Skip to content

Commit 84fad35

Browse files
aschey-forpeopleaschey-forpeople
committed
merge
2 parents 9feb219 + 55e0e8c commit 84fad35

510 files changed

Lines changed: 8837 additions & 1911 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/_deploy-tofuservice-layer.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ jobs:
6767
service:${{ matrix.context.service }}
6868
steps:
6969
- name: Checkout
70-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
70+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7171
with:
7272
fetch-depth: 0
7373
ref: ${{ inputs.git-ref || github.ref }}
@@ -81,7 +81,7 @@ jobs:
8181
echo "role-arn=$role_arn" >> "$GITHUB_OUTPUT"
8282
8383
- name: Configure AWS credentials
84-
uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6
84+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
8585
with:
8686
role-to-assume: ${{ steps.get-role-arn.outputs.role-arn }}
8787
role-session-name: deploy-${{ matrix.context.layer }}-${{ matrix.context.service }}-${{ github.run_id }}-${{ github.run_attempt }}

‎.github/workflows/_deploy-tofuservices.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ jobs:
9696
echo "account-type=$account_type" >> "$GITHUB_OUTPUT"
9797
9898
- name: Checkout
99-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
99+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
100100
with:
101101
fetch-depth: 0
102102
ref: ${{ inputs.git-ref || github.ref_name }}

‎.github/workflows/build-container-images.yml‎

Lines changed: 15 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ jobs:
131131
echo "Validating inputs to ensure they conform to expected formats..."
132132
echo "${{ inputs.versionTag }}" | grep -P '^\d+\.\d+\.\d+$|^\d+\.\d+\.\d+-[a-zA-Z0-9-]+|v3\.\d{4}.\d{2}.\d{2}.\d+.*$'
133133
134-
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
134+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
135135
with:
136136
fetch-depth: 0
137137
ref: ${{ inputs.branch || github.ref_name }}
@@ -190,7 +190,7 @@ jobs:
190190
steps:
191191
- name: Configure AWS credentials
192192
if: ${{ !inputs.skipBasePull }}
193-
uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6
193+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
194194
with:
195195
role-to-assume: ${{ secrets.NON_PROD_ACCOUNT_GHA_ROLE_ARN }}
196196
role-session-name: build-container-images-${{ github.run_id }}-${{ github.run_attempt }}
@@ -244,7 +244,7 @@ jobs:
244244
BASE_IMAGES_VERSION: ${{ needs.compute-matrix-and-version.outputs.base-images-version }}
245245
steps:
246246
- name: Checkout
247-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
247+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
248248
with:
249249
fetch-depth: 0
250250
ref: ${{ inputs.branch || github.ref_name }}
@@ -277,6 +277,8 @@ jobs:
277277
- name: Generate build-contexts
278278
if: ${{ !inputs.skipBasePull }}
279279
id: gen-build-contexts
280+
env:
281+
NAMED_CONTEXTS: ${{ toJSON(matrix.image.namedContexts) || '{}' }}
280282
run: |
281283
build_contexts=()
282284
@@ -287,6 +289,15 @@ jobs:
287289
build_contexts+=("${image}:latest=docker-image://localhost:5000/${image}:${BASE_IMAGES_VERSION}")
288290
done
289291
292+
readarray -t named_contexts < <(echo "$NAMED_CONTEXTS" | jq -rc '. // {} | to_entries[]')
293+
for named_context in "${named_contexts[@]}"
294+
do
295+
context_name="$(jq -rc '.key' <<<"$named_context")"
296+
context_path="$(jq -rc '.value' <<<"$named_context")"
297+
298+
build_contexts+=("${context_name}=${context_path}")
299+
done
300+
290301
build_contexts_json="$(jq -c -n '$ARGS.positional' --args "${build_contexts[@]}")"
291302
292303
echo "build-contexts=$build_contexts_json" >> "$GITHUB_OUTPUT"
@@ -349,7 +360,7 @@ jobs:
349360
merge-multiple: true
350361

351362
- name: Configure AWS credentials
352-
uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6
363+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
353364
with:
354365
role-to-assume: ${{ steps.get-role-arn.outputs.role-arn }}
355366
role-session-name: build-container-images-${{ github.run_id }}-${{ github.run_attempt }}

‎.github/workflows/build-release.yml‎

Lines changed: 9 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@ jobs:
119119
bfd_dev_version: ${{ steps.bfd-version-strings.outputs.BFD_DEV_VERSION }}
120120
steps:
121121
- name: Checkout
122-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
122+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
123123
with:
124124
fetch-depth: 0
125125
ref: ${{ inputs.releaseBranch || github.ref_name }}
@@ -182,7 +182,7 @@ jobs:
182182
private-key: ${{ secrets.BFD_RELEASE_APP_KEY }}
183183

184184
- name: Checkout
185-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
185+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
186186
with:
187187
fetch-depth: 0
188188
ref: ${{ inputs.releaseBranch || github.ref_name }}
@@ -210,7 +210,7 @@ jobs:
210210
sudo chmod +x /usr/bin/gitleaks
211211
212212
- name: Setup JDK
213-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
213+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
214214
with:
215215
java-version: "25"
216216
distribution: corretto
@@ -291,20 +291,8 @@ jobs:
291291
with:
292292
node-version: "22"
293293

294-
- name: Install Sushi
295-
run: |
296-
npm install -g fsh-sushi
297-
sushi build
298-
echo "Installed + run sushi"
299-
working-directory: apps/bfd-model-idr/sushi
300-
301-
- name: Install fhirpath
302-
run: |
303-
npm install fhirpath
304-
working-directory: apps/bfd-model-idr
305-
306294
- name: Install uv
307-
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
295+
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
308296
with:
309297
version: "0.11.2"
310298

@@ -392,7 +380,7 @@ jobs:
392380
path: ${{ runner.temp }}
393381

394382
- name: Configure AWS credentials
395-
uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6
383+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
396384
with:
397385
role-to-assume: ${{ steps.get-role-arn.outputs.role-arn }}
398386
role-session-name: build-release-${{ github.run_id }}-${{ github.run_attempt }}
@@ -444,6 +432,7 @@ jobs:
444432
bfd-platform-server-regression,
445433
bfd-platform-mount-certstores,
446434
bfd-platform-server-fluent-bit,
435+
bfd-platform-server-datadog-agent,
447436
bfd-platform-idr-pipeline,
448437
bfd-platform-migrator-ng,
449438
bfd-platform-run-locust,
@@ -452,9 +441,10 @@ jobs:
452441
bfd-platform-pipeline-ccw-runner,
453442
bfd-platform-consume-idr-events,
454443
bfd-platform-run-idr-pipeline,
455-
bfd-platform-codebuild-runner
444+
bfd-platform-codebuild-runner,
445+
bfd-platform-idr-bfd-validator
456446
baseImagesVersion: ${{ needs.compute-version-strings.outputs.bfd_release }}
457-
cleanupImageArtifacts: false # We'll cleanup at the end of build-release, so don't do anything
447+
cleanupImageArtifacts: false
458448
tagLatest: ${{ !contains(needs.compute-version-strings.outputs.bfd_release, '-') }}
459449
secrets: inherit
460450

@@ -486,14 +476,3 @@ jobs:
486476
tag: ${{ needs.compute-version-strings.outputs.bfd_release }}
487477
name: "v${{ needs.compute-version-strings.outputs.bfd_release }}"
488478
artifacts: "*.csv,*.json,*.xlsx,*.yaml"
489-
490-
cleanup-artifacts:
491-
if: ${{ !cancelled() }}
492-
needs: [build-other-images, create-gh-release]
493-
runs-on: ubuntu-24.04
494-
steps:
495-
- name: Delete all artifacts
496-
uses: GeekyEggo/delete-artifact@176a747ab7e287e3ff4787bf8a148716375ca118 # v6
497-
with:
498-
name: '*'
499-
failOnError: false

‎.github/workflows/build_container_images_matrix.json‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,5 +82,20 @@
8282
"dockerfile": "ops/images/bfd-platform-codebuild-runner/Dockerfile",
8383
"contextDir": "ops/images/bfd-platform-codebuild-runner",
8484
"platform": "linux/arm64"
85+
},
86+
{
87+
"name": "bfd-platform-idr-bfd-validator",
88+
"dockerfile": "apps/utils/idr-bfd-validator/Dockerfile",
89+
"contextDir": "apps/utils/idr-bfd-validator",
90+
"namedContexts": {
91+
"idr-pipeline": "apps/bfd-pipeline-idr"
92+
},
93+
"platform": "linux/arm64"
94+
},
95+
{
96+
"name": "bfd-platform-server-datadog-agent",
97+
"dockerfile": "ops/images/bfd-platform-server-datadog-agent/Dockerfile",
98+
"contextDir": "ops/images/bfd-platform-server-datadog-agent",
99+
"platform": "linux/arm64"
85100
}
86101
]

