@leverege/build-tools 2.106.6 → 2.108.0

package/README.md

@@ -251,7 +251,7 @@ repo-panopticon --limit 40 @srv/*         # cap displayed rows (default 80)
 repo-panopticon --concurrency 10 @srv/*   # increase parallelism (default 5)
 ```
 Columns: `mgr` (npm/yrn) · `pkg` (package.json version) · `git` (latest semver tag) ·
-`scop` (package scope) · `cir` (CircleCI — ✘ missing · L legacy · 1 orb v1 · 2 orb v2) ·
+`scop` (package scope) · `cir` (CI status — ✘ missing · L legacy · 1 orb v1 · 2 orb v2 · ★ orb v2 + GHA ci.yml) ·
 `ESM` (`"type":"module"`) · `har` (.har hooks directory) · `lnt` (ESLint major version) ·
 `bbl` (Babel presence). Repo name shown in orange when dirty or sync failed.
 
@@ -282,6 +282,14 @@ the appropriate template. Preserves existing customizations.
 circle-orb-it [--dry-run] [--debug]
 ```
 
+**`github-actions-it`** — Installs or updates GitHub Actions CI configuration for a
+Leverege library repository. Reads existing `.circleci/config.yml` to preserve settings
+(coverage threshold, cache config, GCP context) when migrating from CircleCI. Generates
+`.github/workflows/ci.yml` using the shared `library-ci.yml` reusable workflow.
+```bash
+github-actions-it [--dry-run] [--debug]
+```
+
 **`send-to-slack`** — Sends messages to a Slack channel, retrieving the webhook URL
 from GCP Secret Manager.
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.106.6",
+  "version": "2.108.0",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -8,12 +8,12 @@
     "url": "git+ssh://git@bitbucket.org/leverege/build-tools.git"
   },
   "scripts": {
-    "clean": "rm -rf lib",
     "lint": "eslint",
+    "lint-fix": "eslint --fix",
+    "prepack": "npm exec prepack",
     "prepare": "[ $SKIP_PREPARE ] && exit 0 || ./src/hook-and-release.mjs",
     "test": "mocha -t 60000 --exit 'test/**/!(*e2e*).mjs'",
-    "test-all": "mocha -t 60000 --exit 'test/**/**.mjs'",
-    "prepack": "npm exec prepack"
+    "test-all": "mocha -t 60000 --exit 'test/**/**.mjs'"
   },
   "bin": {
     "build-cnpg-image": "src/build-cnpg-image.mjs",
@@ -34,6 +34,7 @@
     "firebaseServe": "src/firebaseServe.mjs",
     "gcp-snapshots": "src/gcp-snapshots.mjs",
     "generate-docs": "src/generate-docs.mjs",
+    "github-actions-it": "src/github-actions-it.mjs",
     "getfbcfg": "src/getfbcfg.mjs",
     "getjson": "src/getjson.mjs",
     "git-tar": "src/git-tar.sh",
@@ -46,6 +47,7 @@
     "helmwhat": "src/helmup.sh",
     "hook-and-release": "src/hook-and-release.mjs",
     "init-my-chart": "src/init-my-chart/init-my-chart.mjs",
+    "sync-chart-version": "src/sync-chart-version.mjs",
     "k8scale": "src/k8scale.sh",
     "k8x": "src/k8x.sh",
     "klog": "src/klog.sh",
@@ -84,7 +86,7 @@
     "chalk": "^5.6.2",
     "command-line-args": "^6.0.2",
     "command-line-usage": "^7.0.4",
-    "commander": "^14.0.3",
+    "commander": "^15.0.0",
     "deepmerge": "^4.3.1",
     "enquirer": "^2.4.1",
     "execa": "^9.6.1",
@@ -102,7 +104,7 @@
     "p-limit": "^7.3.0",
     "package-up": "^5.0.0",
     "readline-sync": "^1.4.10",
-    "semver": "7.8.2",
+    "semver": "7.8.4",
     "shell-quote": "^1.8.4",
     "simple-git": "^3.36.0",
     "sloc": "^0.3.2",
@@ -117,6 +119,6 @@
     "chai": "^6.2.2",
     "eslint": "^9",
     "mocha": "^11.7.6",
-    "npm": "^11.16.0"
+    "npm": "^11.17.0"
   }
 }

