gitlab-labkit 0.36.1 → 0.38

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2a925d40e6a5ac8cd638b96cff81f08eaa83f7a7d10399cd3f924d74558eba7d
-  data.tar.gz: ae2a5242670a7a6ca2ae7c8772e032aeddd0e6132636bc3365de009b67132502
+  metadata.gz: 6c078a5d36ecffe4c1b7decf900279045a99683a4e60ffc28a5e045f9b4e23fc
+  data.tar.gz: 38583a88f2da4682b79d272e53dff3467df4737b46ac59f1e38e86a6aef69d00
 SHA512:
-  metadata.gz: 400defec6c30cefe51e4bca0bdf5f92cb5c170f4088c29bf994845d9b28fab49a87fea154f8aa8ab76db3b953141ecddd50ed43822f31e81629d88f93b0c088f
-  data.tar.gz: f8334faa33fb62610e5dc3ddb6566e12f8af6cd49c5364e15d53aab49086d76c6bc89a9aa259e91b5134148e86c9b08154c09929df30c4a6a3d632004a488c48
+  metadata.gz: a399db16f8f8395e9d60ad1a994e888fbeaa5a4d4a97377ed25151f434bdcc9ba4f2ef0abcb7d4bed14a0e8578c8c22fa706b185c1a337bb4f3af204709ee101
+  data.tar.gz: bb760a9bcd6e37d55d231a0d820cc055cfdad381d0d6b784701e4a088a78ccee20d9bae3d510dd970b0ba08276c67b53b3fa0bdc4d9a63bc2e3a9b3715716cac

data/.copier-answers.yml

@@ -0,0 +1,15 @@
+# This project was initially generated with
+# https://gitlab.com/gitlab-com/gl-infra/common-template-copier
+# See the project for instructions on how to update the project
+#
+# Changes here will be overwritten by Copier; NEVER EDIT MANUALLY
+_commit: v1.31.0
+_src_path: https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git
+ee_licensed: false
+golang: false
+initial_codeowners: '@reprazent @andrewn @mkaeppler @ayufan'
+jsonnet: false
+project_name: labkit-ruby
+ruby: true
+rubygem: true
+terraform: false

data/.editorconfig

@@ -0,0 +1,28 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[.copier-*.yml]
+insert_final_newline = unset
+indent_size = unset
+
+[*.md]
+indent_size = unset
+
+[{Makefile,**.mk}]
+# Use tabs for indentation (Makefiles require tabs)
+indent_style = tab
+
+[*.rego]
+indent_style = tab

data/.gitlab-ci-asdf-versions.yml

@@ -0,0 +1,5 @@
+# DO NOT MANUALLY EDIT; Run ./scripts/update-asdf-version-variables.sh to update this
+variables:
+    GL_ASDF_RUBY_VERSION: "3.4.4"
+    GL_ASDF_SHELLCHECK_VERSION: "0.10.0"
+    GL_ASDF_SHFMT_VERSION: "3.11.0"

data/.gitlab-ci.yml

@@ -1,59 +1,58 @@
-default:
-  image: ruby:3.1
+stages:
+  - validate
+  - release
+  - renovate_bot
 
+# Prevent double-pipelines for branch pipelines vs. merge request pipelines
 workflow:
   rules:
-    # For merge requests, create a pipeline.
-    - if: '$CI_MERGE_REQUEST_IID'
-    # For `master` branch, create a pipeline (this includes on schedules, pushes, merges, etc.).
-    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
-    # For tags, create a pipeline.
-    - if: '$CI_COMMIT_TAG'
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS
+      when: never
+    - if: $CI_COMMIT_BRANCH
+    - if: $CI_COMMIT_TAG
+
+include:
+  - local: .gitlab-ci-asdf-versions.yml
+
+  # This template should be included in all Infrastructure projects.
+  # It includes standard checks, gitlab-scanners, validations and release processes
+  # common to all projects using this template library.
+  # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/standard.md
+  - project: "gitlab-com/gl-infra/common-ci-tasks"
+    ref: v2.77 # renovate:managed
+    file: templates/standard.yml
+
+  # Runs rspec tests and rubocop on the project
+  # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/ruby.md
+  - project: "gitlab-com/gl-infra/common-ci-tasks"
+    ref: v2.77 # renovate:managed
+    file: templates/ruby.yml
+
+  - project: "gitlab-com/gl-infra/common-ci-tasks"
+    ref: v2.77 # renovate:managed
+    file: "danger.yml"
 
 .test_template: &test_definition
+  extends: .with_bundle
   image: ruby:${RUBY_VERSION}
-  stage: test
+  stage: validate
   script:
     - gem install bundler --no-document
     - bundle config --local path vendor
     - bundle install
     - bundle exec rake verify build install
-  cache:
-    key: ${CI_JOB_IMAGE}
-    paths:
-      - vendor/ruby
-ruby:
+
+ruby-versions:
   <<: *test_definition
   parallel:
     matrix:
-      - RUBY_VERSION: ["3.0", "3.1", "3.2"]
-
-static-analysis:
-  before_script:
-    - bundle install
-  script:
-    - rake verify
-
-danger-review:
-  stage: test
-  except:
-    - tags
-    - master
-  before_script:
-    - bundle install
-  script:
-    - bundle exec danger --fail-on-errors=true --verbose
+      - RUBY_VERSION: ["3.2", "3.3"]
 
 deploy:
-  stage: deploy
+  rules:
+    - if: $CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+/
+  extends: .with_bundle
+  stage: release
   script:
     - tools/deploy-rubygem.sh
-  only:
-    - tags
-
-release:
-  stage: deploy
-  script:
-    - tools/update-changelog.rb "${CI_COMMIT_TAG}"
-  only:
-    - tags

data/.gitleaks.toml

@@ -0,0 +1,10 @@
+title = "project-scoped gitleaks config"
+
+[extend]
+# useDefault will extend the base configuration with the default gitleaks config:
+# https://github.com/zricethezav/gitleaks/blob/master/config/gitleaks.toml
+useDefault = true
+
+# See https://github.com/zricethezav/gitleaks#configuration
+# for details of extending this configuration for allowlists,
+# etc

data/.mise.toml

@@ -0,0 +1,8 @@
+[settings]
+legacy_version_file = false
+
+[tools]
+# Please continue to use `.tool-versions` to specify tool versions, rather than adding them directly here.
+
+[plugins]
+# Use this section to configure the source of any custom mise/asdf plugin

data/.pre-commit-config.yaml

@@ -0,0 +1,38 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+---
+# Use exclude to exclude specific files
+# exclude: '^fixtures/'
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0  # renovate:managed
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-case-conflict
+      - id: check-symlinks
+      - id: check-json
+      - id: detect-private-key
+      - id: mixed-line-ending
+        args: ["--fix=lf"]
+      - id: no-commit-to-branch
+        args: [--branch, main]
+      - id: pretty-format-json
+        args: [--autofix, --no-sort-keys]
+
+  # pre-commit tasks from common-ci-tasks
+  # Documentation available at
+  # https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/docs/pre-commit.md
+  - repo: https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks
+    rev: v2.77  # renovate:managed
+
+    hooks:
+      - id: shellcheck  # Run shellcheck for changed Shell files
+      - id: shfmt  # Run shellcheck for changed Shell files
+      - id: update-asdf-version-variables  # Update .gitlab-ci-asdf-versions.yml if .tool-versions has changed
+
+      # - id: gitlint  # Checks your git commit messages for style
+      - id: gitleaks  #  Detect hardcoded secrets using Gitleaks
+      - id: editorconfig  # Validate text files against .editorconfig
+      - id: yamllint  # Validate YAML files using yamllint

data/.releaserc.json

@@ -0,0 +1,19 @@
+{
+  "branches": ["master"],
+  "plugins": [
+    [
+      "@semantic-release/commit-analyzer",
+      {
+        "preset": "conventionalcommits"
+      }
+    ],
+    [
+      "@semantic-release/release-notes-generator",
+      {
+        "preset": "conventionalcommits"
+      }
+    ],
+    "@gitlab/truncated-tags",
+    "@semantic-release/gitlab"
+  ]
+}

data/.rubocop.yml

@@ -5,61 +5,4 @@ inherit_gem:
     - rubocop-default.yml
 
 AllCops:
-  TargetRubyVersion: 2.7
-
-Style/HashSyntax:
-  EnforcedStyle: no_mixed_keys
-
-Style/SymbolLiteral:
-  Enabled: No
-
-Style/TrailingCommaInArguments:
-  Enabled: No # Delegated to rufo
-
-Style/TrailingCommaInHashLiteral:
-  Enabled: No # Delegated to rufo
-
-Style/FrozenStringLiteralComment:
-  EnforcedStyle: always
-
-Style/TrailingCommaInArrayLiteral:
-  EnforcedStyleForMultiline: comma
-
-Style/StringLiterals:
-  EnforcedStyle: double_quotes
-
-Style/StringLiteralsInInterpolation:
-  EnforcedStyle: double_quotes
-
-Style/Lambda:
-  Enabled: false
-
-Layout/LineLength:
-  Enabled: false
-
-Layout/SpaceInLambdaLiteral:
-  Enabled: No
-
-Layout/SpaceInsideBlockBraces:
-  Enabled: No
-
-Layout/FirstParameterIndentation:
-  Enabled: No
-
-RSpec/ExampleWording:
-  Enabled: false
-  CustomTransform:
-    be: is
-    have: has
-    not: does not
-  IgnoredWords: []
-
-Lint/HashCompareByIdentity: # (new in 0.93)
-  Enabled: true
-Lint/RedundantSafeNavigation: # (new in 0.93)
-  Enabled: true
-Style/ClassEqualityComparison: # (new in 0.93)
-  Enabled: true
-
-CodeReuse/ActiveRecord:
-  Enabled: false
+  NewCops: enable