gitlab-labkit 0.37.0 → 0.40.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bc40f1e37b87feea515d17caacf51c043e334fdd2cb2ae12689425dac2c2abaa
-  data.tar.gz: 872361b6e95fbd14768ed454afd9ab5aeff18136d62ac7e46d0b636a2ea7877d
+  metadata.gz: 570e79f377fc9cfa11a87177437e6f66a6ed78c94958ad999744034922011e31
+  data.tar.gz: a58252e9bb1792ac0e6ca7e65d565f49803e917eb845de065ffb4921b1bf405c
 SHA512:
-  metadata.gz: b75ee05daa1bcfe02e939a7573326c3850ce412b5b753fee6b6139ca323329def13d94a603651a58150e1905fd0c6a9cb6004f6c24190302bb34d9a9d06c1bbc
-  data.tar.gz: 0bc7e7d9f5d877626691418da58d7ba4c660cd09533d44c0d6295a8edefb40f193ddfe865e10b434b266a6be42cfed10d6953f273b3a5bae0663c411e7ccda94
+  metadata.gz: eb4718ca04e0c5769180e3e23e3e658ea914a60c12142efc6f26bfc8f25b9a29d467c1c8fb582f23827c4e6cf3c9d72e65d7a7a469ab37465eb479f650e8269a
+  data.tar.gz: 90c9bff31da38826e4d60d6ac623f97257a78fbea63ea86aba8a15dd22df69e069ed628af48fc5f4695d58f1157c098f22a8e9676f97e8345522073349603bf5

data/.copier-answers.yml

@@ -0,0 +1,16 @@
+# This project was initially generated with
+# https://gitlab.com/gitlab-com/gl-infra/common-template-copier
+# See the project for instructions on how to update the project
+#
+# Changes here will be overwritten by Copier; NEVER EDIT MANUALLY
+_commit: v1.35.1
+_src_path: https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git
+ee_licensed: false
+golang: false
+helm: false
+initial_codeowners: '@reprazent @andrewn @mkaeppler @ayufan'
+jsonnet: false
+project_name: labkit-ruby
+ruby: true
+rubygem: true
+terraform: false

data/.editorconfig

@@ -0,0 +1,28 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[.copier-*.yml]
+insert_final_newline = unset
+indent_size = unset
+
+[*.md]
+indent_size = unset
+
+[{Makefile,**.mk}]
+# Use tabs for indentation (Makefiles require tabs)
+indent_style = tab
+
+[*.rego]
+indent_style = tab

data/.gitlab-ci-asdf-versions.yml

@@ -0,0 +1,5 @@
+# DO NOT MANUALLY EDIT; Run ./scripts/update-asdf-version-variables.sh to update this
+variables:
+    GL_ASDF_RUBY_VERSION: "3.4.5"
+    GL_ASDF_SHELLCHECK_VERSION: "0.10.0"
+    GL_ASDF_SHFMT_VERSION: "3.12"

data/.gitlab-ci.yml

@@ -1,57 +1,52 @@
-variables:
-  RUBY_VERSION: "3.1.5"
-
-default:
-  image: "ruby:${RUBY_VERSION}"
+stages:
+  - validate
+  - release
+  - renovate_bot
 
+# Prevent double-pipelines for branch pipelines vs. merge request pipelines
 workflow:
   rules:
-    # For merge requests, create a pipeline.
-    - if: '$CI_MERGE_REQUEST_IID'
-    # For `master` branch, create a pipeline (this includes on schedules, pushes, merges, etc.).
-    - if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
-    # For tags, create a pipeline.
-    - if: '$CI_COMMIT_TAG'
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS
+      when: never
+    - if: $CI_COMMIT_BRANCH
+    - if: $CI_COMMIT_TAG
 
 include:
-  - component: ${CI_SERVER_FQDN}/gitlab-org/components/danger-review/danger-review@1.4.1
-    inputs:
-      job_image: "ruby:${RUBY_VERSION}"
+  - local: .gitlab-ci-asdf-versions.yml
+
+  # This template should be included in all Infrastructure projects.
+  # It includes standard checks, gitlab-scanners, validations and release processes
+  # common to all projects using this template library.
+  # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/standard.md
+  - component: $CI_SERVER_FQDN/gitlab-com/gl-infra/common-ci-tasks/standard-build@v2.78
+
+  # Runs rspec tests and rubocop on the project
+  # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/ruby.md
+  - component: $CI_SERVER_FQDN/gitlab-com/gl-infra/common-ci-tasks/ruby-build@v2.78
+
+  - component: $CI_SERVER_FQDN/gitlab-com/gl-infra/common-ci-tasks/danger@v2.78
 
