Hotfix #8

.github/workflows/audit.yml

@@ -1,47 +1,55 @@
-name: Audit des dépendances
+name: 'Audit des dépendances npm Backend et Frontend'
 
 on:
   pull_request:
-    types: [opened, reopened, synchronize]
+    types: [opened, edited, synchronize]
+  push:
+    branches:
+      - main
+      - dev
 
 jobs:
-  audit:
+  npm-audit:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18]
 
     steps:
-      - name: Checkout du code
-        uses: actions/checkout@v4
+      - name: 'Checkout code'
+        uses: actions/checkout@v3
 
-      - name: Setup Node.js
+      - name: 'Setup Node.js'
         uses: actions/setup-node@v3
         with:
-          node-version: "18"
+          node-version: ${{ matrix.node-version }}
 
-      - name: Audit backend
+      # ----------------------
+      # Backend audit
+      # ----------------------
+      - name: 'Installation des dépendances backend'
         run: |
-          if [ -d "app/backend" ]; then
-            cd app/backend
-            npm install
-            echo "Audit des dépendances backend..."
-            npm audit --audit-level=high
-            cd ..
-            cd ..
-          else
-            echo "⚠️ Dossier backend introuvable"
-            exit 1
-          fi
-
-      - name: Audit frontend
+          echo "Installation des dépendances backend"
+          cd app/backend
+          npm install
+
+      - name: "Lancement de l'audit npm backend"
+        run: |
+          echo "Audit des dépendances backend"
+          cd app/backend
+          npm audit --audit-level=high
+
+      # ----------------------
+      # Frontend audit
+      # ----------------------
+      - name: 'Installation des dépendances frontend'
         run: |
-          if [ -d "app/frontend" ]; then
-            cd app/frontend
-            npm install
-            echo "Audit des dépendances frontend (non bloquant)..."
-            npm audit --audit-level=high || echo "⚠️ Vulnérabilités connues de react-scripts ignorées"
-            cd ..
-            cd ..
-          else
-            echo "⚠️ Dossier frontend introuvable"
-            exit 1
-          fi
+          echo "Installation des dépendances frontend"
+          cd app/frontend
+          npm install
 
+      - name: "Lancement de l'audit npm frontend"
+        run: |
+          echo "Audit des dépendances frontend"
+          cd app/frontend
+          npm audit --audit-level=high

.github/workflows/branch-name.yml

@@ -1,29 +1,45 @@
-name: Vérification du nom de branche
+name: 'Vérification du nom de la branche'
 
 on:
   pull_request:
-    types: [opened, reopened, synchronize]
+    types: [opened, edited, synchronize]
 
 jobs:
-  check-branch-name:
+  branch-name-check:
     runs-on: ubuntu-latest
     steps:
-      - name: Vérifier le nom de la branche
-        shell: bash
+      - name: 'Vérification du nom de la branche'
+        id: check_branch
         run: |
-          BRANCHE="${{ github.head_ref }}"
-          echo "Nom de branche détecté : $BRANCHE"
+          echo "PR branch: ${{ github.head_ref }}"
 
-          # Regex pour valider le format des branches
-          if [[ "$BRANCHE" =~ ^(feature|feat|fix|hotfix)/[0-9]+-[a-z0-9-]+$ ]] || [[ "$BRANCHE" =~ ^release/[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
-            echo "✅ Nom de branche valide : $BRANCHE"
+          BRANCH="${{ github.head_ref }}"
+
+          # Regex pour les conventions
+          FEATURE_REGEX="^(feat|feature)/[0-9]+-[a-z0-9-]+$"
+          FIX_REGEX="^fix/[0-9]+-[a-z0-9-]+$"
+          HOTFIX_REGEX="^hotfix/[0-9]+-[a-z0-9-]+$"
+          RELEASE_REGEX="^release/[0-9]+\.[0-9]+\.[0-9]+$"
+
+          if [[ $BRANCH =~ $FEATURE_REGEX ]]; then
+            echo "✅ Nom de la branche valide (feature)"
+            exit 0
+          elif [[ $BRANCH =~ $FIX_REGEX ]]; then
+            echo "✅ Nom de la branche valide (fix)"
+            exit 0
+          elif [[ $BRANCH =~ $HOTFIX_REGEX ]]; then
+            echo "✅ Nom de la branche valide (hotfix)"
+            exit 0
+          elif [[ $BRANCH =~ $RELEASE_REGEX ]]; then
+            echo "✅ Nom de la branche valide (release)"
+            exit 0
           else
-            echo "❌ Nom de branche invalide : $BRANCHE"
-            echo "💡 Format attendu :"
-            echo "  - feature/<issue-id>-short-description"
-            echo "  - fix/<issue-id>-short-description"
-            echo "  - hotfix/<issue-id>-short-description"
-            echo "  - release/x.y.z"
-            echo "Exemple : feature/123-login-page"
+            echo "❌ Nom de la branche invalide: $BRANCH"
+            echo ""
+            echo "Le nom de la branche doit suivre la convention :"
+            echo "  feature/<issue-id>-description"
+            echo "  fix/<issue-id>-description"
+            echo "  hotfix/<issue-id>-description"
+            echo "  release/<x.y.z>"
             exit 1
           fi