‎.github/workflows/ci-java.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
files: ${{ steps.workflow_files.outputs.files }}
3939
steps:
4040
- name: Checkout repository
41-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
41+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4242
with:
4343
fetch-depth: 2
4444
ref: ${{ inputs.branch }}
@@ -54,12 +54,12 @@ jobs:
5454
needs: workflow
5555
if: needs.workflow.outputs.files
5656
steps:
57-
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
57+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5858
with:
5959
fetch-depth: 2
6060
ref: ${{ inputs.branch }}
6161
- name: 'Setup JDK'
62-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
62+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
6363
with:
6464
java-version: '25'
6565
distribution: 'corretto'
@@ -73,7 +73,7 @@ jobs:
7373
if: ${{ needs.workflow.outputs.files || (github.actor != 'actions-user' && github.ref_name == 'master') }}
7474
steps:
7575
- name: 'Checkout repo'
76-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
76+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7777
with:
7878
fetch-depth: 0
7979
ref: ${{ inputs.branch }}
@@ -82,13 +82,13 @@ jobs:
8282
with:
8383
node-version: "22"
8484
- name: 'Setup JDK'
85-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
85+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
8686
with:
8787
java-version: '25'
8888
distribution: 'corretto'
8989
cache: 'maven'
9090
- name: Install uv
91-
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
91+
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
9292

9393
- name: Mask sensitive AWS data
9494
id: mask-sensitive-aws-data

‎.github/workflows/ci-pipeline-synthetic.yml‎

Lines changed: 3 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@ jobs:
1414
steps:
1515
- name: Checkout code
1616
id: code-checkout
17-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
17+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
1818
- name: Install uv
19-
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
19+
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
2020
with:
2121
version: "0.11.2"
2222
- name: Install node
@@ -25,20 +25,13 @@ jobs:
2525
node-version: "22"
2626
# Maven is needed to run the migrator
2727
- name: "Setup JDK"
28-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
28+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
2929
with:
3030
java-version: "25"
3131
distribution: "corretto"
32-
- name: Install dependencies
33-
run: npm install -g fsh-sushi && npm install fhirpath
34-
working-directory: apps/bfd-model-idr
3532
- name: Sync UV in bfd-model-idr
3633
run: uv sync
3734
working-directory: apps/bfd-model-idr
38-
- name: Build sushi
39-
run: |
40-
cd ${{ github.workspace }}/apps/bfd-model-idr
41-
sushi build ./sushi
4235
- name: Generate v3 Data Dictionary
4336
run: uv run gen_dd.py
4437
working-directory: apps/bfd-model-idr

‎.github/workflows/ci-python.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,16 +50,16 @@ jobs:
5050
steps:
5151
- name: Checkout code
5252
id: code-checkout
53-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
53+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5454
with:
5555
ref: ${{ inputs.branch }}
5656
# Maven is needed to run the migrator
5757
- name: "Setup JDK"
58-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
58+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
5959
with:
6060
java-version: "25"
6161
distribution: "corretto"
62-
- uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
62+
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
6363
- name: Run Python Tests per project
6464
id: run-pytest-set
6565
run: |

‎.github/workflows/ci-static-site.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
runs-on: ubuntu-24.04
8787
steps:
8888
- name: Checkout
89-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
89+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
9090
with:
9191
fetch-depth: 0
9292
ref: ${{ inputs.branch || github.ref_name }}
@@ -110,7 +110,7 @@ jobs:
110110
echo "BFD_RELEASE=$release_version" >> $GITHUB_ENV
111111
112112
- name: Configure AWS credentials
113-
uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6
113+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
114114
with:
115115
role-to-assume: ${{ secrets.GHA_AWS_IAM_ROLE_ARN }}
116116
role-session-name: ci-static-site
@@ -169,7 +169,7 @@ jobs:
169169
}
170170
171171
- name: Setup Ruby and install dependencies
172-
uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1
172+
uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1
173173
with:
174174
ruby-version: "3.3"
175175
bundler-cache: true

‎.github/workflows/release-and-deploy-bfd.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
echo "role-arn=$role_arn" >> "$GITHUB_OUTPUT"
5757
5858
- name: Assume role to AWS
59-
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
59+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
6060
with:
6161
role-to-assume: ${{ steps.get-role-arn.outputs.role-arn }}
6262
role-session-name: get-sops-slack-webhook-${{ github.run_id }}-${{ github.run_attempt }}
@@ -152,7 +152,7 @@ jobs:
152152
echo "role-arn=$role_arn" >> "$GITHUB_OUTPUT"
153153
154154
- name: Assume role to AWS
155-
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
155+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
156156
with:
157157
role-to-assume: ${{ steps.get-role-arn.outputs.role-arn }}
158158
role-session-name: get-sops-slack-webhook-${{ github.run_id }}-${{ github.run_attempt }}

0 commit comments

Comments
 (0)