newrelic_rpm 6.9.0.363 → 6.13.1

data/.github/actions/build-ruby/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "newrelic-build-ruby",
+  "version": "1.0.0",
+  "description": "Builds various flavors of Ruby on Ubuntu",
+  "main": "index.js",
+  "scripts": {
+    "lint": "eslint *.js",
+    "package": "ncc build index.js -o dist"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/newrelic/newrelic-ruby-agent.git"
+  },
+  "keywords": [
+    "NewRelic",
+    "GitHub",
+    "Actions",
+    "Ruby"
+  ],
+  "bugs": {
+    "url": "https://github.com/newrelic/newrelic-ruby-agent/issues"
+  },
+  "author": "New Relic",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@actions/cache": "^1.0.2",
+    "@actions/core": "^1.2.4",
+    "@actions/exec": "^1.0.4",
+    "@actions/io": "^1.0.2",
+    "ncc": "^0.3.6"
+  }
+}

data/.github/actions/build-ruby/pre-commit

@@ -0,0 +1,5 @@
+#!/bin/sh
+set -e
+cd .github/actions/build-ruby 
+yarn run package
+exec git add dist/index.js

data/.github/pull_request_template.md

@@ -0,0 +1,16 @@
+_Before contributing, please read our [contributing guidelines](https://github.com/newrelic/newrelic-ruby-agent/blob/main/CONTRIBUTING.md) and [code of conduct](https://github.com/newrelic/.github/blob/master/CODE_OF_CONDUCT.md)._
+
+# Overview
+Describe the changes present in the pull request
+
+# Related Github Issue
+Include a link to the related GitHub issue, if applicable
+
+# Testing
+The agent includes a suite of unit and functional tests which should be used to
+verify your changes don't break existing functionality. These tests will run with 
+Github Actions when a pull request is made. More details on running the tests locally can be found 
+[here for our unit tests](https://github.com/newrelic/newrelic-ruby-agent/blob/main/test/README.md), 
+and [here for our functional tests](https://github.com/newrelic/newrelic-ruby-agent/blob/main/test/multiverse/README.md).
+For most contributions it is strongly recommended to add additional tests which
+exercise your changes. 

