.github/FUNDING.yml

@@ -0,0 +1,13 @@
+# These are supported funding model platforms
+
+github: [soumyamahunt] # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
+custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

.github/config/package.json

@@ -6,11 +6,11 @@
   "license": "MIT",
   "author": {
     "name": "Soumya Ranjan Mahunt",
-    "email": "devsoumyamahunt@gmail.com"
+    "email": "soumya.mahunt@gmail.com"
   },
   "dependencies": {
-    "@actions/core": "1.6.0",
-    "conventional-changelog-conventionalcommits": "^4.6.3",
-    "semver": "^7.3.5"
+    "@actions/core": "1.10.0",
+    "conventional-changelog-conventionalcommits": "^5.0.0",
+    "semver": "^7.5.0"
   }
 }

.github/config/pre_changelog_hook.js

@@ -21,6 +21,12 @@ exports.preVersionGeneration = (version) => {
   const new_gem_info = gem_info.replace(/VERSION\s*=\s*.*/g, `VERSION = '${version}'.freeze`);
   core.info(`Updated gem info: ${new_gem_info}`);
   fs.writeFileSync(gem_info_file, new_gem_info);
+
+  const launchOption = { cwd: GITHUB_WORKSPACE };
+  childProcess.execSync('bundle config unset deployment', launchOption);
+  childProcess.execSync('bundle install', launchOption);
+  childProcess.execSync('bundle exec rake update --trace', launchOption);
+  childProcess.execSync('bundle config deployment true', launchOption);
   return version;
 }
 

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,36 @@
+name: "CodeQL"
+
+on:
+  workflow_call:
+  schedule:
+    - cron: '0 0 * * *'
+
+concurrency:
+  group: scan-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      matrix:
+        language: [ 'javascript', 'ruby' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v3
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: ${{ matrix.language }}
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2

.github/workflows/main.yml

@@ -10,24 +10,38 @@ on:
     paths-ignore:
       - '*.md'
   workflow_dispatch:
+    inputs:
+      release:
+        description: Create release
+        required: false
+        type: boolean
 
 env:
   RUBY_VER: 2.6
 
-concurrency: 
-  group: ${{ github.ref }}
+concurrency:
+  group: ci/cd-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
+  analyze:
+    name: Analyze
+    if: github.event_name != 'workflow_dispatch'
+    uses: ./.github/workflows/codeql-analysis.yml
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
   ci:
     name: Run Tests
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     outputs:
       release: ${{ steps.check_version_bump.outputs.release_type != '' }}
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
 
     - name: Setup Ruby
       uses: ruby/setup-ruby@v1
@@ -43,7 +57,7 @@ jobs:
       run: bundle exec rake specs
 
     - name: Install Flutter
-      uses: subosito/flutter-action@v2.3.0
+      uses: subosito/flutter-action@v2.10.0
 
     - name: Setup Flutter for ios
       run: |
@@ -54,26 +68,26 @@ jobs:
 
     - name: Check version bump
       id: check_version_bump
-      uses: mathieudutour/github-tag-action@v6.0
+      uses: mathieudutour/github-tag-action@v6.1
       with:
         github_token: ${{ github.token }}
         default_bump: false
         dry_run: true
 
   cd:
     name: Build and Publish
-    if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && needs.ci.outputs.release
-    needs: ci
+    if: (github.event_name == 'push' && needs.ci.outputs.release == 'true') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release == 'true')
+    needs: [ci, analyze]
     runs-on: ubuntu-latest
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         fetch-depth: 0
 
     - name: Setup node
-      uses: actions/setup-node@v2
+      uses: actions/setup-node@v3
       with:
         node-version: '17'
 
@@ -98,7 +112,7 @@ jobs:
         github-token: ${{ github.token }}
         git-message: 'chore(CHANGELOG): update for {version}'
         git-user-name: ${{ github.actor }}
-        git-user-email: devsoumyamahunt@gmail.com
+        git-user-email: soumya.mahunt@gmail.com
         skip-version-file: true
         release-count: 0
         pre-changelog-generation: '.github/config/pre_changelog_hook.js'
@@ -118,7 +132,7 @@ jobs:
         gem push --KEY github --host https://rubygems.pkg.github.com/${OWNER} *.gem
       env:
         GITHUB_TOKEN: ${{ github.token }}
-        OWNER: ${{ github.actor }}
+        OWNER: ${{ github.repository_owner }}
 
     - name: Publish to RubyGems
       if: steps.conventional_changelog.outputs.skipped == 'false'
@@ -139,7 +153,3 @@ jobs:
         tag: ${{ steps.conventional_changelog.outputs.tag }}
         body: ${{ steps.conventional_changelog.outputs.changelog }}
         artifacts: '*.gem'
-
-    - name: Publish to cocoapods plugins
-      if: steps.conventional_changelog.outputs.skipped == 'false'
-      run: bundle exec rake publish

.vscode/extensions.json

@@ -0,0 +1,6 @@
+{
+  "recommendations": [
+    "castwide.solargraph",
+    "rebornix.ruby"
+  ]
+}