.github/workflows/commit-message.yml

@@ -1,44 +1,55 @@
-name: Vérification des messages de commit
+name: 'Vérification des messages de commit'
 
 on:
-  push:
-    branches:
-      - main
-      - dev
-      - "feature/*"
-      - "fix/*"
-      - "hotfix/*"
-      - "release/*"
+  pull_request:
+    types: [opened, edited, synchronize]
 
 jobs:
-  commit-message:
+  commit-message-check:
     runs-on: ubuntu-latest
+
     steps:
-      - uses: actions/checkout@v4
+      - name: 'Checkout'
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
 
-      - name: Vérifier le format des messages de commit
+      - name: 'Valider les messages de commit'
         run: |
-          echo "Récupération des commits du dernier push..."
-          # Récupère les commits du dernier push
-          COMMITS=$(git log origin/${GITHUB_REF_NAME}..HEAD --pretty=format:"%s")
+          echo "🔍 Vérification des messages de commit pour la PR"
+
+          BASE_REF="${{ github.event.pull_request.base.ref }}"
+          echo "Branche de base : $BASE_REF"
+
+          git fetch origin $BASE_REF
+
+          REGEX="^(feat|fix|docs|chore|refactor|test|hotfix)\([a-z0-9_-]+\): Fixes #[0-9]+ - .+"
 
-          echo "Commits détectés :"
-          echo "$COMMITS"
+          COMMITS=$(git log origin/$BASE_REF..HEAD --pretty=format:"%H")
 
           INVALID=false
 
           for COMMIT in $COMMITS; do
-            # Regex pour le format attendu : type(nom): Fixes #<num> - message
-            if ! [[ "$COMMIT" =~ ^(feat|fix|docs|chore|refactor|test|hotfix)\([a-zA-Z0-9_-]+\):\ Fixes\ #[0-9]+\ -\ .+ ]]; then
-              echo "❌ Commit invalide : $COMMIT"
-              echo "💡 Format attendu : type(nom): Fixes #<issue> - message"
+            MESSAGE=$(git log -1 --pretty=format:"%s" $COMMIT)
+
+            # Ignorer les commits de merge
+            if [[ "$MESSAGE" =~ ^Merge\  ]]; then
+              echo "⏭️ Commit de merge ignoré: $MESSAGE"
+              continue
+            fi
+
+            if ! [[ "$MESSAGE" =~ $REGEX ]]; then
+              echo "❌ Commit invalide: $MESSAGE"
               INVALID=true
             else
-              echo "✅ Commit valide : $COMMIT"
+              echo "✅ Commit valide: $MESSAGE"
             fi
           done
 
           if [ "$INVALID" = true ]; then
-            echo "❌ Au moins un commit ne respecte pas le format attendu."
+            echo ""
+            echo "⚠️ Un ou plusieurs commits ne respectent pas le format attendu !"
+            echo "Format attendu : type(nom): Fixes #<issue> - message"
+            echo "Types autorisés : feat, fix, docs, chore, refactor, test, hotfix"
             exit 1
           fi

.github/workflows/hotfix.yml

@@ -0,0 +1,86 @@
+name: 'Workflow Hotfix'
+
+permissions:
+  contents: write
+
+on:
+  push:
+    branches:
+      - 'hotfix/*'
+
+jobs:
+  hotfix:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: 'Checkout code'
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: 'Configurer Git'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: 'Déterminer la version hotfix'
+        id: semver
+        run: |
+          set -e
+
+          # Dernier tag vX.Y.Z
+          LATEST_TAG=$(git tag --sort=-v:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | head -n 1)
+
+          if [[ -z "$LATEST_TAG" ]]; then
+            echo "Aucun tag trouvé, initialisation à v0.0.1"
+            VERSION="0.0.1"
+          else
+            VERSION="${LATEST_TAG#v}"
+            MAJOR=$(echo "$VERSION" | cut -d. -f1)
+            MINOR=$(echo "$VERSION" | cut -d. -f2)
+            PATCH=$(echo "$VERSION" | cut -d. -f3)
+            PATCH=$((PATCH + 1))
+            VERSION="$MAJOR.$MINOR.$PATCH"
+          fi
+
+          TAG="v$VERSION"
+          echo "Nouvelle version candidate : $TAG"
+
+          # Vérifie si le tag existe déjà
+          if git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "⚠️ Le tag $TAG existe déjà, skip."
+            echo "skip=true" >> $GITHUB_OUTPUT
+          else
+            echo "skip=false" >> $GITHUB_OUTPUT
+          fi
+
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+
+      - name: 'Créer le tag git'
+        if: steps.semver.outputs.skip != 'true'
+        run: |
+          git tag "${{ steps.semver.outputs.tag }}"
+          git push origin "${{ steps.semver.outputs.tag }}"
+
+      - name: 'Extraire la section du changelog'
+        if: steps.semver.outputs.skip != 'true'
+        id: changelog
+        run: |
+          VERSION="${{ steps.semver.outputs.version }}"
+          if [[ -f CHANGELOG.md ]]; then
+            sed -n "/## \[$VERSION\]/,/^## /p" CHANGELOG.md > release_notes.txt
+          else
+            echo "No CHANGELOG.md found" > release_notes.txt
+          fi
+          echo "release_notes<<EOF" >> $GITHUB_OUTPUT
+          cat release_notes.txt >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+
+      - name: 'Créer une release GitHub'
+        if: steps.semver.outputs.skip != 'true'
+        uses: ncipollo/release-action@v1
+        with:
+          tag: '${{ steps.semver.outputs.tag }}'
+          name: 'Hotfix ${{ steps.semver.outputs.tag }}'
+          body: '${{ steps.changelog.outputs.release_notes }}'