Skip to content

ci: Add release orchestration and improve code style#34

Merged
papazof merged 8 commits intomainfrom
ci_add_release_orchestration
Apr 28, 2026
Merged

ci: Add release orchestration and improve code style#34
papazof merged 8 commits intomainfrom
ci_add_release_orchestration

Conversation

@papazof
Copy link
Copy Markdown
Contributor

@papazof papazof commented Apr 25, 2026

Add release orchestration and improve CI code style:

  • Integrate automatic release orchestration introduced in ci: Add automatic release orchestration pipeline vaccel#210
  • Replace PAT with vaccel-bot tokens, scoped per step
  • Group Dependabot updates, including custom actions
  • Replace third-party actions with GH CLI in generate-api-reference
  • Add annual copyright year bump workflow
  • Add SPDX license headers, tidy up workflow code style and bump dependencies
  • Update build and CI with new component versioning scheme

@papazof papazof force-pushed the ci_add_release_orchestration branch from c17bf96 to 3899ac9 Compare April 27, 2026 20:30
@vaccel-bot
Copy link
Copy Markdown
Contributor

vaccel-bot Bot commented Apr 28, 2026

Coverage report diff

Filename Stmts Miss Cover
TOTAL 0 0 +100.00%

@papazof papazof marked this pull request as ready for review April 28, 2026 14:44
@papazof papazof requested a review from ananos April 28, 2026 14:44
papazof added 8 commits April 28, 2026 15:04
Update dependabot config to group github-actions updates into a single
PR and extend coverage to custom actions in `.github/actions`, reducing
PR noise from individual dependency updates

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Replace personal access token with the vaccel-bot GitHub App token
across workflows, using fine-grained per-workflow permissions to follow
the principle of least privilege. Bump `actions/create-github-app-token`
to v3.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Improve code style in CI workflows:
- Avoid direct interpolation of user-controlled inputs in run
  scripts
- Set default read-only permissions on all workflows
- Add Python venv bin path to GITHUB_PATH in `build` action to simplify
  subsequent step usage
- Remove core vAccel package download from the `run-tests` action, as it
  is now handled directly by the upstream `coverage-report` workflow
- General code style and input naming cleanup

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Integrate CI with the release orchestration process introduced in
nubificus/vaccel#210:
- Add job to notify the orchestrator after artifact build and upload
- Add workflow to prepare a release PR with core dependency bump

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Update build and CI with new component versioning scheme:
- Switch to custom versioning in `pyproject.toml`/`setup.py` to strip
  newly added version/tag metadata from wheels and generate
  PyPI-compatible versions
- Add explicit dependency to core vAccel C package in wheel metadata
- Amend `dispatch-prepare-release` workflow to reflect build versioning
  changes
- Remove local `upload-to-s3` action and override the newly introduced
  upstream `generate-latest-artifacts` action with the package
  versioning scheme

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Replace third-party actions with the GH CLI to trigger the docs update
workflow and parse the result, since the GitHub dispatch API now returns
the triggered run URL directly

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Add `schedule-update-notice` to bump the end year in the NOTICE
`Copyright YYYY-YYYY` range by triggering `update-notice-year` on
January 1st and on manual dispatch. The workflow opens a PR if the file
needs an update.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Add Apache-2.0 SPDX headers to workflows and composite actions under
`.github` following the upstream changes in `licenserc.yml` that enforce
license headers in GitHub workflows and actions

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
@vaccel-bot vaccel-bot Bot force-pushed the ci_add_release_orchestration branch from 3899ac9 to c623006 Compare April 28, 2026 15:04
@papazof papazof merged commit b268c98 into main Apr 28, 2026
13 checks passed
papazof added a commit that referenced this pull request Apr 28, 2026
Update dependabot config to group github-actions updates into a single
PR and extend coverage to custom actions in `.github/actions`, reducing
PR noise from individual dependency updates

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
papazof added a commit that referenced this pull request Apr 28, 2026
Replace personal access token with the vaccel-bot GitHub App token
across workflows, using fine-grained per-workflow permissions to follow
the principle of least privilege. Bump `actions/create-github-app-token`
to v3.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
papazof added a commit that referenced this pull request Apr 28, 2026
Improve code style in CI workflows:
- Avoid direct interpolation of user-controlled inputs in run
  scripts
- Set default read-only permissions on all workflows
- Add Python venv bin path to GITHUB_PATH in `build` action to simplify
  subsequent step usage
- Remove core vAccel package download from the `run-tests` action, as it
  is now handled directly by the upstream `coverage-report` workflow
- General code style and input naming cleanup

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
papazof added a commit that referenced this pull request Apr 28, 2026
Integrate CI with the release orchestration process introduced in
nubificus/vaccel#210:
- Add job to notify the orchestrator after artifact build and upload
- Add workflow to prepare a release PR with core dependency bump

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
papazof added a commit that referenced this pull request Apr 28, 2026
Update build and CI with new component versioning scheme:
- Switch to custom versioning in `pyproject.toml`/`setup.py` to strip
  newly added version/tag metadata from wheels and generate
  PyPI-compatible versions
- Add explicit dependency to core vAccel C package in wheel metadata
- Amend `dispatch-prepare-release` workflow to reflect build versioning
  changes
- Remove local `upload-to-s3` action and override the newly introduced
  upstream `generate-latest-artifacts` action with the package
  versioning scheme

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
papazof added a commit that referenced this pull request Apr 28, 2026
Replace third-party actions with the GH CLI to trigger the docs update
workflow and parse the result, since the GitHub dispatch API now returns
the triggered run URL directly

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
@papazof papazof deleted the ci_add_release_orchestration branch April 28, 2026 15:15
papazof added a commit that referenced this pull request Apr 28, 2026
Add `schedule-update-notice` to bump the end year in the NOTICE
`Copyright YYYY-YYYY` range by triggering `update-notice-year` on
January 1st and on manual dispatch. The workflow opens a PR if the file
needs an update.

PR: #34
Signed-off-by: Kostis Papazafeiropoulos <[email protected]>
Reviewed-by: Anastassios Nanos <[email protected]>
Approved-by: Anastassios Nanos <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants