@devopsplaybook.io/common-utils 1.10.1-beta.23.b1906d7 → 1.11.0-beta.24.d8f9aef

package/.github/workflows/reusable-merge-build.yml

@@ -1,197 +0,0 @@
-name: "Reusable: Merge Build"
-
-on:
-  workflow_call:
-    inputs:
-      docker_platforms:
-        description: "Docker platforms, used only by the fallback build when no PR image can be promoted"
-        required: false
-        type: string
-        default: "linux/arm64/v8,linux/amd64"
-      node_app_directories:
-        description: "Deprecated and unused. Kept so existing callers stay valid: the merge build runs no build, lint or test."
-        required: false
-        type: string
-        default: ""
-      node_version:
-        description: "Deprecated and unused. Kept so existing callers stay valid: the merge build runs no Node.js job."
-        required: false
-        type: string
-        default: "22"
-    secrets:
-      DOCKER_HUB_USERNAME:
-        required: true
-      DOCKER_HUB_ACCESS_TOKEN:
-        required: true
-      QUALITY_DASHBOARD_TOKEN:
-        required: false
-      QUALITY_DASHBOARD_URL:
-        required: false
-
-# Immutable build strategy: the image validated on the pull request is promoted
-# as-is, so merging runs no build, lint or test.
-#
-# `contents: read` only. Callers run with the default read-only token, whose
-# ceiling is `contents: read, pull-requests: none`, so requesting anything more
-# here makes the caller fail to start with "Invalid workflow file". The PR is
-# therefore resolved without needing pull-request scopes.
-permissions:
-  contents: read
-
-jobs:
-  promote-image:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@v4
-        with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
-
-      - name: Resolve the image validated by the merged PR
-        id: resolve
-        env:
-          GH_TOKEN: ${{ github.token }}
-          DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}
-        run: |
-          set -e
-          SERVICE_NAME=$(jq -r '.name' package.json)
-          SERVICE_VERSION=$(jq -r '.version' package.json)
-          IMAGE="${DOCKER_HUB_USERNAME}/${SERVICE_NAME}"
-
-          PR_NUMBER=""
-          PR_SOURCE="none"
-
-          # Preferred: ask the API which PR introduced this commit. This needs
-          # `pull-requests: read`, which callers on the default token are not
-          # granted, so a failure here is expected rather than exceptional.
-          PR_NUMBER=$(curl -sfL \
-            -H "Authorization: Bearer ${GH_TOKEN}" \
-            -H "Accept: application/vnd.github+json" \
-            "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/commits/${GITHUB_SHA}/pulls" \
-            | jq -r '.[0].number // empty' || true)
-          if [ -n "${PR_NUMBER}" ]; then
-            PR_SOURCE="api"
-          fi
-
-          # Fallback: parse the commit title, where GitHub writes the PR number
-          # for squash ("<title> (#123)") and merge ("Merge pull request #123")
-          # commits. Only the title is read, so a "fixes #99" reference in the
-          # commit body cannot select the wrong pull request.
-          if [ -z "${PR_NUMBER}" ]; then
-            TITLE=$(git log -1 --pretty=%s)
-            PR_NUMBER=$(printf '%s' "${TITLE}" | grep -oE '\(#[0-9]+\)' | tail -1 | tr -d '(#)' || true)
-            if [ -z "${PR_NUMBER}" ]; then
-              PR_NUMBER=$(printf '%s' "${TITLE}" | grep -oE 'Merge pull request #[0-9]+' | grep -oE '[0-9]+' | head -1 || true)
-            fi
-            if [ -n "${PR_NUMBER}" ]; then
-              PR_SOURCE="commit-title"
-            fi
-          fi
-
-          SOURCE_IMAGE=""
-          if [ -z "${PR_NUMBER}" ]; then
-            echo "::warning::No pull request found for ${GITHUB_SHA}, falling back to a build."
-          else
-            CANDIDATE="${IMAGE}:beta-pr-${PR_NUMBER}"
-            if docker buildx imagetools inspect "${CANDIDATE}" > /dev/null 2>&1; then
-              SOURCE_IMAGE="${CANDIDATE}"
-            else
-              echo "::warning::${CANDIDATE} not found in the registry, falling back to a build."
-            fi
-          fi
-
-          if [ -n "${SOURCE_IMAGE}" ]; then
-            STRATEGY="retag"
-          else
-            STRATEGY="build"
-          fi
-
-          {
-            echo "image=${IMAGE}"
-            echo "service_name=${SERVICE_NAME}"
-            echo "service_version=${SERVICE_VERSION}"
-            echo "pr_number=${PR_NUMBER}"
-            echo "pr_source=${PR_SOURCE}"
-            echo "source_image=${SOURCE_IMAGE}"
-            echo "strategy=${STRATEGY}"
-          } >> "${GITHUB_OUTPUT}"
-
-          echo "Service:  ${SERVICE_NAME} ${SERVICE_VERSION}"
-          echo "PR:       ${PR_NUMBER:-none} (resolved via ${PR_SOURCE})"
-          echo "Source:   ${SOURCE_IMAGE:-none}"
-          echo "Strategy: ${STRATEGY}"
-
-      - name: Promote the PR image to the release tags
-        if: steps.resolve.outputs.strategy == 'retag'
-        env:
-          RELEASE_IMAGE: ${{ steps.resolve.outputs.image }}
-          RELEASE_VERSION: ${{ steps.resolve.outputs.service_version }}
-          SOURCE_IMAGE: ${{ steps.resolve.outputs.source_image }}
-          MERGED_PR_NUMBER: ${{ steps.resolve.outputs.pr_number }}
-        run: |
-          set -e
-          MAJOR=$(echo "${RELEASE_VERSION}" | cut -f1 -d".")
-          MINOR=$(echo "${RELEASE_VERSION}" | cut -f1-2 -d".")
-
-          SOURCE_DIGEST=$(docker buildx imagetools inspect "${SOURCE_IMAGE}" --format '{{.Manifest.Digest}}')
-
-          echo "Promoting ${SOURCE_IMAGE} (PR #${MERGED_PR_NUMBER})"
-          echo "  digest ${SOURCE_DIGEST}"
-          echo "  -> ${RELEASE_IMAGE}:${RELEASE_VERSION}"
-          echo "  -> ${RELEASE_IMAGE}:${MAJOR}"
-          echo "  -> ${RELEASE_IMAGE}:${MINOR}"
-          echo "  -> ${RELEASE_IMAGE}:latest"
-
-          # --prefer-index=false forces a carbon copy of the source manifest, so
-          # the released image keeps the exact digest validated on the pull
-          # request. Without it, a single-platform source would be rewrapped into
-          # a new image index and the digest would change.
-          docker buildx imagetools create \
-            --prefer-index=false \
-            -t "${RELEASE_IMAGE}:${RELEASE_VERSION}" \
-            -t "${RELEASE_IMAGE}:${MAJOR}" \
-            -t "${RELEASE_IMAGE}:${MINOR}" \
-            -t "${RELEASE_IMAGE}:latest" \
-            "${SOURCE_IMAGE}"
-
-          # Fail loudly rather than publish an artifact that differs from the one
-          # tested on the pull request.
-          for TAG in "${RELEASE_VERSION}" "${MAJOR}" "${MINOR}" "latest"; do
-            PROMOTED_DIGEST=$(docker buildx imagetools inspect "${RELEASE_IMAGE}:${TAG}" --format '{{.Manifest.Digest}}')
-            if [ "${PROMOTED_DIGEST}" != "${SOURCE_DIGEST}" ]; then
-              echo "::error::${RELEASE_IMAGE}:${TAG} has digest ${PROMOTED_DIGEST}, expected ${SOURCE_DIGEST}"
-              exit 1
-            fi
-            echo "  verified ${RELEASE_IMAGE}:${TAG} -> ${PROMOTED_DIGEST}"
-          done
-
-      - name: Build and Push Docker Image (fallback)
-        if: steps.resolve.outputs.strategy == 'build'
-        env:
-          RELEASE_IMAGE: ${{ steps.resolve.outputs.image }}
-          RELEASE_VERSION: ${{ steps.resolve.outputs.service_version }}
-          DOCKER_PLATFORMS: ${{ inputs.docker_platforms }}
-        run: |
-          set -e
-          MAJOR=$(echo "${RELEASE_VERSION}" | cut -f1 -d".")
-          MINOR=$(echo "${RELEASE_VERSION}" | cut -f1-2 -d".")
-
-          echo "Building ${RELEASE_IMAGE}:${RELEASE_VERSION} from ${GITHUB_SHA}"
-          docker buildx build \
-            --platform "${DOCKER_PLATFORMS}" \
-            --push \
-            -f Dockerfile \
-            -t "${RELEASE_IMAGE}:latest" \
-            -t "${RELEASE_IMAGE}:${RELEASE_VERSION}" \
-            -t "${RELEASE_IMAGE}:${MAJOR}" \
-            -t "${RELEASE_IMAGE}:${MINOR}" \
-            .

