Skip to content

chore(ci): adopt shared workflows and central Renovate preset - #308

Open
TheMeinerLP wants to merge 2 commits into
mainfrom
chore/standardize-pipelines-and-renovate
Open

chore(ci): adopt shared workflows and central Renovate preset#308
TheMeinerLP wants to merge 2 commits into
mainfrom
chore/standardize-pipelines-and-renovate

Conversation

@TheMeinerLP

@TheMeinerLP TheMeinerLP commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

What

Brings this repository onto the OneLiteFeather standard CI, release and dependency setup.

CI, security and dependencies

  • renovate.json -> central preset (antiredstone-remastered-maintainers)
  • build-pr.yml (gradle-build-pr, Java 24, run-tests: true) (replaced hand-rolled job)
  • close_invalid_prs.yml (replaced hand-rolled job)
  • pinned reusable workflows to v2.8.1 (close_invalid_prs.yml,build-pr.yml)

Release automation and PR hygiene

  • bereits vollständig konform

Version anchoring and Renovate presets

  • renovate flavor restored: paper
  • extra-files now points at build.gradle.kts

Why

One shared setup per concern instead of a hand-maintained copy per repository:

  • Reusable workflows (OneLiteFeatherNET/workflows) are pinned to a full SemVer tag, so a fix
    in the shared catalogue reaches this repository through a Renovate PR.
  • Central Renovate preset brings the shared schedule, automerge and labelling rules and assigns
    the maintainer team as reviewer, instead of a per-repository config that drifts.
  • Security gate: Trivy scans for vulnerabilities and secrets and reports into GitHub code
    scanning, plus a CycloneDX SBOM on every run. Report-only, so adopting it does not turn CI red on
    day one.
  • Release Please in simple mode turns Conventional Commits into a release PR; merging it tags
    the version and cuts the release. Simple mode deliberately does not rewrite language version
    files, which keeps this change limited to release plumbing.
  • A CycloneDX SBOM is attached to every GitHub release, so each shipped version carries its own
    dependency inventory.
  • The Renovate platform preset (:minestom / :paper) is what teaches Renovate the
    date-based Minestom scheme and Paper's X.Y.Z-<mc-version> scheme; without it those two get
    parsed as plain SemVer and updated wrongly.
  • The version lives in build.gradle.kts behind // x-release-please-version, so a release
    changes exactly one line in one file instead of a properties file the build has to parse.
  • PR linting enforces Conventional Commits on the PR title and on every commit - without it
    release-please silently fails to bump the version or drops the commit from the changelog.

Everything a release needs is chained into the release-please workflow run on purpose: release-please
tags with GITHUB_TOKEN, and a tag pushed that way does not start a separate
on: push: tags workflow.

- renovate.json -> central preset (antiredstone-remastered-maintainers)
- build-pr.yml (gradle-build-pr, Java 24, run-tests: true) (replaced hand-rolled job)
- close_invalid_prs.yml (replaced hand-rolled job)
- pinned reusable workflows to v2.8.1 (close_invalid_prs.yml,build-pr.yml)
@TheMeinerLP
TheMeinerLP requested a review from a team as a code owner August 21, 2026 17:15
Comment on lines +8 to +9
close:
uses: OneLiteFeatherNET/workflows/.github/workflows/close-invalid-prs.yml@v2.8.1
@github-actions

github-actions Bot commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Test results

 24 files   24 suites   4s ⏱️
103 tests 103 ✅ 0 💤 0 ❌
399 runs  399 ✅ 0 💤 0 ❌

Results for commit e43ed47.

♻️ This comment has been updated with latest results.

…build.gradle.kts

- renovate flavor restored: paper
- extra-files now points at build.gradle.kts
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants