From dce2ea6e874b336ec7e05e68c162c08c749edaa9 Mon Sep 17 00:00:00 2001 From: kridai Date: Thu, 29 Oct 2026 13:46:01 +0530 Subject: [PATCH] chore: migrate release process to OSS Publishing via GitHub Actions Co-Authored-By: Claude Sonnet 5.5 --- .github/dependabot.yml | 10 +++ .github/workflows/pr-lint.yml | 19 ++++-- .github/workflows/test-and-deploy.yml | 96 ++++++++++++++++----------- 3 files changed, 83 insertions(+), 42 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..c09a2d4 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + - package-ecosystem: "composer" + directory: "/" + schedule: + interval: "weekly" diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml index 2f5232b..5bbede7 100644 --- a/.github/workflows/pr-lint.yml +++ b/.github/workflows/pr-lint.yml @@ -3,13 +3,22 @@ on: pull_request_target: types: [ opened, edited, synchronize, reopened ] +permissions: + contents: read + pull-requests: read + jobs: validate: name: Validate title - runs-on: ubuntu-latest + runs-on: ubuntu-x64 steps: - - uses: amannn/action-semantic-pull-request@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: twilio/sdk-actions/semantic-pr-title@09631bfa50f14d276170d45bc4f49a80da201cc6 # main @ 09631bf — sdk-actions#10; repin to the v1.1.0 tag once cut with: - types: chore docs fix feat test misc - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + types: | + chore + docs + fix + feat + misc + test diff --git a/.github/workflows/test-and-deploy.yml b/.github/workflows/test-and-deploy.yml index 1b709c4..771bb55 100644 --- a/.github/workflows/test-and-deploy.yml +++ b/.github/workflows/test-and-deploy.yml @@ -10,26 +10,36 @@ on: - cron: '0 15 * * 1-5' workflow_dispatch: +env: + ARTIFACTORY_URL: ${{ vars.ARTIFACTORY_URL }} + jobs: test: - name: Test - runs-on: ubuntu-latest + name: Test - PHP ${{ matrix.php }} + runs-on: ubuntu-x64 + if: github.repository_owner == 'sendgrid' timeout-minutes: 20 + permissions: + contents: read + id-token: write strategy: + fail-fast: false matrix: php: [ '7.3', '7.4', '8.0', '8.1', '8.2', '8.3', '8.4', '8.5' ] - dependencies: - - "lowest" - - "highest" + dependencies: [ lowest, highest ] steps: - name: Checkout php-http-client - uses: actions/checkout@v2 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + + - name: Artifactory OIDC Auth + uses: twilio/sdk-actions/artifactory-oidc@0375437914d535a5fb178bdbfdb5d51bdde2616e # v1 + with: + ecosystem: php - name: Setup PHP Action - uses: shivammathur/setup-php@2.15.0 + uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0 with: php-version: ${{ matrix.php }} - id: php - name: Composer webhook config run: composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }} @@ -46,48 +56,60 @@ jobs: deploy: name: Deploy - if: success() && github.ref_type == 'tag' + if: success() && github.ref_type == 'tag' && github.repository_owner == 'sendgrid' needs: [ test ] - runs-on: ubuntu-latest + runs-on: ubuntu-x64 + environment: + name: production + url: https://packagist.org/packages/sendgrid/php-http-client + permissions: + contents: write # required for creating GitHub Release + id-token: write steps: - name: Checkout php-http-client - uses: actions/checkout@v2 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + with: + # The release action verifies refs/tags/ in the local clone. + fetch-depth: 0 + + - name: Artifactory OIDC Auth + uses: twilio/sdk-actions/artifactory-oidc@0375437914d535a5fb178bdbfdb5d51bdde2616e # v1 + with: + ecosystem: php - name: Setup PHP - uses: shivammathur/setup-php@2.15.0 + uses: shivammathur/setup-php@eb7c497e18156a6bbabfef1d3a82760b9eda3962 # 2.40.0 with: php-version: '8.1' - id: php - name: Build Release Artifacts run: make bundle - name: Create GitHub Release - uses: sendgrid/dx-automator/actions/release@main + uses: twilio/sdk-actions/github-release@9b1c3222c9ffe38aadedb11c5b9f5a172b5e9951 # v1 with: + changelog-file: CHANGELOG.md assets: php-http-client.zip - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - name: Submit metric to Datadog - uses: sendgrid/dx-automator/actions/datadog-release-metric@main - env: - DD_API_KEY: ${{ secrets.DATADOG_API_KEY }} +# - name: Submit metric to Datadog +# uses: sendgrid/dx-automator/actions/datadog-release-metric@08b601b726671445abc798ed59881766ec8fefc6 # main +# env: +# DD_API_KEY: ${{ secrets.DATADOG_API_KEY }} - notify-on-failure: - name: Slack notify on failure - if: failure() && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || github.ref_type == 'tag') - needs: [ test, deploy ] - runs-on: ubuntu-latest - steps: - - uses: rtCamp/action-slack-notify@v2 - env: - SLACK_COLOR: failure - SLACK_ICON_EMOJI: ':github:' - SLACK_MESSAGE: ${{ format('Test *{0}*, Deploy *{1}*, {2}/{3}/actions/runs/{4}', needs.test.result, needs.deploy.result, github.server_url, github.repository, github.run_id) }} - SLACK_TITLE: Action Failure - ${{ github.repository }} - SLACK_USERNAME: GitHub Actions - SLACK_MSG_AUTHOR: twilio-dx - SLACK_FOOTER: Posted automatically using GitHub Actions - SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} - MSG_MINIMAL: true +# notify-on-failure: +# name: Slack notify on failure +# if: failure() && github.event_name != 'pull_request' && (github.ref == 'refs/heads/main' || github.ref_type == 'tag') +# needs: [ test, deploy ] +# runs-on: ubuntu-x64 +# steps: +# - uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3 +# env: +# SLACK_COLOR: failure +# SLACK_ICON_EMOJI: ':github:' +# SLACK_MESSAGE: ${{ format('Test *{0}*, Deploy *{1}*, {2}/{3}/actions/runs/{4}', needs.test.result, needs.deploy.result, github.server_url, github.repository, github.run_id) }} +# SLACK_TITLE: Action Failure - ${{ github.repository }} +# SLACK_USERNAME: GitHub Actions +# SLACK_MSG_AUTHOR: twilio-dx +# SLACK_FOOTER: Posted automatically using GitHub Actions +# SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} +# MSG_MINIMAL: true