package/src/github-actions-it.mjs

@@ -0,0 +1,187 @@
+#!/usr/bin/env node
+/* eslint-disable security/detect-non-literal-fs-filename */
+import fs from 'node:fs'
+import path from 'node:path'
+
+import { program } from 'commander'
+import chalk from 'chalk'
+import YAML from 'js-yaml'
+
+import {
+  enableDebug,
+  errorExit,
+  getGitRootDirectory,
+  getIsYarnProject,
+  log,
+  mkdirSafe,
+  proceed,
+} from './Utils.mjs'
+
+const GH_ACTIONS_REF = 'development'
+const CIRCLE_YML = '.circleci/config.yml'
+const GH_WORKFLOWS_DIR = '.github/workflows'
+const GH_CI_YML = `${GH_WORKFLOWS_DIR}/ci.yml`
+const DEFAULT_COVERAGE_THRESHOLD = 70
+const DEFAULT_CACHE_CONFIG = '{"type":"inMemory"}'
+
+program
+  .name( 'github-actions-it' )
+  .description( chalk.green( 'Installs or updates GitHub Actions CI configuration for a Leverege library repository' ) )
+  .option( '--debug', 'Enable debug logging' )
+  .option( '--dry-run', 'Show what would be written without making changes' )
+  .addHelpText( 'after', `
+${chalk.yellow( 'Files managed:' )}
+  ${chalk.green( GH_CI_YML )}     GitHub Actions CI workflow
+
+${chalk.yellow( 'Notes:' )}
+  Run from anywhere inside a git repository.
+  Reads .circleci/config.yml to preserve existing settings when present.
+  Redis is always available on port 6379 — no configuration needed.
+  Yarn auth and nodeLinker are handled by the workflow writing ~/.yarnrc.yml on the runner.
+
+${chalk.yellow( 'Examples:' )}
+  ${chalk.green( 'github-actions-it' )}            install or upgrade
+  ${chalk.green( 'github-actions-it --dry-run' )}  preview without writing files
+` )
+  .parse()
+
+const options = program.opts()
+if ( options.debug ) { enableDebug() }
+
+const gitRoot = await getGitRootDirectory()
+if ( !gitRoot ) {
+  errorExit( 'This command must be run inside a git repository' )
+}
+
+// ---------- Parse existing CircleCI config ----------
+
+const circleYmlPath = path.join( gitRoot, CIRCLE_YML )
+
+let enableGcp = false
+let coverageThreshold = DEFAULT_COVERAGE_THRESHOLD
+let cacheConfig = DEFAULT_CACHE_CONFIG
+let redisEnabled = false
+let isYarnFromCircle = false
+
+if ( fs.existsSync( circleYmlPath ) ) {
+  const circleConfig = YAML.load( fs.readFileSync( circleYmlPath, 'utf8' ) )
+
+  const allJobs = []
+  for ( const workflow of Object.values( circleConfig.workflows ?? {} ) ) {
+    for ( const job of ( workflow.jobs ?? [] ) ) {
+      if ( typeof job === 'object' ) {
+        for ( const [ name, config ] of Object.entries( job ) ) {
+          allJobs.push( { name, config: config ?? {} } )
+        }
+      }
+    }
+  }
+
+  const coverageJob = allJobs.find( j => j.name === 'leverege/code-coverage' )
+  if ( coverageJob ) {
+    const { config } = coverageJob
+    coverageThreshold = config['coverage-threshold'] ?? DEFAULT_COVERAGE_THRESHOLD
+    cacheConfig = config['cache-config'] ?? DEFAULT_CACHE_CONFIG
+    redisEnabled = config['enable-redis'] === true
+
+    const ctx = config.context
+    const contexts = Array.isArray( ctx ) ? ctx : ( ctx ? [ ctx ] : [] )
+    enableGcp = contexts.includes( 'leverege-gcp' )
+  }
+
+  isYarnFromCircle = allJobs.some( j => j.config['pkg-manager'] === 'yarn-berry' )
+
+  log( chalk.blue( '\nParsed CircleCI config:' ) )
+  log( `  pkg-manager:        ${isYarnFromCircle ? 'yarn-berry' : 'npm'}` )
+  log( `  enable-gcp:         ${enableGcp}` )
+  log( `  coverage-threshold: ${coverageThreshold}` )
+  log( `  cache-config:       ${cacheConfig}` )
+  log( `  enable-redis:       ${redisEnabled}` )
+} else {
+  log( chalk.yellow( '\nNo .circleci/config.yml found — using defaults' ) )
+}
+
+const isYarn = isYarnFromCircle || getIsYarnProject( gitRoot )
+log( chalk.blue( `\nPackage manager: ${isYarn ? 'yarn-berry' : 'npm'}` ) )
+
+if ( redisEnabled ) {
+  log( chalk.yellow( '\nRedis detected — Redis service is always available on port 6379 in GitHub Actions' ) )
+}
+
+// ---------- Determine what needs writing ----------
+
+const ciYmlPath = path.join( gitRoot, GH_CI_YML )
+let ciYmlExists = false
+
+if ( fs.existsSync( ciYmlPath ) ) {
+  ciYmlExists = true
+  const existingCi = fs.readFileSync( ciYmlPath, 'utf8' )
+  if ( existingCi.includes( `library-ci.yml@${GH_ACTIONS_REF}` ) ) {
+    log( chalk.yellow( '\nExisting GitHub Actions CI config found — will update' ) )
+  } else {
+    log( chalk.yellow( '\nExisting .github/workflows/ci.yml found (not managed by github-actions-it) — will overwrite' ) )
+  }
+}
+
+// ---------- Generate content ----------
+
+function generateCiYml() {
+  const withLines = []
+  if ( enableGcp ) {
+    withLines.push( '      enable-gcp: true' )
+    withLines.push( '      gcp-project: leverege-registry' )
+  }
+  if ( coverageThreshold !== DEFAULT_COVERAGE_THRESHOLD ) {
+    withLines.push( `      coverage-threshold: ${coverageThreshold}` )
+  }
+  if ( cacheConfig !== DEFAULT_CACHE_CONFIG ) {
+    withLines.push( `      cache-config: '${cacheConfig}'` )
+  }
+
+  const lines = [
+    'name: CI',
+    '',
+    'on:',
+    '  push:',
+    '  pull_request:',
+    '  workflow_dispatch:',
+    '',
+    'jobs:',
+    '  ci:',
+    '    permissions:',
+    '      id-token: write',
+    '      contents: read',
+    `    uses: Leverege/github-actions/.github/workflows/library-ci.yml@${GH_ACTIONS_REF}`,
+  ]
+
+  if ( withLines.length > 0 ) {
+    lines.push( '    with:' )
+    lines.push( ...withLines )
+  }
+
+  lines.push( '    secrets: inherit', '' )
+  return lines.join( '\n' )
+}
+
+// ---------- Dry run ----------
+
+if ( options.dryRun ) {
+  log( chalk.green( `\n[dry-run] Would write ${GH_CI_YML}:\n` ) )
+  log( generateCiYml() )
+  process.exit( 0 )
+}
+
+// ---------- Confirm overwrites ----------
+
+if ( ciYmlExists ) {
+  await proceed( `Overwrite ${GH_CI_YML}?` )
+}
+
+// ---------- Write ----------
+
+mkdirSafe( path.join( gitRoot, GH_WORKFLOWS_DIR ) )
+fs.writeFileSync( ciYmlPath, generateCiYml() )
+log( chalk.green( `\nGitHub Actions CI config written => ${GH_CI_YML}` ) )
+
+log( chalk.yellow( '\nNext steps:' ) )
+log( `  git add ${GH_CI_YML} && git commit -m "CHORE add GitHub Actions CI"\n` )

