update workflows (#206)

* update workflows

Signed-off-by: Sebastian Hoß <seb@xn--ho-hia.de>

Author: sebhoss

.github/actions/managed-java/action.yml

@@ -13,3 +13,4 @@ runs:
         java-package: jdk
         architecture: x64
         distribution: temurin
+        cache: maven

.github/actions/managed-maven/action.yml

@@ -13,6 +13,7 @@ runs:
         java-package: jdk
         architecture: x64
         distribution: temurin
+        cache: maven
         server-id: ossrh
         server-username: MAVEN_CENTRAL_USERNAME
         server-password: MAVEN_CENTRAL_TOKEN

.github/dependabot.yml

@@ -19,26 +19,13 @@ jobs:
         language: [ java ]
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
-    - name: Set up Java
-      uses: actions/setup-java@v3
-      with:
-        java-version: 17
-        java-package: jdk
-        architecture: x64
-        distribution: temurin
-    - name: Cache Maven Artifacts
-      uses: actions/cache@v3
-      with:
-        path: ~/.m2/repository
-        key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-maven-
+      uses: actions/checkout@v4
+    - uses: ./.github/actions/managed-java
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
     - name: Autobuild
       uses: github/codeql-action/autobuild@v2
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3

.github/workflows/codeql-analysis.yml

@@ -4,7 +4,7 @@
 name: Automated Release
 on:
   schedule:
-    - cron: 45 3 * * TUE
+    - cron: 35 5 * * MON
   workflow_dispatch:
 jobs:
   publish:
@@ -14,10 +14,17 @@ jobs:
     steps:
       - id: checkout
         name: Clone Git Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - id: last_release
+        name: Fetch last release info
+        run: echo "tag=$(gh release view --json tagName --jq '.tagName')" >> $GITHUB_OUTPUT
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - id: commits
         name: Count Commits
-        run: echo "count=$(git rev-list --count HEAD --since='last Tuesday')" >> $GITHUB_OUTPUT
+        run: echo "count=$(git rev-list --count ${{ steps.last_release.outputs.tag }}..HEAD -- pom.xml memoization-core/pom.xml memoization-core/src/main/java memoization-jdk/pom.xml memoization-jdk/src/main/java memoization-jool/pom.xml memoization-jool/src/main/java memoization-lambda/pom.xml memoization-lambda/src/main/java memoization-rxjava/pom.xml memoization-rxjava/src/main/java)" >> $GITHUB_OUTPUT
       - id: release
         name: Create Release Version
         if: steps.commits.outputs.count > 0
@@ -30,24 +37,16 @@ jobs:
         name: Build Timestamp
         if: steps.commits.outputs.count > 0
         run: echo "iso8601=$(date --utc --iso-8601=seconds)" >> $GITHUB_OUTPUT
-      - uses: ./.github/actions/managed-maven
+      - id: setup-java
+        uses: ./.github/actions/managed-maven
         if: steps.commits.outputs.count > 0
-      - id: cache
-        name: Cache Dependencies
-        if: steps.commits.outputs.count > 0
-        uses: actions/cache@v3
-        with:
-          path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            ${{ runner.os }}-maven-
       - id: gpg
         name: GPG Key
         if: steps.commits.outputs.count > 0
-        uses: timheuer/base64-to-file@v1.2
+        uses: timheuer/base64-to-file@v1
         with:
           fileName: signing.key.asc
-          fileDir: ${{ github.workspace}}
+          fileDir: ${{ github.workspace }}
           encodedString: ${{ secrets.GPG_SECRET_KEY_BASE64 }}
       - id: pom-version
         name: Set Release Version
@@ -56,15 +55,15 @@ jobs:
       - id: deploy-maven
         name: Deploy Maven Artifact
         if: steps.commits.outputs.count > 0
-        run: |
-          mvn \
-            --batch-mode \
-            --activate-profiles release \
-            --define scmTag=${{ steps.sha.outputs.sha }} \
-            --define pgp.secretkey=keyfile:${{ steps.gpg.outputs.filePath }} \
-            --define pgp.passphrase=literal:${{ secrets.GPG_SECRET_KEY_PASSWORD }} \
-            --define project.build.outputTimestamp=${{ steps.timestamp.outputs.iso8601 }} \
-            deploy
+        run: >
+          mvn
+          --batch-mode
+          --activate-profiles release
+          --define scmTag=${{ steps.sha.outputs.sha }}
+          --define pgp.secretkey=keyfile:${{ steps.gpg.outputs.filePath }}
+          --define pgp.passphrase=literal:${{ secrets.GPG_SECRET_KEY_PASSWORD }}
+          --define project.build.outputTimestamp=${{ steps.timestamp.outputs.iso8601 }}
+          deploy
         env:
           MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
           MAVEN_CENTRAL_TOKEN: ${{ secrets.MAVEN_CENTRAL_TOKEN }}
@@ -83,7 +82,7 @@ jobs:
       - id: mail
         name: Send Mail
         if: steps.commits.outputs.count > 0
-        uses: dawidd6/action-send-mail@v3.7.1
+        uses: dawidd6/action-send-mail@v3
         with:
           server_address: ${{ secrets.MAIL_SERVER }}
           server_port: ${{ secrets.MAIL_PORT }}

.github/workflows/release.yml

@@ -3,14 +3,12 @@
 
 name: REUSE compliance
 on:
-  push:
-    branches: [ main ]
   pull_request:
     branches: [ main ]
 jobs:
   reuse:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: REUSE Compliance Check
-        uses: fsfe/reuse-action@v1
+        uses: fsfe/reuse-action@v2

.github/workflows/reuse.yml

@@ -10,19 +10,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone Git Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: ./.github/actions/managed-java
-      - uses: actions/cache@v3
-        with:
-          path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            ${{ runner.os }}-maven-
       - name: Update Parent
         run: mvn --batch-mode --define generateBackupPoms=false versions:update-parent
       - id: cpr
         name: Create Pull Request
-        uses: peter-evans/create-pull-request@v4
+        uses: peter-evans/create-pull-request@v5
         with:
           token: ${{ secrets.PAT }}
           commit-message: Update parent to latest version
@@ -41,8 +35,6 @@ jobs:
           delete-branch: true
       - name: Enable Pull Request Automerge
         if: steps.cpr.outputs.pull-request-operation == 'created'
-        uses: peter-evans/enable-pull-request-automerge@v2
-        with:
-          token: ${{ secrets.PAT }}
-          pull-request-number: ${{ steps.cpr.outputs.pull-request-number }}
-          merge-method: rebase
+        run: gh pr merge --rebase --auto ${{ steps.cpr.outputs.pull-request-number }}
+        env:
+          GH_TOKEN: ${{ secrets.PAT }}

.github/workflows/update-parent.yml

@@ -5,21 +5,12 @@ name: Verify Commits
 on:
   pull_request:
     branches: [ main ]
-  push:
-    branches: [ main ]
 jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
       - name: Clone Git Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: ./.github/actions/managed-java
-      - name: Cache Dependencies
-        uses: actions/cache@v3
-        with:
-          path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            ${{ runner.os }}-maven-
       - name: Build with Maven
         run: mvn --batch-mode verify