 .test_template: &test_definition
+  extends: .with_bundle
   image: ruby:${RUBY_VERSION}
-  stage: test
+  stage: validate
   script:
     - gem install bundler --no-document
     - bundle config --local path vendor
     - bundle install
     - bundle exec rake verify build install
-  cache:
-    key: ${CI_JOB_IMAGE}
-    paths:
-      - vendor/ruby
-ruby:
+
+ruby-versions:
   <<: *test_definition
   parallel:
     matrix:
-      - RUBY_VERSION: ["3.0", "3.1", "3.2"]
-
-static-analysis:
-  before_script:
-    - bundle install
-  script:
-    - rake verify
+      - RUBY_VERSION: ["3.2", "3.3"]
 
 deploy:
-  stage: deploy
+  rules:
+    - if: $CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+/
+  extends: .with_bundle
+  stage: release
   script:
     - tools/deploy-rubygem.sh
-  only:
-    - tags
-
-release:
-  stage: deploy
-  script:
-    - tools/update-changelog.rb "${CI_COMMIT_TAG}"
-  only:
-    - tags

data/.gitleaks.toml

@@ -0,0 +1,10 @@
+title = "project-scoped gitleaks config"
+
+[extend]
+# useDefault will extend the base configuration with the default gitleaks config:
+# https://github.com/zricethezav/gitleaks/blob/master/config/gitleaks.toml
+useDefault = true
+
+# See https://github.com/zricethezav/gitleaks#configuration
+# for details of extending this configuration for allowlists,
+# etc

data/.mise.toml

@@ -0,0 +1,8 @@
+[settings]
+legacy_version_file = false
+
+[tools]
+# Please continue to use `.tool-versions` to specify tool versions, rather than adding them directly here.
+
+[plugins]
+# Use this section to configure the source of any custom mise/asdf plugin

data/.pre-commit-config.yaml

@@ -0,0 +1,38 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+---
+# Use exclude to exclude specific files
+# exclude: '^fixtures/'
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0  # renovate:managed
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-case-conflict
+      - id: check-symlinks
+      - id: check-json
+      - id: detect-private-key
+      - id: mixed-line-ending
+        args: ["--fix=lf"]
+      - id: no-commit-to-branch
+        args: [--branch, main]
+      - id: pretty-format-json
+        args: [--autofix, --no-sort-keys]
+
+  # pre-commit tasks from common-ci-tasks
+  # Documentation available at
+  # https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/docs/pre-commit.md
+  - repo: https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks
+    rev: v2.85  # renovate:managed
+
+    hooks:
+      - id: shellcheck  # Run shellcheck for changed Shell files
+      - id: shfmt  # Run shellcheck for changed Shell files
+      - id: update-asdf-version-variables  # Update .gitlab-ci-asdf-versions.yml if .tool-versions has changed
+
+      # - id: gitlint  # Checks your git commit messages for style
+      - id: gitleaks  #  Detect hardcoded secrets using Gitleaks
+      - id: editorconfig  # Validate text files against .editorconfig
+      - id: yamllint  # Validate YAML files using yamllint

data/.releaserc.json

@@ -0,0 +1,19 @@
+{
+  "branches": ["master"],
+  "plugins": [
+    [
+      "@semantic-release/commit-analyzer",
+      {
+        "preset": "conventionalcommits"
+      }
+    ],
+    [
+      "@semantic-release/release-notes-generator",
+      {
+        "preset": "conventionalcommits"
+      }
+    ],
+    "@gitlab/truncated-tags",
+    "@semantic-release/gitlab"
+  ]
+}

data/.rubocop.yml

@@ -5,61 +5,4 @@ inherit_gem:
     - rubocop-default.yml
 
 AllCops:
-  TargetRubyVersion: 2.7
-
-Style/HashSyntax:
-  EnforcedStyle: no_mixed_keys
-
-Style/SymbolLiteral:
-  Enabled: No
-
-Style/TrailingCommaInArguments:
-  Enabled: No # Delegated to rufo
-
-Style/TrailingCommaInHashLiteral:
-  Enabled: No # Delegated to rufo
-
-Style/FrozenStringLiteralComment:
-  EnforcedStyle: always
-
-Style/TrailingCommaInArrayLiteral:
-  EnforcedStyleForMultiline: comma
-
-Style/StringLiterals:
-  EnforcedStyle: double_quotes
-
-Style/StringLiteralsInInterpolation:
-  EnforcedStyle: double_quotes
-
-Style/Lambda:
-  Enabled: false
-
-Layout/LineLength:
-  Enabled: false
-
-Layout/SpaceInLambdaLiteral:
-  Enabled: No
-
-Layout/SpaceInsideBlockBraces:
-  Enabled: No
-
-Layout/FirstParameterIndentation:
-  Enabled: No
-
-RSpec/ExampleWording:
-  Enabled: false
-  CustomTransform:
-    be: is
-    have: has
-    not: does not
-  IgnoredWords: []
-
-Lint/HashCompareByIdentity: # (new in 0.93)
-  Enabled: true
-Lint/RedundantSafeNavigation: # (new in 0.93)
-  Enabled: true
-Style/ClassEqualityComparison: # (new in 0.93)
-  Enabled: true
-
-CodeReuse/ActiveRecord:
-  Enabled: false
+  NewCops: enable