data/.github/workflows/ci.yml

@@ -0,0 +1,212 @@
+name: Continuous Integration
+
+on: 
+  push: 
+    branches:
+      - main
+      - dev
+  pull_request:
+
+jobs:
+  build-ruby:
+    runs-on: ubuntu-latest
+    strategy: 
+      matrix: 
+        ruby-version: [2.0.0-p648, 2.1.10, 2.2.10, 2.3.8, 2.4.10, 2.5.8, 2.6.6, 2.7.1, jruby-9.2.12.0]
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Build Ruby ${{ matrix.ruby-version }}
+        uses: ./.github/actions/build-ruby
+        with:
+          ruby-version: ${{ matrix.ruby-version }}
+  
+  mini-env:
+    needs: build-ruby
+    runs-on: ubuntu-latest
+    strategy: 
+      fail-fast: false
+      matrix: 
+        rails: [norails, rails60, rails52, rails51, rails42, rails41, rails40, rails32, rails31, rails30]
+        ruby-version: [2.0.0-p648, 2.1.10, 2.2.10, 2.3.8, 2.4.10, 2.5.8, 2.6.6, 2.7.1, jruby-9.2.12.0]
+        exclude:
+          - ruby-version: "2.7.1"
+            rails: rails30
+          - ruby-version: "2.7.1"
+            rails: rails31
+          - ruby-version: "2.7.1"
+            rails: rails32
+          - ruby-version: "2.7.1"
+            rails: rails40
+          - ruby-version: "2.7.1"
+            rails: rails41
+          - ruby-version: "2.7.1"
+            rails: rails42
+          - ruby-version: "2.7.1"
+            rails: rails50
+          - ruby-version: "2.7.1"
+            rails: rails51
+          - ruby-version: "2.7.1"
+            rails: rails52
+          - ruby-version: "2.6.6"
+            rails: rails30
+          - ruby-version: "2.6.6"
+            rails: rails31
+          - ruby-version: "2.6.6"
+            rails: rails32
+          - ruby-version: "2.6.6"
+            rails: rails40
+          - ruby-version: "2.6.6"
+            rails: rails41
+          - ruby-version: "2.5.8"
+            rails: rails30
+          - ruby-version: "2.5.8"
+            rails: rails31
+          - ruby-version: "2.5.8"
+            rails: rails40
+          - ruby-version: "2.5.8"
+            rails: rails41
+          - ruby-version: "2.4.10"
+            rails: rails30
+          - ruby-version: "2.4.10"
+            rails: rails31
+          - ruby-version: "2.4.10"
+            rails: rails40
+          - ruby-version: "2.4.10"
+            rails: rails41
+          - ruby-version: "2.4.10"
+            rails: rails60
+          - ruby-version: "2.3.8"
+            rails: rails60
+          - ruby-version: "2.2.10"
+            rails: rails60
+          - ruby-version: "2.1.10"
+            rails: rails50
+          - ruby-version: "2.1.10"
+            rails: rails51
+          - ruby-version: "2.1.10"
+            rails: rails52
+          - ruby-version: "2.1.10"
+            rails: rails60
+          - ruby-version: "2.0.0-p648"
+            rails: rails50
+          - ruby-version: "2.0.0-p648"
+            rails: rails51
+          - ruby-version: "2.0.0-p648"
+            rails: rails52
+          - ruby-version: "2.0.0-p648"
+            rails: rails60
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails30
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails31
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails32
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails40
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails41
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails60
+          - ruby-version: "jruby-9.2.12.0"
+            rails: rails52
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Build Ruby ${{ matrix.ruby-version }}
+        uses: ./.github/actions/build-ruby
+        with:
+          ruby-version: ${{ matrix.ruby-version }}
+
+      - name: Start mysql
+        run: sudo systemctl start mysql
+
+      - name: Run Unit Tests
+        uses: nick-invision/retry@v1.0.0
+        with:
+          timeout_minutes: 20
+          max_attempts: 2
+          command:  bundle exec rake test:env[${{ matrix.rails }}] TESTOPTS="--verbose"
+        env:
+          DB_PORT: 3306
+          MYSQL_PASSWORD: root
+
+  multiverse:
+    needs: build-ruby
+    runs-on: ubuntu-latest
+    services:
+      redis:
+        image: redis
+        ports:
+          - 6379:6379
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      mongodb:
+        image: mongo
+        ports:
+          - 27017:27017
+      rabbitmq:
+        image: rabbitmq:latest
+        ports:
+          - 5672:5672
+        options: >-
+          --health-cmd "rabbitmqctl node_health_check" 
+          --health-interval 10s 
+          --health-timeout 5s 
+          --health-retries 5
+      memcached:
+        image: memcached:latest
+        ports:
+          - 11211:11211
+        options: >-
+          --health-cmd "timeout 5 bash -c 'cat < /dev/null > /dev/udp/127.0.0.1/11211'" 
+          --health-interval 10s 
+          --health-timeout 5s 
+          --health-retries 5
+
+    strategy:
+      fail-fast: false
+      matrix:
+        multiverse: [agent, api, background, background_2, database, httpclients, rails, rest, serialization, sinatra]
+        ruby-version: [2.0.0-p648, 2.1.10, 2.2.10, 2.3.8, 2.4.10, 2.5.8, 2.6.6, 2.7.1, jruby-9.2.12.0]
+        include:
+          - ruby-version: "2.7.1"
+            multiverse: infinite_tracing
+          - ruby-version: "2.6.6"
+            multiverse: infinite_tracing
+          - ruby-version: "2.5.8"
+            multiverse: infinite_tracing
+        exclude:
+          - ruby-version: "2.7.1"
+            multiverse: api
+          - ruby-version: "2.7.1"
+            multiverse: sinatra
+          - ruby-version: "jruby-9.2.12.0"
+            multiverse: agent
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Build Ruby ${{ matrix.ruby-version }}
+        uses: ./.github/actions/build-ruby
+        with:
+          ruby-version: ${{ matrix.ruby-version }}
+
+      - name: Start mysql
+        run: sudo systemctl start mysql
+
+      - name: Run Multiverse Tests
+        uses: nick-invision/retry@v1.0.0
+        with:
+          timeout_minutes: 30
+          max_attempts: 4
+          command:  bundle exec rake test:multiverse[group=${{ matrix.multiverse }},verbose]
+        env:
+          DB_PORT: 3306
+          MYSQL_PASSWORD: root
+
+      - name: Annotate errors
+        if: ${{ failure() }}
+        uses: ./.github/actions/annotate

data/.github/workflows/pr_review_checklist.yml

@@ -0,0 +1,22 @@
+name: PR Review Checklist
+
+on: 
+  pull_request:
+    types: [opened]
+
+jobs:
+  sidekick_checklist:
+    name: 
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checklist
+        uses: unsplash/comment-on-pr@master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          msg: "PR review checklist:\n
+- [ ] Perform code review\n
+- [ ] Add performance label\n
+- [ ] Perform appropriate level of performance testing\n
+- [ ] Confirm all checks passed\n
+- [ ] Add version label prior to acceptance"  

data/.github/workflows/release.yml

@@ -0,0 +1,78 @@
+name: Release
+
+on: 
+  push: 
+    branches:
+      - main
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+      with:
+        fetch-depth: 0
+    - name: update rubygems
+      run: gem update --system
+    - name: Install onetimepass
+      run: pip install onetimepass
+    - name: Configure gem credentials
+      run: |
+        echo ::set-env name=GEM_HOST_API_KEY::${{ secrets.RUBYGEMS_API_KEY }}
+        echo ::set-env name=RUBYGEMS_MFA_KEY::${{ secrets.RUBYGEMS_MFA_KEY }}
+    - name: Build newrelic_rpm gem
+      run: gem build newrelic_rpm.gemspec
+    - name: Build newrelic-infinite_tracing gem
+      run: |
+        cd infinite_tracing
+        gem build newrelic-infinite_tracing.gemspec
+        cd ..
+    - name: Determine version
+      run: |
+        echo ::set-env name=VERSION::$(ls newrelic_rpm-*.gem | ruby -pe 'sub(/newrelic_rpm\-(.*).gem/, "\\1")')
+    - name: Tag new version
+      run: |
+        if [ $(git tag -l ${{ env.VERSION }}) ]; then
+          echo "Tag already created for this version"
+        else
+          git tag ${{ env.VERSION }}
+          git push origin ${{ env.VERSION }}
+        fi
+
+    - name: Obtain OTP to publish newrelic_rpm to rubygems.org
+      run: echo ::set-env name=RUBYGEMS_OTP::$(python ./.github/workflows/scripts/rubygems-authenticate.py RUBYGEMS_MFA_KEY)
+    - name: Publish newrelic_rpm to rubygems.org
+      run: ruby ./.github/workflows/scripts/rubygems-publish.rb newrelic_rpm
+
+    - name: Obtain OTP to publish newrelic-infinite_tracing to rubygems.org
+      run: echo ::set-env name=RUBYGEMS_OTP::$(python ./.github/workflows/scripts/rubygems-authenticate.py RUBYGEMS_MFA_KEY)
+    - name: Publish newrelic-infinite_tracing to rubygems.org
+      run: ruby ./.github/workflows/scripts/rubygems-publish.rb infinite_tracing/newrelic-infinite_tracing
+
+    - name: Update system configuration page
+      run: |
+        PAYLOAD="{
+             \"system_configuration\": {
+               \"key\":   \"ruby_agent_version\",
+               \"value\": \"${{ env.VERSION }}\"
+            }
+          }"
+        CONTENT_TYPE='Content-Type: application/json'
+
+        # STAGING
+        curl -X POST 'https://staging-api.newrelic.com/v2/system_configuration.json' \
+          -H "X-Api-Key:${{ secrets.NEW_RELIC_API_KEY_STAGING }}" -i \
+          -H "$CONTENT_TYPE" \
+          -d "$PAYLOAD"
+
+        # PRODUCTION
+        curl -X POST 'https://api.newrelic.com/v2/system_configuration.json' \
+          -H "X-Api-Key:${{ secrets.NEW_RELIC_API_KEY_PRODUCTION }}" -i \
+          -H "$CONTENT_TYPE" \
+          -d "$PAYLOAD"
+
+        # EU PRODUCTION
+        curl -X POST 'https://api.eu.newrelic.com/v2/system_configuration.json' \
+          -H "X-Api-Key:$ {{ secrets.NEW_RELIC_API_KEY_PRODUCTION }}" -i \
+          -H "$CONTENT_TYPE" \
+          -d "$PAYLOAD"

data/.github/workflows/scripts/rubygems-authenticate.py

@@ -0,0 +1,13 @@
+import os
+
+import argparse
+import onetimepass
+
+if __name__ == '__main__':
+
+    parser = argparse.ArgumentParser(
+        description='Generate a one-time password from a key'
+    )
+    parser.add_argument('env_var', type=str, help='The name of the environment variable from which to load the MFA key from the service')
+    args = parser.parse_args()
+    print(onetimepass.get_totp(os.getenv(args.env_var)))

data/.github/workflows/scripts/rubygems-publish.rb

@@ -0,0 +1,32 @@
+gem_name = ARGV[0]
+raise "gem name sans version must be supplied" if gem_name.to_s == ""
+
+api_key = ENV["GEM_HOST_API_KEY"]
+raise "GEM_HOST_API_KEY must be set" if api_key.to_s == ""
+
+version = ENV["VERSION"]
+raise "VERSION environment must be set" if version.to_s == ""
+
+gem_filename = "#{gem_name}-#{version}.gem"
+raise "#{gem_filename} is missing!" unless File.exist?(gem_filename)
+
+otp = ENV["RUBYGEMS_OTP"]
+raise "RUBYGEMS_OTP environment must be set" if otp.to_s == ""
+
+puts "Publshing the #{gem_filename} file..."
+cmd = "gem push --otp #{otp} #{gem_filename}"
+puts "executing: #{cmd}"
+
+result = `#{cmd}`
+if $?.to_i.zero?
+  puts "#{gem_filename} successfully pushed to rubygems.org!"
+else
+  if result =~ /Repushing of gem versions is not allowed/
+    puts "Pushing #{gem_filename} skipped because this version is already published to rubygems.org!"
+    exit 0
+  else
+    puts "#{gem_filename} failed to push to rubygems.org!"
+    puts result
+    exit 1
+  end
+end

data/.github/workflows/snyk.yml

@@ -0,0 +1,27 @@
+name: Snyk Check
+
+on: 
+  schedule:
+    - cron: "0 7 * * *" 
+  pull_request:
+    branches:
+      - main
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Setup Ruby
+        uses: actions/setup-ruby@v1
+        with:
+          ruby-version: 2.6
+      - name: Bundle
+        run: bundle install
+      - name: Run Snyk
+        uses: snyk/actions/ruby@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: test