Automated squashed import from release in private repo

Author: rdobeheer

.db_requirements

@@ -1 +1 @@
-v1.13.0
+v1.14.0

.github/ISSUE_TEMPLATE/RELEASE.yml

@@ -0,0 +1,93 @@
+name: Release ticket
+description: Create a release ticket for DPR (in English).
+title: "Release [VUL TAG IN] naar PROD"
+labels: ["Release"]
+projects: ["minvws/40"]
+body:
+  - type: input
+    attributes:
+      label: "Current version DPR on PROD:"
+      placeholder: v1.11.0
+  - type: input
+    attributes:
+      label: "New version DPR on PROD:"
+      placeholder: v1.12.0
+  - type: checkboxes
+    attributes:
+      label: Database updates required?
+      options:
+      - label: 'Yes'
+      - label: 'No'
+  - type: textarea
+    attributes:
+      label: 'Actions required before, during or right after deployment:'
+  - type: textarea
+    attributes:
+      label: 'Tickets in release:'
+  - type: checkboxes
+    id: general
+    attributes:
+      label: General
+      description: General checks for this release
+      options:
+        - label: Create release notes and a release summary
+        - label: 'Check: are there any changes that may have an effect on the DPIA or otherwise on privacy? If so: discuss with privacy and discuss changes/implications?'
+        - label: 'Check: will the release trigger additional cost? If so: confirm budget availability or request additional budget.'
+        - label: 'Check: have any new features been checked against accessibility guidelines?'
+  - type: checkboxes
+    id: communication
+    attributes:
+      label: Communication
+      description: Communication checks for this release
+      options:
+        - label: Notify relevant stakeholders
+        - label: 'Check: is any public notification needed? If so: communication requested?'
+        - label: Adjust the software manual
+        - label: Inform the helpdesk
+  - type: checkboxes
+    id: qa
+    attributes:
+      label: QA
+      description: QA checks for this release
+      options:
+        - label: 'Check: code coverage meets specifications'
+        - label: Test new logging items and inform SOC SIEM/CSIRT
+        - label: Discuss changes/issues with QA to ensure accurate/rapid testing
+        - label: Test report created ([See template](https://github.com/minvws/nl-rdo-quality-coordination/blob/main/Kwaliteitsmanagement/Kwaliteitsaanpak/Testrapport/Testrapport.md))
+        - label: Arrange any required post-release tests and/or monitoring.
+  - type: checkboxes
+    id: security
+    attributes:
+      label: Security
+      description: Security (liaison) checks for this release
+      options:
+        - label: If it is a patch release, discuss changes with liaison
+        - label: If it is a minor or major release, liaison must comment if pentest, SCSA or nothing is needed
+  - type: checkboxes
+    id: dependencies
+    attributes:
+      label: Dependencies
+      description: Dependencies checks for this release
+      options:
+        - label: Make sure all Dependabot PR's are merged (to be sure of the latest versions)
+        - label: Calculate dependencies on other systems, are there any breaking changes down-/upstream?
+        - label: 'Check: any database changes required? If so: prepare database schema schedule release'
+        - label: 'Check: are there (certificate/specification) changes to (API) eindpoints? If so, notify clients'
+  - type: checkboxes
+    id: rollout
+    attributes:
+      label: Roll-out
+      description: Roll-out checks for this release
+      options:
+        - label: Rollback procedure present?
+        - label: Is a release date present?
+        - label: Are there any dependencies and/or is a specific release order required?
+        - label: '*Approval PO*'
+        - label: '*Approval IBMF*, add screenshot of checklist and explanation of any unchecked or striked out items'
+  - type: checkboxes
+    id: approvalleadqa
+    attributes:
+      label: Approval Lead QA
+      description: The procedure to request a production release is described in [Release-proces.md](https://github.com/minvws/nl-rdo-quality-coordination/blob/main/Kwaliteitsmanagement/Kwaliteitsaanpak/Release%20proces/Release-proces.md)
+      options:
+        - label: '*Approval QA Lead*, the QA Lead will check this release checklist and the test report and add a screenshot of this checklist to the Zammad ticket and move the request for installation to Operations.'

.github/workflows/ci.yml

@@ -74,7 +74,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.REPO_READ_ONLY_TOKEN }}
 
       - name: Install PHP
-        uses: shivammathur/setup-php@master
+        uses: shivammathur/setup-php@v2
         with:
           php-version: 8.4
           extensions: pgsql

.github/workflows/rdo-package.yml

@@ -37,7 +37,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.REPO_READ_ONLY_TOKEN }}
 
       - name: Install PHP
-        uses: shivammathur/setup-php@master
+        uses: shivammathur/setup-php@v2
         with:
           php-version: 8.4
 

HOSTING_CHANGELOG.md

@@ -51,6 +51,12 @@ ze de code van de meest recente release uitvoeren.
 - Na de deployment moeten voor deze release alle worker processen opnieuw opgestart worden
 - Na het herstarten van de worker moet eenmalig de statische website opnieuw opgebouwd worden: `php artisan static-website:refresh`
 
+## 1.18.0
+
+- Na deployment moeten de bestaande caches verwijderd worden: `php artisan optimize:clear`
+- Na de deployment moeten voor deze release alle worker processen opnieuw opgestart worden
+- Na het herstarten van de worker moet eenmalig de statische website opnieuw opgebouwd worden: `php artisan static-website:refresh`
+
 ## 1.17.0
 
 - Na deployment moeten de bestaande caches verwijderd worden: `php artisan optimize:clear`

src/cms/Dockerfile

@@ -6,8 +6,8 @@ INCLUDE+ ./Dockerfile
 
 
 ARG TARGETARCH
-ARG HUGO_VERSION=0.121.1
-ARG DART_SASS_VERSION=1.69.5
+ARG HUGO_VERSION=0.162.1
+ARG DART_SASS_VERSION=1.100.0
 
 # Install Hugo  -  https://github.com/gohugoio/hugo/releases
 RUN curl -LJO https://github.com/gohugoio/hugo/releases/download/v${HUGO_VERSION}/hugo_extended_${HUGO_VERSION}_linux-${TARGETARCH}.deb

src/cms/Taskfile.dist.yml

@@ -0,0 +1,146 @@
+# https://taskfile.dev
+version: '3.48.0'
+
+includes:
+    release:
+        taskfile: taskfiles/Taskfile.release.yml
+        flatten: true
+
+silent: true
+
+tasks:
+  init:
+    desc: Initialize the application and services
+    deps: [env:check]
+    cmds:
+      - |
+        docker run --rm \
+        -u "$(id -u):$(id -g)" \
+        -v "$(pwd):/var/www/html" \
+        -w /var/www/html \
+        -e TELESCOPE_ENABLED=false \
+        composer:latest \
+        composer install --ignore-platform-reqs --no-scripts
+      - task: docker:up
+      - vendor/bin/sail artisan package:discover --ansi
+      - vendor/bin/sail artisan optimize:clear
+      - task: key-generate
+      - task: db:fresh
+      - task: npm:install
+      - task: frontend:build
+
+  env:check:
+    desc: Check the environment
+    cmds:
+      - |
+        if [ ! -f ".env" ]; then
+          cp .env.example .env
+        fi
+
+  env:clear:
+    desc: Clear the environment
+    cmds:
+      - rm -f .env
+      - task: env:check
+
+  docker:up:
+    desc: Start the application and services
+    deps: [env:check]
+    cmds:
+      - vendor/bin/sail up -d web --remove-orphans
+
+  docker:down:
+    desc: Remove the application and services
+    cmds:
+      - vendor/bin/sail down web --remove-orphans
+
+  docker:stop:
+    desc: Stop the application and services
+    cmds:
+      - vendor/bin/sail stop web
+
+  composer:install:
+    desc: Install composer dependencies
+    cmds:
+      - vendor/bin/sail composer install
+
+  composer:update:
+    desc: Update composer dependencies
+    cmd: vendor/bin/sail composer update
+
+  npm:install:
+    desc: Install npm dependencies
+    cmd: vendor/bin/sail npm install
+
+  npm:update:
+    desc: Update npm dependencies
+    cmd: vendor/bin/sail npm update
+
+  frontend:build:
+    desc: Build the frontend
+    cmd: vendor/bin/sail npm run build
+
+  frontend:watch:
+    desc: Build and watch the frontend
+    cmd: vendor/bin/sail npm run watch
+
+  db:migrate:
+    desc: Run database migrations
+    cmd: vendor/bin/sail artisan migrate
+
+  db:fresh:
+    desc: Create a fresh database
+    cmd: vendor/bin/sail artisan migrate:fresh --seed
+
+  update-all:
+    desc: Update the application and services
+    cmds:
+      - task: composer:update
+      - task: npm:update
+
+  key-generate:
+    desc: Generate the application key
+    cmd: vendor/bin/sail artisan key:generate
+
+  lint:phpcs:
+    desc: Lint PHP files
+    cmd: vendor/bin/sail composer run-script phpcs
+
+  lint:phpcbf:
+    desc: Lint and fix PHP files
+    cmd: vendor/bin/sail composer run-script phpcbf
+
+  lint:phpstan:
+    desc: Run PHPStan
+    cmd: vendor/bin/sail composer run-script phpstan
+
+  lint:phpmd:
+    desc: Run PHPMD
+    cmd: vendor/bin/sail composer run-script phpmd
+
+  lint:security:
+    desc: Run security checks
+    cmd: vendor/bin/sail artisan security-check:now
+
+  lint:all:
+    desc: Run all linters
+    cmds:
+      - task: lint:phpcs
+      - task: lint:phpstan
+      - task: lint:phpmd
+
+  test:db:create:
+    desc: Create the test database
+    cmd: vendor/bin/sail composer run-script reset-test-db
+
+  test:db:reset:
+    desc: Reset and recreate the test database
+    cmd: vendor/bin/sail composer run-script test-reset
+
+  test:quality:
+    desc: Run the quality tests
+    cmd: vendor/bin/sail composer run-script quality
+
+  test:
+    desc: Run the unit tests
+    cmd: vendor/bin/sail composer run-script test