Skip to content

Commit bb05540

Browse files
mocsharpmocsharp
authored
release 0.5.1 - Update dependencies (#522)
* Update dependencies Signed-off-by: Victor Chang <[email protected]> * Update Dockerfile and CI configuration - Updated libc6-dev version in Dockerfile from 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9. - Modified GitHub Actions CI configuration to use updated versions for GitVersion and upload-artifact actions. - Adjusted artifact paths in CI workflow to reflect new naming conventions. Also added a new entry in the changelog for version 0.5.1 addressing vulnerabilities in .NET (CVE-2024-38229, CVE-2024-35264). Signed-off-by: Victor Chang <[email protected]> --------- Signed-off-by: Victor Chang <[email protected]>
1 parent c41faaf commit bb05540

File tree

59 files changed

+107236
-26936
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

59 files changed

+107236
-26936
lines changed

‎.github/.gitversion.yml

+7-1
Original file line numberDiff line numberDiff line change
@@ -12,23 +12,29 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15+
workflow: GitHubFlow/v1
1516
assembly-versioning-scheme: MajorMinorPatchTag
17+
assembly-file-versioning-scheme: MajorMinorPatchTag
1618
mode: ContinuousDelivery
1719
branches:
1820
main:
1921
label: ''
22+
regex: ^main$
2023
release:
2124
label: rc
25+
regex: ^releases?[/-](?<BranchName>.+)
2226
develop:
2327
label: beta
2428
increment: Patch
29+
regex: ^develop$
2530
feature:
2631
label: alpha.{BranchName}
32+
regex: ^features?[/-](?<BranchName>.+)
2733
pull-request:
2834
label: pr
2935
increment: Patch
36+
regex: ^(pull|pull\-requests|pr)[/-]
3037

3138
ignore:
3239
sha: []
3340
merge-message-formats: {}
34-
next-version: 0.3.17

‎.github/workflows/ci.yml

+51-54
Original file line numberDiff line numberDiff line change
@@ -37,30 +37,27 @@ jobs:
3737

3838
outputs:
3939
semVer: ${{ steps.gitversion.outputs.semVer }}
40-
preReleaseLabel: ${{ steps.gitversion.outputs.preReleaseLabel }}
41-
majorMinorPatch: ${{ steps.gitversion.outputs.majorMinorPatch }}
40+
preReleaseLabel: ${{ steps.gitversion.outputs.PreReleaseLabel }}
41+
majorMinorPatch: ${{ steps.gitversion.outputs.MajorMinorPatch }}
4242
nuGetVersionV2: ${{ steps.gitversion.outputs.MajorMinorPatch }}
4343

4444
steps:
4545
- uses: actions/checkout@v4
4646
with:
4747
fetch-depth: 0
4848

49-
- uses: actions/setup-dotnet@v3
49+
- uses: actions/setup-dotnet@v4
5050
with:
5151
dotnet-version: "8.0.x"
5252

53-
# - name: Install GitVersion
54-
# run: dotnet tool install --global GitVersion.Tool
55-
56-
- name: Install GitVersion
57-
uses: gittools/actions/gitversion/[email protected]
53+
- name: Setup GitVersion
54+
uses: gittools/actions/gitversion/[email protected]
5855
with:
59-
versionSpec: '6.x'
56+
versionSpec: '6.0.x'
6057

6158
- name: Determine Version
6259
id: gitversion
63-
uses: gittools/actions/gitversion/execute@v2.0.1
60+
uses: gittools/actions/gitversion/execute@v3.1.11
6461
with:
6562
useConfigFile: true
6663
updateAssemblyInfo: true
@@ -71,7 +68,7 @@ jobs:
7168
run: cat src/AssemblyInfo.cs
7269

7370
- name: Upload AssemblyInfo
74-
uses: actions/upload-artifact@v3.1.2
71+
uses: actions/upload-artifact@v4.6.2
7572
if: always()
7673
with:
7774
name: assembly-info
@@ -91,20 +88,20 @@ jobs:
9188
with:
9289
fetch-depth: 0
9390

94-
- uses: actions/setup-dotnet@v3
91+
- uses: actions/setup-dotnet@v4
9592
with:
9693
dotnet-version: "8.0.x"
9794