package/.github/workflows/reusable-npm-merge.yml

@@ -1,135 +0,0 @@
-name: "Reusable: NPM Merge"
-
-on:
-  workflow_call:
-    inputs:
-      node_version:
-        description: "Node.js version to use"
-        required: false
-        type: string
-        default: "22"
-      npm_package_name:
-        description: "NPM package name (e.g. @devopsplaybook.io/otel-utils)"
-        required: true
-        type: string
-    secrets:
-      NPM_TOKEN:
-        required: true
-      QUALITY_DASHBOARD_TOKEN:
-        required: false
-      QUALITY_DASHBOARD_URL:
-        required: false
-
-jobs:
-  test-and-build:
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version: ${{ inputs.node_version }}
-          cache: "npm"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run linting
-        run: npm run lint
-
-      - name: Run tests
-        run: npm test
-
-      - name: Zip coverage and upload to Quality Dashboard
-        if: always()
-        env:
-          QUALITY_DASHBOARD_URL: ${{ secrets.QUALITY_DASHBOARD_URL }}
-          QUALITY_DASHBOARD_TOKEN: ${{ secrets.QUALITY_DASHBOARD_TOKEN }}
-        run: |
-          PACKAGE_NAME=$(node -p "require('./package.json').name")
-          REPORT_KEY=$(echo "$PACKAGE_NAME" | sed 's/[^a-zA-Z0-9._:\-\/]/_/g')
-          REPORT_KEY="${REPORT_KEY}_coverage"
-
-          if [ -d coverage ]; then
-            if [ -z "$QUALITY_DASHBOARD_URL" ] || [ -z "$QUALITY_DASHBOARD_TOKEN" ]; then
-              echo "Quality Dashboard URL or token not set, skipping upload"
-              exit 0
-            fi
-            # Zip coverage contents at root level so the jest processor
-            # finds coverage-final.json / clover.xml directly
-            (cd coverage && zip -r "${{ runner.temp }}/coverage.zip" .)
-
-            META=$(jq -n \
-              --arg key "$REPORT_KEY" \
-              --arg pkg "$PACKAGE_NAME" \
-              '{
-                key: $key,
-                displayName: "Coverage: \($pkg)",
-                processor: "jest"
-              }')
-
-            echo "Uploading coverage: $REPORT_KEY"
-            HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" \
-              -X POST "$QUALITY_DASHBOARD_URL/api/reports/" \
-              -H "x-upload-token: $QUALITY_DASHBOARD_TOKEN" \
-              -F "meta=$META" \
-              -F "file=@${{ runner.temp }}/coverage.zip" \
-              --max-time 30)
-
-            if [ "$HTTP_CODE" = "201" ]; then
-              echo "\u2713 Coverage uploaded ($HTTP_CODE)"
-            else
-              echo "\u26a0 Upload returned HTTP $HTTP_CODE"
-            fi
-          else
-            echo "No coverage/ directory found, skipping upload"
-          fi
-
-      - name: Build package
-        run: npm run build
-
-  publish-release:
-    runs-on: ubuntu-latest
-    needs: test-and-build
-
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          fetch-depth: 0
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version: ${{ inputs.node_version }}
-          cache: "npm"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build package
-        run: npm run build
-
-      - name: Check if version changed
-        id: version-check
-        run: |
-          CURRENT_VERSION=$(node -p "require('./package.json').version")
-          echo "current-version=${CURRENT_VERSION}" >> $GITHUB_OUTPUT
-
-          if npm view ${{ inputs.npm_package_name }}@${CURRENT_VERSION} version &> /dev/null; then
-            echo "version-exists=true" >> $GITHUB_OUTPUT
-            echo "Version ${CURRENT_VERSION} already exists on npm"
-          else
-            echo "version-exists=false" >> $GITHUB_OUTPUT
-            echo "Version ${CURRENT_VERSION} is new, will publish"
-          fi
-
-      - name: Publish release package
-        if: steps.version-check.outputs.version-exists == 'false'
-        run: |
-          echo "Publishing version ${{ steps.version-check.outputs.current-version }}"
-          npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/.github/workflows/reusable-npm-pr.yml

@@ -1,183 +0,0 @@
-name: "Reusable: NPM PR"
-
-on:
-  workflow_call:
-    inputs:
-      node_version:
-        description: "Node.js version to use"
-        required: false
-        type: string
-        default: "22"
-      npm_package_name:
-        description: "NPM package name (e.g. @devopsplaybook.io/otel-utils)"
-        required: true
-        type: string
-    secrets:
-      NPM_TOKEN:
-        required: true
-      QUALITY_DASHBOARD_TOKEN:
-        required: false
-      QUALITY_DASHBOARD_URL:
-        required: false
-
-jobs:
-  version-check:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Fetch main branch
-        run: git fetch origin main --depth=1
-
-      - name: Verify version is higher than main
-        run: |
-          PR_VERSION=$(jq -r '.version' package.json)
-          MAIN_VERSION=$(git show origin/main:package.json | jq -r '.version')
-
-          echo "PR version:   ${PR_VERSION}"
-          echo "Main version: ${MAIN_VERSION}"
-
-          if [ "$PR_VERSION" = "$MAIN_VERSION" ]; then
-            echo "::error::PR version (${PR_VERSION}) must be higher than main branch version (${MAIN_VERSION}). Please bump the version in package.json."
