fix guarantee autoplan order

.github/CODEOWNERS

@@ -1 +1 @@
-* @chanzuckerberg/czi-shared-infra
+* @vincenthsh

.github/dependabot.yml

@@ -1,11 +1,41 @@
 version: 2
 updates:
-- package-ecosystem: gomod
-  directory: "/"
-  schedule:
-    interval: weekly
-  open-pull-requests-limit: 10
-  labels:
-  - bot/merge
-  commit-message:
-    prefix: "chore: "
+  - package-ecosystem: gomod
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    labels:
+      - bot/merge
+    commit-message:
+      prefix: "chore: "
+    groups:
+      atlantis:
+        patterns:
+          - "github.com/runatlantis/*"
+      terraform:
+        patterns:
+          - "github.com/hashicorp/*"
+        exclude-patterns:
+          # pin to 0.15.3 (last version with shared registry packages)
+          - "github.com/hashicorp/terraform/*"
+      gomod:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "github.com/runatlantis/*"
+          - "github.com/hashicorp/*"
+          # pin to 0.15.3 (last version with shared registry packages)
+          - "github.com/hashicorp/terraform/*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - bot/merge
+    commit-message:
+      prefix: "chore: "
+    groups:
+      github-actions:
+        patterns:
+          - "*"

.github/workflows/build.yml

@@ -1,48 +1,16 @@
-on: pull_request
+on:
+  pull_request:
+    branches:
+      - feat-multi-module-components
 
 jobs:
   test:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
         with:
-          go-version-file: go.mod
+          # go-version-file: go.mod
+          go-version: "1.22"
       - name: Run tests
         run: make test-ci
-
-  lint:
-    runs-on: ubuntu-18.04
-    steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v3
-        with:
-          go-version-file: go.mod
-      - uses: hashicorp/setup-terraform@v1
-        with:
-          terraform_version: 1.1.3
-
-      # - name: tflint
-      #   uses: reviewdog/action-tflint@master
-      #   with:
-      #     github_token: ${{ secrets.github_token }}
-      #     working_directory: "testdata" # Optional. Change working directory
-      #     reporter: github-pr-review # Optional. Change reporter
-      #     fail_on_error: "true" # Optional. Fail action if errors are found
-      #     filter_mode: "nofilter" # Optional. Check all files, not just the diff
-      #     tflint_rulesets: "aws" # Optional. Extra official rulesets to install
-      #     # flags: "--module" # Optional. Add custom tflint flags
-
-      - name: golangci-lint
-        uses: reviewdog/action-golangci-lint@v2
-        with:
-          reporter: github-pr-review
-
-      - name: markdownlint
-        uses: reviewdog/[email protected]
-        with:
-          reporter: github-pr-review
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: terraform fmt
-        run: terraform fmt -check -diff -recursive testdata

.github/workflows/conventional_commits_title.yml

@@ -9,6 +9,20 @@ on:
 
 jobs:
   conventional_commit_title:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
-      - uses: chanzuckerberg/github-actions/.github/actions/conventional-commits@main
+      # source https://github.com/chanzuckerberg/github-actions/blob/cac0ba177b109becac01bc340a3a1547feb40fe5/.github/actions/conventional-commits/action.yml
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            const validator = /^(chore|feat|fix|revert|docs|style|ci)(\((((PETI|HSENG|SAENG)-[0-9]+)|([a-z-]+))\))?(!)?: (.)+$/
+            const title = context.payload.pull_request.title
+            const is_valid = validator.test(title)
+
+            if (!is_valid) {
+              const details = JSON.stringify({
+                title: title,
+                valid_syntax: validator.toString(),
+              })
+              core.setFailed(`Your pr title doesn't adhere to conventional commits syntax. See more details: ${details}`)
+            }

.github/workflows/dependabot_automerge.yml

@@ -0,0 +1,33 @@
+# ref: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#common-dependabot-automations
+name: Dependabot auto-approve
+on:
+  pull_request:
+    branches:
+      - feat-multi-module-components
+
+permissions:
+  # required to set pr to auto merge
+  pull-requests: write
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  dependabot:
+    runs-on: ubuntu-22.04
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+      - name: Set to Auto Merge
+        run: |
+          gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{ secrets.VINCENT_PAT }}
+      - name: Approve PR
+        run: |
+          gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{ secrets.VINCENT_PAT }}

.github/workflows/release.yml

@@ -1,60 +1,38 @@
 on:
   push:
     branches:
-      - main
+      - feat-multi-module-components
 
 name: release-please
 jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v5
-        id: configure-changelog
-        with:
-          result-encoding: string
-          script: |
-            const changelogTypes = [
-              {type: "feat", section: "Features", hidden: false},
-              {type: "chore", section: "Misc", hidden: false},
-              {type: "fix", section: "BugFixes", hidden: false},
-            ]
-
-            return JSON.stringify(changelogTypes)
-      # See https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow
-      # For why we need to generate a token and not use the default
-      - name: Generate token
-        id: generate_token
-        uses: chanzuckerberg/[email protected]
-        with:
-          app_id: ${{ secrets.CZI_RELEASE_PLEASE_APP_ID }}
-          private_key: ${{ secrets.CZI_RELEASE_PLEASE_PK }}
-
       - name: release please
-        uses: google-github-actions/release-please-action@v3.0.0
+        uses: google-github-actions/release-please-action@v4.1.0
         id: release
         with:
-          release-type: simple
-          bump-minor-pre-major: true
-          changelog-types: ${{ steps.configure-changelog.outputs.result }}
-          token: ${{ steps.generate_token.outputs.token }}
+          # https://github.com/google-github-actions/release-please-action#github-credentials
+          token: ${{ secrets.VINCENT_PAT }}
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         # we need to fetch all history and tags
         # so we build the proper version
         with:
           fetch-depth: 0
         if: ${{ steps.release.outputs.release_created }}
 
-      - uses: actions/setup-go@v3
+      - uses: actions/setup-go@v5
         with:
-          go-version-file: go.mod
+          # go-version-file: go.mod
+          go-version: "1.22"
         if: ${{ steps.release.outputs.release_created }}
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v5
         with:
           version: latest
           args: release --rm-dist
         env:
-          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
+          GITHUB_TOKEN: ${{ secrets.VINCENT_PAT }}
         if: ${{ steps.release.outputs.release_created }}

.goreleaser.yml

@@ -9,20 +9,12 @@ builds:
       - amd64
       - arm64
     ldflags:
-      - '-w -s -X main.Date={{.CommitDate}} -X github.com/chanzuckerberg/fogg/util.GitSha={{.Commit}} -X github.com/chanzuckerberg/fogg/util.Version={{.Version}} -X github.com/chanzuckerberg/fogg/util.Dirty=false -X github.com/chanzuckerberg/fogg/util.Release=true'
-    mod_timestamp: '{{ .CommitTimestamp }}'
+      - "-w -s -X main.Date={{.CommitDate}} -X github.com/chanzuckerberg/fogg/util.GitSha={{.Commit}} -X github.com/chanzuckerberg/fogg/util.Version={{.Version}} -X github.com/chanzuckerberg/fogg/util.Dirty=false -X github.com/chanzuckerberg/fogg/util.Release=true"
+    mod_timestamp: "{{ .CommitTimestamp }}"
 
 archives:
   - files:
       - none*
 
 release:
   prerelease: false
-
-brews:
-  - description: 'Terraform without pain.'
-    tap:
-      owner: chanzuckerberg
-      name: homebrew-tap
-    homepage: 'https://github.com/chanzuckerberg/fogg'
-    test: system "#{bin}/fogg version"

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.92.0"
+}