package/src/helm-charts/prom-operator/prometheus-stack.yaml.ovh

@@ -70,12 +70,13 @@ prometheus:
     ruleSelectorNilUsesHelmValues: false
     serviceMonitorSelectorNilUsesHelmValues: false
     probeSelectorNilUsesHelmValues: false
-    maximumStartupDurationSeconds: 60
+    maximumStartupDurationSeconds: 300
     resources:
       requests:
         cpu: 500m
         memory: 2Gi
     retention: 30d
+    retentionSize: 48GiB
     storageSpec:
       volumeClaimTemplate:
         spec:

package/src/repo-panopticon.mjs

@@ -32,7 +32,9 @@ const CHECKS = [
         const match = content.match( /leverege\/circle-nodejs-ci@(\d+)\.\d+\.\d+/ )
         if ( !match || parseInt( match[1], 10 ) === 0 ) return { value : chalk.hex( '#FFA500' )( 'L' ) }
         const major = parseInt( match[1], 10 )
-        return { value : major === 1 ? chalk.yellow( '1' ) : chalk.green( `${major}` ) }
+        if ( major === 1 ) return { value : chalk.yellow( '1' ) }
+        const hasGHA = fs.existsSync( path.join( dir, '.github', 'workflows', 'ci.yml' ) )
+        return { value : hasGHA ? chalk.green( '★' ) : chalk.green( `${major}` ) }
       } catch {
         return { value : chalk.hex( '#FFA500' )( 'L' ) }
       }
@@ -327,7 +329,7 @@ ${chalk.yellow( 'Columns:' )}
   ${chalk.green( 'git' )}    latest semver git tag (green=match, yellow=mismatch, red=untagged)
   ${chalk.green( 'name' )}  orange if dirty: pull/fetch failed (regular repos) or local modifications present (workspace packages)
   ${chalk.green( 'scope' )}  package scope: @org, PRVT, or PUBL
-  ${chalk.green( 'cir' )}    CircleCI config: ✘=missing, L=legacy, 1=orb v1, 2=orb v2
+  ${chalk.green( 'cir' )}    CI status: ✘=missing, L=legacy, 1=orb v1, 2=orb v2, ★=orb v2 + GHA ci.yml
   ${chalk.green( 'ESM' )}    "type": "module" in package.json
   ${chalk.green( 'har' )}    .har directory present at repo root
   ${chalk.green( 'lnt' )}    ESLint version from node_modules (✘=no lint script, ?=not installed, yellow=v8, green=v9+)

package/src/sync-chart-version.mjs

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+/* eslint-disable */
+/*
+ * Keep helm/Chart.yaml in sync with package.json (the "mirror" model):
+ *   version    = <package.json version>
+ *   appVersion = v<package.json version>
+ *
+ * package.json's version is the single source of truth. Run automatically from
+ * the pre-commit hook (.har/pre-commit) and available manually as `yarn sync:chart`.
+ *
+ * - Self-stages helm/Chart.yaml so the change lands in the triggering commit.
+ * - Idempotent: a no-op (exit 0, no git add) when already in sync.
+ * - Line-targeted edits, so no YAML dependency is needed.
+ */
+
+import fs from 'node:fs'
+import { execSync } from 'node:child_process'
+
+const pkg = JSON.parse( fs.readFileSync( new URL( '../package.json', import.meta.url ), 'utf8' ) )
+const version = pkg.version
+const appVersion = `v${version}`
+
+const chartUrl = new URL( '../helm/Chart.yaml', import.meta.url )
+let chart
+try {
+  chart = fs.readFileSync( chartUrl, 'utf8' )
+} catch {
+  process.exit( 0 ) // no chart in this project — nothing to sync
+}
+
+// Match the top-level `version:` (not `apiVersion:`) and `appVersion:` lines.
+const updated = chart
+  .replace( /^version:.*$/m, `version: ${version}` )
+  .replace( /^appVersion:.*$/m, `appVersion: ${appVersion}` )
+
+if ( updated === chart ) {
+  process.exit( 0 ) // already in sync
+}
+
+fs.writeFileSync( chartUrl, updated )
+console.log( `sync-chart-version: helm/Chart.yaml -> version: ${version}, appVersion: ${appVersion}` )
+
+try {
+  execSync( 'git add helm/Chart.yaml', { stdio : 'ignore' } )
+} catch {
+  // Not in a git context (or add failed) — the file is written regardless.
+}