-            exit 1
-          fi
-
-          HIGHER=$(printf '%s\n%s' "$PR_VERSION" "$MAIN_VERSION" | sort -V | tail -n1)
-          if [ "$HIGHER" != "$PR_VERSION" ]; then
-            echo "::error::PR version (${PR_VERSION}) is lower than main branch version (${MAIN_VERSION}). Please bump the version in package.json."
-            exit 1
-          fi
-
-          echo "Version check passed: ${PR_VERSION} > ${MAIN_VERSION}"
-
-  test-and-build:
-    needs: version-check
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version: ${{ inputs.node_version }}
-          cache: "npm"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run linting
-        run: npm run lint
-
-      - name: Run tests
-        run: npm test
-
-      - name: Zip coverage and upload to Quality Dashboard
-        if: always()
-        env:
-          QUALITY_DASHBOARD_URL: ${{ secrets.QUALITY_DASHBOARD_URL }}
-          QUALITY_DASHBOARD_TOKEN: ${{ secrets.QUALITY_DASHBOARD_TOKEN }}
-        run: |
-          PACKAGE_NAME=$(node -p "require('./package.json').name")
-          REPORT_KEY=$(echo "$PACKAGE_NAME" | sed 's/[^a-zA-Z0-9._:\-\/]/_/g')
-          REPORT_KEY="${REPORT_KEY}_coverage"
-
-          if [ -d coverage ]; then
-            if [ -z "$QUALITY_DASHBOARD_URL" ] || [ -z "$QUALITY_DASHBOARD_TOKEN" ]; then
-              echo "Quality Dashboard URL or token not set, skipping upload"
-              exit 0
-            fi
-            # Zip coverage contents at root level so the jest processor
-            # finds coverage-final.json / clover.xml directly
-            (cd coverage && zip -r "${{ runner.temp }}/coverage.zip" .)
-
-            META=$(jq -n \
-              --arg key "$REPORT_KEY" \
-              --arg pkg "$PACKAGE_NAME" \
-              '{
-                key: $key,
-                displayName: "Coverage: \($pkg)",
-                processor: "jest"
-              }')
-
-            echo "Uploading coverage: $REPORT_KEY"
-            HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" \
-              -X POST "$QUALITY_DASHBOARD_URL/api/reports/" \
-              -H "x-upload-token: $QUALITY_DASHBOARD_TOKEN" \
-              -F "meta=$META" \
-              -F "file=@${{ runner.temp }}/coverage.zip" \
-              --max-time 30)
-
-            if [ "$HTTP_CODE" = "201" ]; then
-              echo "\u2713 Coverage uploaded ($HTTP_CODE)"
-            else
-              echo "\u26a0 Upload returned HTTP $HTTP_CODE"
-            fi
-          else
-            echo "No coverage/ directory found, skipping upload"
-          fi
-
-      - name: Build package
-        run: npm run build
-
-  publish-beta:
-    runs-on: ubuntu-latest
-    needs: test-and-build
-    if: github.event_name == 'pull_request'
-
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version: ${{ inputs.node_version }}
-          cache: "npm"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build package
-        run: npm run build
-
-      - name: Generate beta version
-        id: beta-version
-        run: |
-          CURRENT_VERSION=$(node -p "require('./package.json').version")
-          PR_NUMBER=${{ github.event.pull_request.number }}
-          COMMIT_SHA=${GITHUB_SHA:0:7}
-          BETA_VERSION="${CURRENT_VERSION}-beta.${PR_NUMBER}.${COMMIT_SHA}"
-          echo "version=${BETA_VERSION}" >> $GITHUB_OUTPUT
-          echo "Beta version will be: ${BETA_VERSION}"
-
-      - name: Update package.json with beta version
-        run: |
-          npm version ${{ steps.beta-version.outputs.version }} --no-git-tag-version
-
-      - name: Publish beta package
-        run: npm publish --tag beta
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-      - name: Comment PR with beta version info
-        uses: actions/github-script@v9
-        with:
-          script: |
