
+      - name: Deploy with Maven
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
+        run: mvn deploy -ntp -P release -Dgpg.passphrase=${{ secrets.OSSRH_GPG_SECRET_KEY_PASSWORD_NALUKIT_GITHUB_USER }} -DskipTests -Daether.checksums.algorithms=MD5
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
diff --git a/LICENSE b/LICENSE
@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright [yyyy] [name of copyright owner]
+   Copyright 2018 Frank Hossfeld, Philipp Kohl
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

diff --git a/README.md b/README.md
@@ -3,9 +3,8 @@
 [![License](https://img.shields.io/:license-apache-blue.svg)](http://www.apache.org/licenses/LICENSE-2.0.html)
 ![GWT3/J2CL compatible](https://img.shields.io/badge/GWT3/J2CL-compatible-brightgreen.svg) 
 [![Join the chat at https://gitter.im/Nalukit42/Lobby](https://badges.gitter.im/Nalukit42/Lobby.svg)](https://gitter.im/Nalukit42/Lobby?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
-[![Maven Central](https://img.shields.io/maven-central/v/com.github.nalukit/nalu.svg?colorB=44cc11)](https://search.maven.org/artifact/com.github.nalukit/nalu)
-[![CI](https://github.com/NaluKit/nalu/workflows/CI/badge.svg)](https://github.com/NaluKit/nalu/actions)
-![Test](https://github.com/NaluKit/nalu/workflows/Test/badge.svg)
+[![Maven Central](https://img.shields.io/maven-central/v/com.github.nalukit/nalu.svg?colorB=44cc11)](https://central.sonatype.com/artifact/com.github.nalukit/nalu)
+[![Build & Deploy](https://github.com/NaluKit/nalu/actions/workflows/build.yaml/badge.svg?branch=dev)](https://github.com/NaluKit/nalu/actions/workflows/build.yaml)
 
 
 Nalu is a tiny framework that helps you to create GWT based applications quite easily. Using the HTML 5 history for routing and navigation, Nalu supports the browser's back-, forward-, and reload-button by default and without any need to implement anything.
@@ -135,12 +134,12 @@ To use Nalu add the following dependencies to your pom:
 <dependency>
     <groupId>com.github.nalukit</groupId>
     <artifactId>nalu</artifactId>
-    <version>2.12.1</version>
+    <version>2.12.2</version>
 </dependency>
 <dependency>
     <groupId>com.github.nalukit</groupId>
     <artifactId>nalu-processor</artifactId>
-    <version>2.12.1</version>
+    <version>2.12.2</version>
     <scope>provided</scope>
 </dependency>
 ```
@@ -170,7 +169,7 @@ If the project uses a widget set based on **Elemental2**, **Elemento** or **Domi
 <dependency>
     <groupId>com.github.nalukit</groupId>
     <artifactId>nalu-plugin-elemental2</artifactId>
-    <version>2.12.1</version>
+    <version>2.12.2</version>
 </dependency>
 ```
 
@@ -199,7 +198,7 @@ For Elemento there's a dedicated plugin which supports `org.jboss.gwt.elemento.c
 <dependency>
     <groupId>com.github.nalukit</groupId>
     <artifactId>nalu-plugin-elemento</artifactId>
-    <version>2.12.1</version>
+    <version>2.12.2</version>
 </dependency>
 ```
 
@@ -244,12 +243,12 @@ If your project uses a widget set based on **GWT** 2.8.2 or newer, use the **Nal
    <dependency>
       <groupId>com.github.nalukit</groupId>
       <artifactId>nalu-plugin-gwt</artifactId>
-      <version>2.12.1</version>
+      <version>2.12.2</version>
    </dependency>
    <dependency>
       <groupId>com.github.nalukit</groupId>
       <artifactId>nalu-plugin-gwt-processor</artifactId>
-      <version>2.12.1</version>
+      <version>2.12.2</version>
       <scope>provided</scope>
    </dependency>
 ```
@@ -279,16 +278,6 @@ Here you will find many examples that show Nalu in action: [https://github.com/n
 ## YouTube
 You will find a session about Nalu at the GWT Community Channel [here](https://www.youtube.com/watch?v=GsHY4f3cvRU).
 
-[//]: # (## Project Generator)
-
-[//]: # (To speed up creating a Nalu project, the [Nalu Boot Starter Project Generator]&#40;http://www.mvp4g.org/boot-starter-nalu/BootStarterNalu.html&#41; &#40;which is also based on Nalu&#41; can be used to create a Nalu based project with a few clicks. The project generator will generate a Maven project, which can be imported to your preferred IDE. The project is ready to use.)
-
-[//]: # ()
-[//]: # (Look into the **readme.txt** how to run the project.)
-
-[//]: # ()
-[//]: # (More information about the generator and the source code can be found here: [Nalu Project Generator]&#40;https://github.com/nalukit/gwt-boot-starter-nalu&#41;.)
-
 ## Notes
 In case you find a bug, please open an issue or post it inside the [Nalu Gitter room](https://gitter.im/Nalukit42/Lobby).