9895
- name: Enable NuGet cache
99-
uses: actions/cache@v3.3.2
96+
uses: actions/cache@v4.2.3
10097
with:
10198
path: ~/.nuget/packages
10299
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
103100
restore-keys: |
104101
${{ runner.os }}-nuget
105102
106103
- name: Initialize CodeQL
107-
uses: github/codeql-action/init@v2
104+
uses: github/codeql-action/init@v3
108105
with:
109106
languages: csharp
110107

@@ -117,7 +114,7 @@ jobs:
117114
working-directory: ./src
118115

119116
- name: Perform CodeQL Analysis
120-
uses: github/codeql-action/analyze@v2
117+
uses: github/codeql-action/analyze@v3
121118

122119
analyze:
123120
runs-on: ubuntu-latest
@@ -132,7 +129,7 @@ jobs:
132129
with:
133130
fetch-depth: 0
134131

135-
- uses: actions/setup-dotnet@v3
132+
- uses: actions/setup-dotnet@v4
136133
with:
137134
dotnet-version: "8.0.x"
138135

@@ -146,7 +143,7 @@ jobs:
146143
cache: yes
147144

148145
- name: Enable NuGet cache
149-
uses: actions/cache@v3.3.2
146+
uses: actions/cache@v4.2.3
150147
with:
151148
path: ~/.nuget/packages
152149
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
@@ -189,17 +186,17 @@ jobs:
189186
- 27017:27017
190187
steps:
191188
- name: Set up JDK 17
192-
uses: actions/setup-java@v3
189+
uses: actions/setup-java@v4
193190
with:
194191
distribution: zulu
195192
java-version: '17'
196193

197-
- uses: actions/setup-dotnet@v3
194+
- uses: actions/setup-dotnet@v4
198195
with:
199196
dotnet-version: "8.0.x"
200197

201198
- name: Enable NuGet cache
202-
uses: actions/cache@v3.3.2
199+
uses: actions/cache@v4.2.3
203200
with:
204201
path: ~/.nuget/packages
205202
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
@@ -273,12 +270,12 @@ jobs:
273270
with:
274271
fetch-depth: 0
275272

276-
- uses: actions/setup-dotnet@v3
273+
- uses: actions/setup-dotnet@v4
277274
with:
278275
dotnet-version: "8.0.x"
279276

280277
- name: Enable NuGet cache
281-
uses: actions/cache@v3.3.2
278+
uses: actions/cache@v4.2.3
282279
with:
283280
path: ~/.nuget/packages
284281
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
@@ -300,10 +297,10 @@ jobs:
300297
popd
301298
302299
- name: Upload Integration Test Results
303-
uses: actions/upload-artifact@v3.1.2
300+
uses: actions/upload-artifact@v4.6.2
304301
if: always()
305302
with:
306-
name: integration-${{ matrix.feature }}
303+
name: integration-${{ matrix.feature }}-${{ matrix.database }}
307304
path: |
308305
${{ github.workspace }}/LivingDoc.html
309306
${{ github.workspace }}/services.log
@@ -316,8 +313,8 @@ jobs:
316313
env:
317314
NUGETVER: ${{ needs.calc-version.outputs.nuGetVersionV2 }}
318315
SEMVER: ${{ needs.calc-version.outputs.semVer }}
319-
PRERELEASELABEL: ${{ needs.calc-version.outputs.preReleaseLabel }}
320-
MAJORMINORPATCH: ${{ needs.calc-version.outputs.majorMinorPatch }}
316+
PRERELEASELABEL: ${{ needs.calc-version.outputs.PreReleaseLabel }}
317+
MAJORMINORPATCH: ${{ needs.calc-version.outputs.MajorMinorPatch }}
321318
strategy:
322319
matrix:
323320
os: [ubuntu-latest]
@@ -338,12 +335,12 @@ jobs:
338335
with:
339336
fetch-depth: 0
340337

341-
- uses: actions/setup-dotnet@v3
338+
- uses: actions/setup-dotnet@v4
342339
with:
343340
dotnet-version: "8.0.x"
344341