-            github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: `🚀 **Beta version published!**
-              
-              **Package**: \`${{ inputs.npm_package_name }}@${{ steps.beta-version.outputs.version }}\`
-              
-              Install with:
-              \`\`\`bash
-              npm install ${{ inputs.npm_package_name }}@${{ steps.beta-version.outputs.version }}
-              # or
-              npm install ${{ inputs.npm_package_name }}@beta
-              \`\`\`
-              
-              This beta version will be available for testing until the PR is merged.`
-            })

package/.github/workflows/reusable-npm-upgrade.yml

@@ -1,92 +0,0 @@
-name: "Reusable: NPM Upgrade"
-
-on:
-  workflow_call:
-    inputs:
-      npm_services:
-        description: "JSON array of sub-folders containing NPM services to update"
-        required: true
-        type: string
-      pr_branch:
-        description: "Branch name for the upgrade PR (defaults to feature/YYYY.MM.DD-dependency-updates)"
-        required: false
-        type: string
-        default: ""
-
-jobs:
-  npm-upgrade:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-    steps:
-      - uses: actions/checkout@v7
-
-      - name: Resolve branch name
-        id: branch
-        run: |
-          if [ -n "${{ inputs.pr_branch }}" ]; then
-            echo "name=${{ inputs.pr_branch }}" >> $GITHUB_OUTPUT
-          else
-            echo "name=feature/$(date +'%Y.%m.%d')-dependency-updates" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Check for existing PR
-        id: check_pr
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          EXISTING_PR=$(gh pr list --state open --json number --jq 'length')
-          if [ "${EXISTING_PR}" -gt 0 ]; then
-            echo "An open PR already exists, skipping"
-            echo "skip=true" >> $GITHUB_OUTPUT
-          else
-            echo "skip=false" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Update NPM dependencies
-        if: steps.check_pr.outputs.skip == 'false'
-        run: |
-          set -e
-          # Update root package
-          echo "Updating dependencies in root"
-          npx npm-check-updates -u
-          npm install
-          # Update sub-service packages
-          SERVICES='${{ inputs.npm_services }}'
-          for FOLDER in $(echo "${SERVICES}" | jq -r '.[]'); do
-            echo "Updating dependencies in ${FOLDER}"
-            cd "${FOLDER}"
-            npx npm-check-updates -u
-            npm install
-            cd "${GITHUB_WORKSPACE}"
-          done
-          if [ -n "$(git status --porcelain)" ]; then
-            echo "HAS_CHANGES=true" >> $GITHUB_ENV
-          fi
-
-      - name: Bump root package.json patch version
-        if: steps.check_pr.outputs.skip == 'false' && env.HAS_CHANGES == 'true'
-        run: |
-          set -e
-          CURRENT_VERSION=$(jq -r '.version' package.json)
-          NEW_VERSION=$(echo "${CURRENT_VERSION}" | awk -F. '{print $1"."$2"."$3+1}')
-          jq --arg v "${NEW_VERSION}" '.version = $v' package.json > package.json.tmp && mv package.json.tmp package.json
-          echo "Bumped root package.json version: ${CURRENT_VERSION} -> ${NEW_VERSION}"
-
-      - name: Create Pull Request
-        if: steps.check_pr.outputs.skip == 'false' && env.HAS_CHANGES == 'true'
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git checkout -b "${{ steps.branch.outputs.name }}"
-          git add -A
-          git commit -m "chore: update NPM dependencies"
-          git push origin "${{ steps.branch.outputs.name }}"
-          gh pr create \
-            --title "chore: update NPM dependencies" \
-            --body "Automated NPM dependency update" \
-            --head "${{ steps.branch.outputs.name }}" \
-            --base main