Merged main into 13_Consolidation branch

Author: ejcsid

.github/workflows/dependency_review.yaml

@@ -10,6 +10,6 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Dependency Review
-        uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0
+        uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
         with:
           config-file: it-at-m/.github/workflow-configs/dependency_review.yaml@main

.github/workflows/release-actions.yml

@@ -22,7 +22,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup Node.js
-        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: "lts/*"
 

action-templates/actions/action-build-docs/action.yml

@@ -1,27 +1,23 @@
 # https://vitepress.dev/guide/deploy#github-pages
-name: Build docs
+name: "Build docs"
 
 inputs:
   docs-path:
+    description: "Path to vitepress docs project"
     required: false
     default: "./docs"
-    type: string
-    description: Path to vitepress docs project
   node-version:
+    description: "Node version"
     required: false
     default: "22"
-    type: string
-    description: "Node version"
   build-cmd:
+    description: "Change build command, if using vuepress"
     required: false
     default: "build"
-    type: string
-    description: "Change build command, if using vuepress"
   dist-path:
+    description: "Vitepress output path, which should be uploaded to github pages"
     required: false
     default: ".vitepress/dist"
-    type: string
-    description: "Vitepress output path, which should be uploaded to github pages"
 
 runs:
   using: "composite"
@@ -31,7 +27,7 @@ runs:
       with:
         fetch-depth: 0 # Required for vitepress lastUpdated
     - name: Setup Node
-      uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: ${{ inputs.node-version }}
         cache: npm

action-templates/actions/action-build-image/action.yml

@@ -38,7 +38,7 @@ runs:
     - name: Checkout code
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Download a single artifact
-      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
       with:
         name: ${{ inputs.artifact-name }}
     - name: Login to registry
@@ -56,7 +56,7 @@ runs:
         tags: ${{inputs.image-tags}}
         labels: ${{inputs.image-labels}}
     - name: Build and push image
-      uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
+      uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
       with:
         context: ./${{ inputs.path }}
         push: true

action-templates/actions/action-checkout/action.yml

@@ -1,5 +1,6 @@
 name: Checkout code
 description: "A wrapper for actions/checkout with no args"
+
 runs:
   using: "composite"
   steps:

action-templates/actions/action-codeql/action.yml

@@ -1,4 +1,4 @@
-name: Advanced CodeQL action
+name: "Advanced CodeQL action"
 description: "Scans a repository using provided CodeQL language, buildmode and query scan set"
 
 inputs:
@@ -17,13 +17,14 @@ inputs:
     required: false
     default: "security-and-quality"
   java-version:
-    default: "21"
-    type: string
     description: "Temurin JDK version to use for autobuild (only when codeql-language is java-kotlin and codeql-build is set to autobuild)"
+    required: false
+    default: "21"
   path:
     description: "Path to scan files in"
     required: false
     default: "."
+
 runs:
   using: "composite"
   steps:

action-templates/actions/action-create-github-release/action.yml

@@ -1,32 +1,40 @@
-name: Create GitHub release
-description: "Creates a GitHub release out of a Maven artifact"
+name: "Create GitHub Release"
+description: "Creates a GitHub Release of a Maven Artifact"
+
 inputs:
   artifact-name:
-    required: true
-    type: string
     description: "Name of the artifact to download"
-  tag-name:
     required: true
-    type: string
+  tag-name:
     description: "Name of a tag (e.g. sps-1.0.0 or myproject-1.0.0)"
-  artifact-path:
     required: true
-    type: string
+  artifact-path:
     description: "Path to the artifacts (e.g. ./target/*.jar)"
+    required: true
+  draft:
+    description: "Whether it is a draft release or not"
+    default: "false"
+  prerelease:
+    description: "Whether it is a prerelease or not"
+    default: "false"
+  generate-release-notes:
+    description: "if release notes should be generated"
+    default: "false"
+
 runs:
   using: "composite"
   steps:
     - name: Download a single artifact
-      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
       with:
         name: ${{inputs.artifact-name}}
     - name: Create GitHub release
       id: create_release
-      uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+      uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2
       with:
         tag_name: ${{inputs.tag-name}}
-        draft: false
-        prerelease: false
-        generate_release_notes: false
+        draft: ${{inputs.draft == 'true'}}
+        prerelease: ${{inputs.prerelease == 'true'}}
+        generate_release_notes: ${{inputs.generate-release-notes == 'true'}}
         files: |
           ${{inputs.artifact-path}}

action-templates/actions/action-dependency-review/action.yml

@@ -1,17 +1,17 @@
-name: Dependency review
+name: "Dependency review"
 inputs:
   allow-dependencies-licenses:
+    description: "Contains a comma separated string of packages that will be excluded from license checks"
     required: false
     default: ""
-    type: string
-    description: Contains a comma separated string of packages that will be excluded from license checks.
+
 runs:
   using: "composite"
   steps:
     - name: Checkout code
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Dependency review
-      uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0
+      uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
       with:
         config-file: it-at-m/.github/workflow-configs/dependency_review.yaml@main
         allow-dependencies-licenses: ${{ inputs.allow-dependencies-licenses }}

action-templates/actions/action-deploy-docs/action.yml

@@ -1,15 +1,15 @@
-name: Deploy docs
+name: "Deploy docs"
+
 inputs:
   artifact-name:
     description: "The name of the artifact to deploy"
-    default: "github-pages"
     required: false
-    type: string
+    default: "github-pages"
   deploy-branch:
+    description: "Branch to deploy documentation from"
     required: false
-    type: string
     default: "main"
-    description: "Branch to deploy documentation from"
+
 runs:
   using: "composite"
   steps:

action-templates/actions/action-dockercompose-healthcheck/action.yml

@@ -0,0 +1,47 @@
+name: "Validate docker stack"
+description: "Validates a docker compose stack using its defined healthchecks"
+
+inputs:
+  max-retries:
+    description: "Maximum number of retry attempts"
+    required: false
+    default: "10"
+  retry-interval:
+    description: "Interval between retries in seconds"
+    required: false
+    default: "10"
+  compose-file-path:
+    description: "Path to the docker compose file"
+    required: false
+    default: "./"
+  compose-file-name:
+    description: "Name of the docker compose file"
+    required: false
+    default: "docker-compose.yml"
+  skip-exited:
+    description: "Skip checking exited containers (useful for init containers)"
+    required: false
+    default: "false"
+  skip-no-healthcheck:
+    description: "Skip checking containers without health checks"
+    required: false
+    default: "false"
+
+runs:
+  using: "composite"
+  steps:
+    - name: Checkout repository
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Start Docker Compose services
+      run: |
+        cd ${{ inputs.compose-file-path }}
+        docker compose up -d
+      shell: bash
+    - name: Run healthcheck
+      uses: jaracogmbh/docker-compose-health-check-action@973fbdccf7c8e396b652d3501984c8e530a9fa80 # v1.0.0
+      with:
+        max-retries: ${{ inputs.max-retries }}
+        retry-interval: ${{ inputs.retry-interval }}
+        compose-file: ${{ inputs.compose-file-path }}${{ inputs.compose-file-name }}
+        skip-exited: ${{ inputs.skip-exited }}
+        skip-no-healthcheck: ${{ inputs.skip-no-healthcheck }}