345342
- name: Enable NuGet cache
346-
uses: actions/cache@v3.3.2
343+
uses: actions/cache@v4.2.3
347344
with:
348345
path: ~/.nuget/packages
349346
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
@@ -352,7 +349,7 @@ jobs:
352349
353350
- name: Download AssemblyInfo.cs
354351
id: download
355-
uses: actions/download-artifact@v3
352+
uses: actions/download-artifact@v4
356353
with:
357354
name: assembly-info
358355
path: src/
@@ -389,9 +386,9 @@ jobs:
389386
dir -r ~/release
390387
391388
- name: Upload CLI
392-
uses: actions/upload-artifact@v3.1.2
389+
uses: actions/upload-artifact@v4.6.2
393390
with:
394-
name: artifacts
391+
name: artifacts-cli
395392
path: ~/release
396393
retention-days: 7
397394

@@ -405,7 +402,7 @@ jobs:
405402

406403
- name: Upload Nuget
407404
if: ${{ matrix.os == 'ubuntu-latest' }}
408-
uses: actions/upload-artifact@v3.1.2
405+
uses: actions/upload-artifact@v4.6.2
409406
with:
410407
name: nuget
411408
path: ~/nupkg
@@ -484,18 +481,18 @@ jobs:
484481
runs-on: windows-latest
485482
needs: [calc-version]
486483
env:
487-
SEMVER: ${{ needs.calc-version.outputs.semVer }}
484+
SEMVER: ${{ needs.calc-version.outputs.SemVer }}
488485
steps:
489486
- uses: actions/checkout@v4
490487
with:
491488
fetch-depth: 0
492489

493-
- uses: actions/setup-dotnet@v3
490+
- uses: actions/setup-dotnet@v4
494491
with:
495492
dotnet-version: "8.0.x"
496493

497494
- name: Enable NuGet cache
498-
uses: actions/cache@v3.3.2
495+
uses: actions/cache@v4.2.3
499496
with:
500497
path: ~/.nuget/packages
501498
key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
@@ -532,9 +529,9 @@ jobs:
532529
Get-ChildItem ~\release -Recurse
533530
534531
- name: Upload docs
535-
uses: actions/upload-artifact@v3.1.2
532+
uses: actions/upload-artifact@v4.6.2
536533
with:
537-
name: artifacts
534+
name: artifacts-docs
538535
path: ~/release
539536
retention-days: 7
540537

@@ -544,7 +541,7 @@ jobs:
544541
needs: [build, unit-test, integration-test]
545542
if: ${{ ! ( github.event.inputs.nuget ) && ! ( contains(github.ref, 'refs/heads/main') ) }}
546543
steps:
547-
- uses: actions/download-artifact@v3
544+
- uses: actions/download-artifact@v4
548545
id: download
549546

550547
- name: List artifacts
@@ -553,7 +550,7 @@ jobs:
553550
- name: Install grp
554551
run: dotnet tool install gpr -g
555552

556-
- uses: actions/setup-dotnet@v3
553+
- uses: actions/setup-dotnet@v4
557554
env:
558555
NUGET_AUTH_TOKEN: ${{secrets.GITHUB_TOKEN}}
559556
with:
@@ -568,16 +565,16 @@ jobs:
568565
runs-on: ubuntu-latest
569566
needs: [calc-version, unit-test, docs, integration-test, analyze]
570567
env:
571-
SEMVER: ${{ needs.calc-version.outputs.semVer }}
572-
PRERELEASELABEL: ${{ needs.calc-version.outputs.preReleaseLabel }}
573-
MAJORMINORPATCH: ${{ needs.calc-version.outputs.majorMinorPatch }}
568+
SEMVER: ${{ needs.calc-version.outputs.SemVer }}
569+
PRERELEASELABEL: ${{ needs.calc-version.outputs.PreReleaseLabel }}
570+
MAJORMINORPATCH: ${{ needs.calc-version.outputs.MajorMinorPatch }}
574571

575572
steps:
576573
- uses: actions/checkout@v4
577574
with:
578575
fetch-depth: 0
579576

580-
- uses: actions/download-artifact@v3
577+
- uses: actions/download-artifact@v4
581578
id: download
582579

583580
- name: List artifacts
@@ -586,7 +583,7 @@ jobs:
586583
- name: Install grp
587584
run: dotnet tool install gpr -g
588585

589-
- uses: actions/setup-dotnet@v3
586+
- uses: actions/setup-dotnet@v4
590587
env:
591588
NUGET_AUTH_TOKEN: ${{secrets.GITHUB_TOKEN}}
592589
with:
@@ -607,34 +604,34 @@ jobs:
607604
msg: ${{ github.repository }}
608605

609606
- name: Install GitReleaseManager
610-
uses: gittools/actions/gitreleasemanager/setup@v0.10.2
607+
uses: gittools/actions/gitreleasemanager/setup@v3.1.11
611608
with:
612-
versionSpec: "0.13.x"
609+
versionSpec: '0.18.x'
613610

614611
- name: Create release with GitReleaseManager
615-
uses: gittools/actions/gitreleasemanager/create@v0.10.2
612+
uses: gittools/actions/gitreleasemanager/create@v3.1.11
616613
with:
617614
token: ${{ secrets.GITHUB_TOKEN }}
618615
owner: ${{ steps.repo.outputs._0 }}
619616
repository: ${{ steps.repo.outputs._1 }}
620617
milestone: ${{ env.MAJORMINORPATCH }}
621618
name: "Release v${{ env.MAJORMINORPATCH }}"
622619
assets: |
623-
artifacts/mig-cli-${{ env.SEMVER }}-linux-x64.zip
624-
artifacts/mig-cli-${{ env.SEMVER }}-win-x64.zip
625-
artifacts/mig-docs-${{ env.SEMVER }}.zip
620+
artifacts-cli/mig-cli-${{ env.SEMVER }}-linux-x64.zip
621+
artifacts-cli/mig-cli-${{ env.SEMVER }}-win-x64.zip
622+
artifacts-docs/mig-docs-${{ env.SEMVER }}.zip
626623
627624
- name: Publish release with GitReleaseManager
628-
uses: gittools/actions/gitreleasemanager/publish@v0.10.2
625+
uses: gittools/actions/gitreleasemanager/publish@v3.1.11
629626
if: ${{ contains(github.ref, 'refs/heads/main') }}
630627
with:
631628
token: ${{ secrets.GITHUB_TOKEN }}
632629
owner: ${{ steps.repo.outputs._0 }}
633630
repository: ${{ steps.repo.outputs._1 }}
634-
tagName: ${{ env.MAJORMINORPATCH }}
631+
milestone: ${{ env.MAJORMINORPATCH }}
635632

636633
- name: Close release with GitReleaseManager
637-
uses: gittools/actions/gitreleasemanager/close@v0.10.2
634+
uses: gittools/actions/gitreleasemanager/close@v3.1.11
638635
if: ${{ contains(github.ref, 'refs/heads/main') }}
639636
with:
640637
token: ${{ secrets.GITHUB_TOKEN }}
@@ -646,7 +643,7 @@ jobs:
646643
if: ${{ contains(github.ref, 'refs/heads/main') }}
647644
run: |
648645
mkdir userguide
649-
unzip artifacts/mig-docs-${{ env.SEMVER }}.zip -d userguide/
646+
unzip artifacts-docs/mig-docs-${{ env.SEMVER }}.zip -d userguide/
650647
ls -lR userguide/
651648
652649
- name: Deploy Docs

‎.licenserc.yaml

+2-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,8 @@ header:
1616
license:
1717
spdx-id: Apache-2.0
1818
copyright-owner: MONAI Consortium
19-
19+
copyright-year: 2022-2025
20+
2021
paths-ignore:
2122
- 'LICENSE'
2223
- '.github/**/*.md'

‎Dockerfile

+2-2
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
1414

15-
FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy as build
15+
FROM mcr.microsoft.com/dotnet/sdk:8.0-jammy AS build
1616

1717
# Install the tools
1818
RUN dotnet tool install --tool-path /tools dotnet-trace
@@ -36,7 +36,7 @@ ENV DEBIAN_FRONTEND=noninteractive
3636
RUN apt-get clean \
3737
&& apt-get update \
3838
&& apt-get install -y --no-install-recommends curl \
39-
&& apt-get install -y libc6-dev=2.35-0ubuntu3.8 \
39+
&& apt-get install -y libc6-dev=2.35-0ubuntu3.9 \
4040
&& rm -rf /var/lib/apt/lists # this is a workaround for Mongo encryption library
4141

4242
WORKDIR /opt/monai/ig

0 commit comments

Comments
 (0)