🚧 work in process

Author: jobs62

.github/scripts/release-build.sh

@@ -29,12 +29,12 @@ echo "$release_notes$(cat $root/changelog.md)" > $root/changelog.md
 
 # generate SDK
 cd "$root"
-make gen
+sed -i "<outscale-api-version>s|.*|${new_api_version}</outscale-api-version>|" pom.xml
 
 # setup git && commit
 git config user.name "Outscale Bot"
 git config user.email "opensource+bot@outscale.com"
-for f in src dist; do
+for f in src dist pom.xml; do
     git add $f || true
 done
 git commit -asm "osc-sdk-java v$new_sdk_version"

.github/workflows/build.yml

@@ -6,25 +6,30 @@ on:
         description: 'Outscale API version'
         required: true
 
+permissions:
+  contents: write
+
 jobs:
   auto-build:
     environment: auto-build
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           ref: main
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin' 
           java-version: '11'
           cache: 'maven'
+
       - name: Write Outscale API version to use
         run: echo "${{ github.event.inputs.api_version }}" > api_version
       - name: check for release duplicate
         env:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}
         run: make release-check-duplicate
+      
       - name: auto-generate release
         run: make release-build
       - name: push release branch
@@ -34,4 +39,4 @@ jobs:
       - name: create pull request
         run: make release-pr
         env:
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}

.github/workflows/cred-scan.yml

@@ -2,18 +2,17 @@ name: Credential Scanner
 
 on:
   pull_request:
-    branches:
-    - main
-  push:
-    branches:
-    - main
+    branches: [ main ]
+
+permissions:
+  contents: read
 
 jobs:
   cred-scan:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Scan credentials
-      uses: outscale-dev/cred-scan@main
+      uses: outscale/cred-scan@main
       with:
         scan_path: "./"

.github/workflows/github-sanity-scan.yml

@@ -4,11 +4,14 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   github-sanity-scan:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
     - name: Github sanity scanner
       uses: outscale/github-sanity-scan@main
       with:

.github/workflows/publish.yml

@@ -1,14 +1,18 @@
 name: osc-sdk-java maven publishing
+
 on:
   release:
     types: [released]
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     environment: publish
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
     - uses: actions/setup-java@v3
       with:
         distribution: 'temurin' 
@@ -18,9 +22,10 @@ jobs:
         server-username: SONATYPE_USERNAME
         server-password: SONATYPE_PASSWORD
         gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+
     - name: Publish
       run: mvn deploy
       env:
         GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
         SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
-        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}

.github/workflows/pull-request.yml

@@ -10,16 +10,16 @@ permissions:
 
 jobs:
   reuse-test:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Reuse specification test
         run: make reuse-test
   examples-test:
     environment: eu-west-2
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - uses: actions/setup-java@v3
         with:
           distribution: 'temurin' 
@@ -35,19 +35,8 @@ jobs:
           OSC_USERNAME: ${{ secrets.OSC_USERNAME }}
           OSC_PASSWORD: ${{ secrets.OSC_PASSWORD }}
         run: make examples-test
-  regeneration-test:
-    runs-on: ubuntu-20.04
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
-        with:
-          distribution: 'temurin' 
-          java-version: '11'
-          cache: 'maven'
-      - name: SDK re-generation test
-        run: make regen-test
   dependabot-auto-merge:
-    needs: [reuse-test, examples-test, regeneration-test]
+    needs: [reuse-test, examples-test]
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps: