@unisphere/nx 4.15.7 → 5.0.0

package/dist/migrations/4-15-8/templates/_publish-artifacts.template

@@ -0,0 +1,361 @@
+name: Shared Deployment Jobs
+
+on:
+  workflow_call:
+
+jobs:
+  check-elements:
+    runs-on:
+      - codebuild-ovp-unisphere-runner-${{ github.run_id }}-${{ github.run_attempt }}
+      - instance-size:small
+    outputs:
+      has_packages: ${{ steps.check.outputs.has_packages }}
+      has_runtimes: ${{ steps.check.outputs.has_runtimes }}
+      has_applications: ${{ steps.check.outputs.has_applications }}
+    steps:
+
+      - name: Checkout Repo
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
+          fetch-tags: true
+
+      - name: Check elements in .unisphere
+        id: check
+        run: |
+          if [ -f .unisphere ]; then
+            PACKAGES=$(jq -r '.elements.packages // {} | length' .unisphere)
+            RUNTIMES=$(jq -r '(.elements.runtimes // {} | length) + (.elements.workspace // {} | length) + (.elements.loader // {} | length)' .unisphere)
+            APPLICATIONS=$(jq -r '.elements.applications // {} | length' .unisphere)
+
+            if [ "$PACKAGES" -gt 0 ]; then
+              echo "has_packages=true" >> $GITHUB_OUTPUT
+            else
+              echo "has_packages=false" >> $GITHUB_OUTPUT
+            fi
+
+            if [ "$RUNTIMES" -gt 0 ]; then
+              echo "has_runtimes=true" >> $GITHUB_OUTPUT
+            else
+              echo "has_runtimes=false" >> $GITHUB_OUTPUT
+            fi
+
+            if [ "$APPLICATIONS" -gt 0 ]; then
+              echo "has_applications=true" >> $GITHUB_OUTPUT
+            else
+              echo "has_applications=false" >> $GITHUB_OUTPUT
+            fi
+          else
+            echo "has_packages=false" >> $GITHUB_OUTPUT
+            echo "has_runtimes=false" >> $GITHUB_OUTPUT
+            echo "has_applications=false" >> $GITHUB_OUTPUT
+          fi
+
+  prepare-runtimes:
+    runs-on:
+      - codebuild-ovp-unisphere-runner-${{ github.run_id }}-${{ github.run_attempt }}
+      - instance-size:medium
+
+    if: needs.check-elements.outputs.has_runtimes == 'true'
+    needs: check-elements
+    outputs:
+      unisphereElementsArtifactsFolder: ${{ steps.prepare-runtimes.outputs.artifactsRootFolder }}
+      hasArtifacts: ${{ steps.prepare-runtimes.outputs.hasArtifacts }}
+      commit_sha: ${{ steps.capture_commit_sha.outputs.commit_sha }}
+    steps:
+      - name: Cache npm
+        uses: actions/cache@v5
+        with:
+          path: ~/.npm
+          key: dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-
+
+      - name: Checkout Repo
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
+          fetch-tags: true
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: '.nvmrc'
+      - name: Clean workspace
+        run: git reset --hard HEAD
+      - name: Clean npm cache
+        run: npm cache clean --force
+
+      - name: Setup JFrog
+
+        uses: jfrog/setup-jfrog-cli@v5
+        id: setup-jfrog
+        env:
+          JF_URL: https://kalturaa.jfrog.io
+        with:
+          oidc-provider-name: ovp-github-oidc
+      - name: Install dependencies
+        run: npm ci --prefer-offline --include=optional --no-fund --verbose
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+
+      - name: Prepare Unisphere Elements
+        id: prepare-runtimes
+        run: npx unisphere runtime publish prepare --verbose
+      - name: Capture Commit SHA
+        id: capture_commit_sha
+        run: echo "commit_sha=$(git rev-parse HEAD)" >> $GITHUB_ENV
+      - name: Set commit_sha as output
+        id: set_commit_sha
+        run: echo "commit_sha=${{ env.commit_sha }}" >> $GITHUB_OUTPUT
+      - uses: actions/upload-artifact@v6
+        id: upload-unisphere-elements-artifacts
+        with:
+          name: unisphere-elements
+          path: ${{ steps.prepare-runtimes.outputs.artifactsRootFolder }}
+          retention-days: 1
+
+  deploy-packages:
+    if: needs.check-elements.outputs.has_packages == 'true'
+    needs: check-elements
+    runs-on:
+      - codebuild-ovp-unisphere-runner-${{ github.run_id }}-${{ github.run_attempt }}
+      - instance-size:medium
+    steps:
+      - name: Cache npm
+        uses: actions/cache@v5
+        with:
+          path: ~/.npm
+          key: dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-
+
+      - name: Checkout Repo
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
+          fetch-tags: true
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Setup JFrog
+
+        uses: jfrog/setup-jfrog-cli@v5
+        id: setup-jfrog
+        env:
+          JF_URL: https://kalturaa.jfrog.io
+        with:
+          oidc-provider-name: ovp-github-oidc
+
+      - name: Install dependencies
+
+        run: |
+          npm ci --prefer-offline --include=optional --no-fund --verbose
+
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+
+      - name: Get NPM Token from AWS Secrets Manager
+        id: get-npm-token
+        run: |
+          NPM_TOKEN=$(aws secretsmanager get-secret-value --secret-id arn:aws:secretsmanager:eu-central-1:785328604905:secret:unisphere-secrets-um86Cs --query SecretString --output text | jq -r '."NPM_UNISPHERE_TOKEN"')
+          echo "NPM_TOKEN=$NPM_TOKEN" >> $GITHUB_ENV
+          # Debug token existence (safely)
+          echo "::debug::Token exists: $([ ! -z "$NPM_TOKEN" ] && echo 'true' || echo 'false')"
+      - name: Deploy to registry
+        run: npx unisphere package publish --verbose --jfrogToken ${{ steps.setup-jfrog.outputs.oidc-token }} --jfrogUser ${{ steps.setup-jfrog.outputs.oidc-user }} --npmToken ${{ env.NPM_TOKEN }} --branch "${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}"
+
+  deploy-runtimes:
+    if: needs.prepare-runtimes.outputs.hasArtifacts == 'true'
+    needs: prepare-runtimes
+    runs-on:
+      - codebuild-ovp-unisphere-runner-${{ github.run_id }}-${{ github.run_attempt }}
+      - instance-size:medium
+    strategy:
+      matrix:
+        envs_regions:
+          - { env: 'nvp1', region: 'us-east-1', accountid: '583352821080' }
+          - { env: 'frp2', region: 'eu-central-1', accountid: '082111255551' }
+          - { env: 'irp2', region: 'eu-west-1', accountid: '137576761235' }
+          - { env: 'nvq2', region: 'us-east-1', accountid: '383697330906' }          
+          - { env: 'syp2', region: 'ap-southeast-2', accountid: '650755435642' }
+          - { env: 'cap2', region: 'ca-central-1', accountid: '948632009361' }
+      fail-fast: false
+
+    steps:
+      - name: Cache npm
+        uses: actions/cache@v5
+        with:
+          path: ~/.npm
+          key: dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-
+
+      - name: Check available disk space
+        run: df -h
+      - name: Checkout Repo at specific commit
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ needs.prepare-runtimes.outputs.commit_sha }}
+          fetch-tags: true
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Setup JFrog
+
+        uses: jfrog/setup-jfrog-cli@v5
+        id: setup-jfrog
+        env:
+          JF_URL: https://kalturaa.jfrog.io
+        with:
+          oidc-provider-name: ovp-github-oidc
+
+      - name: Install dependencies
+
+        run: npm ci --prefer-offline --include=optional --no-fund --verbose
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+
+      - name: Download artifacts folder
+        uses: actions/download-artifact@v7
+        with:
+          name: unisphere-elements
+          path: ${{ needs.prepare-runtimes.outputs.unisphereElementsArtifactsFolder }}
+      - name: Sync S3 bucket
+        run: |
+          npx unisphere runtime publish execute \
+          --env ${{ matrix.envs_regions.env }} \
+          --aws-region '${{ matrix.envs_regions.region }}' \
+          --aws-arn 'arn:aws:iam::${{matrix.envs_regions.accountid }}:role/${{ matrix.envs_regions.env }}-unisphere-content-role' \
+          --artifacts-folder '${{ needs.prepare-runtimes.outputs.unisphereElementsArtifactsFolder }}' \
+          --verbose
+
+  prepare-applications:
+    if: always() && needs.check-elements.outputs.has_applications == 'true'
+    needs: [deploy-runtimes, check-elements]
+    runs-on:
+      - codebuild-ovp-unisphere-runner-${{ github.run_id }}-${{ github.run_attempt }}
+      - instance-size:medium
+    outputs:
+      unisphereApplicationsArtifactsFolder: ${{ steps.prepare-applications.outputs.artifactsRootFolder }}
+      hasArtifacts: ${{ steps.prepare-applications.outputs.hasArtifacts }}
+      commit_sha: ${{ steps.capture_commit_sha.outputs.commit_sha }}
+    steps:
+      - name: Cache npm
+        uses: actions/cache@v5
+        with:
+          path: ~/.npm
+          key: dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-
+
+      - name: Checkout Repo
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
+          fetch-tags: true
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: '.nvmrc'
+      - name: Clean workspace
+        run: git reset --hard HEAD
+      - name: Clean npm cache
+        run: npm cache clean --force
+      - name: Setup JFrog
+
+        uses: jfrog/setup-jfrog-cli@v5
+        id: setup-jfrog
+        env:
+          JF_URL: https://kalturaa.jfrog.io
+        with:
+          oidc-provider-name: ovp-github-oidc
+      - name: Install dependencies
+
+        run: npm ci --prefer-offline --include=optional --no-fund --verbose
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+      - name: Prepare Unisphere Applications
+        id: prepare-applications
+        run: npx unisphere application publish prepare --verbose
+      - name: Capture Commit SHA
+        id: capture_commit_sha
+        run: echo "commit_sha=$(git rev-parse HEAD)" >> $GITHUB_ENV
+      - name: Set commit_sha as output
+        id: set_commit_sha
+        run: echo "commit_sha=${{ env.commit_sha }}" >> $GITHUB_OUTPUT
+      - uses: actions/upload-artifact@v6
+        id: upload-unisphere-applications-artifacts
+        with:
+          name: unisphere-applications
+          path: ${{ steps.prepare-applications.outputs.artifactsRootFolder }}
+          retention-days: 1
+
+  deploy-applications:
+    if: always() && needs.prepare-applications.outputs.hasArtifacts == 'true'
+    needs: [prepare-applications]
+    runs-on:
+      - codebuild-ovp-unisphere-runner-${{ github.run_id }}-${{ github.run_attempt }}
+      - instance-size:medium
+    strategy:
+      matrix:
+        envs_regions:
+          - { env: 'nvp1', region: 'us-east-1', accountid: '583352821080' }
+          - { env: 'frp2', region: 'eu-central-1', accountid: '082111255551' }
+          - { env: 'irp2', region: 'eu-west-1', accountid: '137576761235' }
+          - { env: 'nvq2', region: 'us-east-1', accountid: '383697330906' }          
+          - { env: 'syp2', region: 'ap-southeast-2', accountid: '650755435642' }
+          - { env: 'cap2', region: 'ca-central-1', accountid: '948632009361' }
+      fail-fast: false
+    steps:
+      - name: Cache npm
+        uses: actions/cache@v5
+        with:
+          path: ~/.npm
+          key: dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            dependencies-${{ runner.os }}-node-${{ hashFiles('.nvmrc') }}-
+
+      - name: Checkout Repo at specific commit
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ needs.prepare-applications.outputs.commit_sha }}
+          fetch-tags: true
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version-file: '.nvmrc'
+      - name: Setup JFrog
+
+        uses: jfrog/setup-jfrog-cli@v5
+        id: setup-jfrog
+        env:
+          JF_URL: https://kalturaa.jfrog.io
+        with:
+          oidc-provider-name: ovp-github-oidc
+      - name: Install dependencies
+
+        run: npm ci --prefer-offline --include=optional --no-fund --verbose
+        env:
+          GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          KALTURA_JFROG_TOKEN: ${{ steps.setup-jfrog.outputs.oidc-token }}
+      - name: Download artifacts folder
+        uses: actions/download-artifact@v7
+        with:
+          name: unisphere-applications
+          path: ${{ needs.prepare-applications.outputs.unisphereApplicationsArtifactsFolder }}
+      - name: Sync S3 bucket
+        run: |
+          npx unisphere application publish execute \
+          --env ${{ matrix.envs_regions.env }} \
+          --aws-region '${{ matrix.envs_regions.region }}' \
+          --aws-arn 'arn:aws:iam::${{matrix.envs_regions.accountid }}:role/${{ matrix.envs_regions.env }}-unisphere-content-role' \
+          --artifacts-folder '${{ needs.prepare-applications.outputs.unisphereApplicationsArtifactsFolder }}' \
+          --verbose

package/dist/migrations/4-15-8/update-publish-artifacts-workflow.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Migration: Update _publish-artifacts.yml workflow
+ *
+ * Replaces .github/workflows/_publish-artifacts.yml with updated version.
+ */
+import { Tree } from '@nx/devkit';
+export default function update(tree: Tree): Promise<void>;
+//# sourceMappingURL=update-publish-artifacts-workflow.d.ts.map

package/dist/migrations/4-15-8/update-publish-artifacts-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-publish-artifacts-workflow.d.ts","sourceRoot":"","sources":["../../../src/migrations/4-15-8/update-publish-artifacts-workflow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAU,MAAM,YAAY,CAAC;AAI1C,wBAA8B,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC9D"}

package/dist/migrations/4-15-8/update-publish-artifacts-workflow.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * Migration: Update _publish-artifacts.yml workflow
+ *
+ * Replaces .github/workflows/_publish-artifacts.yml with updated version.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = update;
+const devkit_1 = require("@nx/devkit");
+const fs_1 = require("fs");
+const path_1 = require("path");
+async function update(tree) {
+    devkit_1.logger.info('🔄 Updating GitHub _publish-artifacts workflow for v4.15.8');
+    // Ensure .github/workflows directory exists
+    if (!tree.exists('.github')) {
+        tree.write('.github/.gitkeep', '');
+        devkit_1.logger.info('✅ Created .github directory');
+    }
+    if (!tree.exists('.github/workflows')) {
+        tree.write('.github/workflows/.gitkeep', '');
+        devkit_1.logger.info('✅ Created .github/workflows directory');
+    }
+    try {
+        const workflowPath = '.github/workflows/_publish-artifacts.yml';
+        const templatePath = (0, path_1.join)(__dirname, 'templates', '_publish-artifacts.template');
+        const templateContent = (0, fs_1.readFileSync)(templatePath, 'utf-8');
+        const workflowExists = tree.exists(workflowPath);
+        tree.write(workflowPath, templateContent);
+        if (workflowExists) {
+            devkit_1.logger.info(`✅ Updated ${workflowPath}`);
+        }
+        else {
+            devkit_1.logger.info(`✅ Created ${workflowPath}`);
+        }
+    }
+    catch (error) {
+        devkit_1.logger.error(`❌ Failed to update GitHub _publish-artifacts workflow: ${error?.message || 'Unknown error'}`);
+        throw error;
+    }
+}