v0.4.1

v0.4.1

v0.4.0

Features

• enforce conventional commits (#1504) (c71b6e3)

v0.3.1

Bug Fixes

• workflows: revert current changes to release (#1503) (6856d3f)

v0.3.0

Features

• age out Pull Request environments (#1494) (b29f123)

v0.2.0

Bug Fixes

• add missing docs folder (#1269) (15aed40)
• deps: update all non-major dependencies (#1326) (a793a37)
• deps: update dependency @typescript-eslint/parser to v5.56.0 (#1065) (72aa0f7)
• deps: update dependency @typescript-eslint/parser to v5.59.1 (#1107) (922a02a)
• deps: update dependency @typescript-eslint/parser to v5.59.5 (#1122) (eb1d9d9)
• deps: update dependency @typescript-eslint/parser to v5.59.6 (#1142) (09f3dc7)
• deps: update dependency @typescript-eslint/parser to v5.59.7 (#1163) (25be4c2)
• deps: update dependency @vitejs/plugin-react to v4 (#1111) (b6955ed)
• deps: update dependency fastapi to ^0.100.0 (#1255) (2ce4502)
• deps: update dependency fastapi to ^0.101.0 (#1297) (309d051)
• deps: update dependency fastapi to ^0.98.0 (#1232) (a16e2b9)
• deps: update dependency helmet to v7 (#1229) (1ac9c48)
• deps: update dependency keycloak-js to v21 (#1024) (db536d9)
• deps: update dependency net.datafaker:datafaker to v2 (#1231) (381781b)
• deps: update dependency rimraf to v5 (#1112) (29ae11b)
• deps: update dependency swagger-ui-express to v5 (#1257) (cc2d975)
• deps: update dependency uvicorn to ^0.23.0 (#1265) (759a443)
• deps: update module github.com/golang-migrate/migrate/v4 to v4.16.2 (#1181) (8bb7fb1)
• deps: update module gorm.io/gorm to v1.25.3 (#1288) (b0c4b35)
• deps: update nest monorepo to v10 (major) (#1226) (bec9f1e)

Features

• add caddy to docker-compose (#1423) (86d9f25)
• add timeouts to all jobs (#1448) (e88a6ea)
• adjust node and caddy, align with caddy defaults (#1388) (654707b)
• codeql (#1309) (5e71287)
• consolidate docker compose files (#1223) (0d4045a)
• ghcr cleanup at build time (#1467) (86cb96d)
• helm (#1480) (#1493) (7368bc0)
• new cleanup action (#1352) (0f031b5)
• node consistency (#1355) (9c12a8e)
• quote inputs (#1375) (5a6558b)
• reduce python surface and image size (#1348) (3c07ec9)
• roll init into database (#1422) (57a92e1)
• scheduled penetration tests (#1463) (f766116)
• simplify (#1421) (a7d7ea8)
• snyk warnings (#1488) (322b470)
• speed up code ql java (#1398) (3091a06)
• workflow cleanup and simplifications (#1449) (421fcfc)
• zap pen tests create issues (#1317) (dffdce2)

v0.1.0

Added:

• Auto database backups w/ backup-container
• Upgraded Postgres 12 to 13
• Optional PostGIS 13
• SonarCloud monorepo support w/ platform team collaboration
• SonarCloud non-blocking (while waiting on token request)
• Unit tests and comments run only when PR is ready (reduce noise)
• Secret scanning (secret-search via. Yelp)
• Init template (secrets, network policies)
• Workflow status badges
• Action: Add to Pull Request Descriptions
• Action: Conditional Container Builder with Fallback
• Action: OpenShift Deployer with Route Verification or Penetration Testing
• Action: Unit Test, Coverage and Analysis with SonarCloud

Removed:

• SonarCloud job (in Action)
• Route verification job (in Action)
• Penetration testing job (in Action)
• Post-deploy comment job (noisy, sort of in Action)
• Code coverage comment job (covered by SonarCloud, in Action)
• _build helper (in Action)
• _deploy helper (in Action)
• _unit-test helper (in Action)
• _image-promote helper retired (not used)

Problems:

• Container cleanup (ghcr.io) broken by improved (org/repo/package) naming

Notes:

• FINALLY using semantic versioning with v0.1.0 release! 🤦

v0.0.2

Added:

• Added Dependabot PRs for node (backend, frontend)
• Added Dependabot PRs for GitHub Actions
• Added Dependabot secrets
• New package naming, from repo:component-tag to repo/component:tag
• Consuming v0.0.2 of bcgov/nr-quickstart-helpers
• Consuming v0.0.2 of derekroberts/action-pr-description-add
• Tons of Dependabot dependency PRs merged
• Actions updated to address GHA deprecating Node12 and set-output
• Action outputs updated to address set-output deprecation
• Add PR description messages (less noise than lcov and deployment comments)
• Moved SonarCloud to end of PR pipeline (less noise, doesn't fire unless all else works)
• Moved SETUP.md back into README.md (visibility)

Removed:

• Removed Snyk.io (replaced by Dependabot's node PRs)
• Removed GHCR.io auto cleanups (not working with new naming, need fix)
• Removed ZAP tests, now handled optionally by _deploy helper
• Removed LCov coverage commenting (noisy, handled by SonarCloud)

v0.0.1

Initial release.