feat(ci/cd): update dockerfiles to include the secret

.github/dependabot.yml

@@ -0,0 +1,41 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: build/bench
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: build/erpnext-nginx
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: build/erpnext-worker
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: build/frappe-nginx
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: build/frappe-socketio
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: build/frappe-worker
+    schedule:
+      interval: daily
+
+  - package-ecosystem: npm
+    directory: build/frappe-socketio
+    schedule:
+      interval: daily

.github/scripts/get-latest-tags.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -e
+set -x
+
+get_tag() {
+    tags=$(git ls-remote --refs --tags --sort='v:refname' "https://github.com/$1" "v$2.*")
+    tag=$(echo "$tags" | tail -n1 | sed 's/.*\///')
+    echo "$tag"
+}
+
+FRAPPE_VERSION=$(get_tag frappe/frappe "$VERSION")
+ERPNEXT_VERSION=$(get_tag frappe/erpnext "$VERSION")
+
+cat <<EOL >>"$GITHUB_ENV"
+FRAPPE_VERSION=$FRAPPE_VERSION
+ERPNEXT_VERSION=$ERPNEXT_VERSION
+GIT_BRANCH=version-$VERSION
+VERSION=$VERSION
+EOL

.github/workflows/build_develop.yml

@@ -0,0 +1,127 @@
+name: Build Develop
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - .github/**
+      - build/**
+      - installation/**
+      - tests/**
+      - .dockerignore
+      - docker-bake.hcl
+      - docker-compose.yml
+      - env*
+
+  schedule:
+    # Every day at 12:00 pm
+    - cron: 0 0 * * *
+
+  workflow_dispatch:
+
+env:
+  IS_AUTHORIZED_RUN: ${{ github.repository == 'frappe/frappe_docker' && github.event_name != 'pull_request' }}
+
+jobs:
+  build_bench:
+    name: Bench
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Setup Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login
+        uses: docker/login-action@v1
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and test
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: bench-test
+
+      - name: Push
+        uses: docker/[email protected]
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        with:
+          files: docker-bake.hcl
+          targets: bench-build
+          push: true
+
+  build_frappe:
+    name: Frappe
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Setup Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login
+        uses: docker/login-action@v1
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: frappe-develop-test
+          load: true
+
+      - name: Test
+        run: ./tests/test-frappe.sh
+
+      - name: Push
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: frappe-develop
+          push: true
+
+  build_erpnext:
+    name: ERPNext
+    runs-on: ubuntu-latest
+    needs: build_frappe
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Setup Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login
+        uses: docker/login-action@v1
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: erpnext-develop-test
+          load: true
+
+      - name: Test
+        run: FRAPPE_VERSION=develop ./tests/test-erpnext.sh
+
+      - name: Push
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: erpnext-develop
+          push: true

.github/workflows/build_stable.yml

@@ -0,0 +1,146 @@
+name: Build Stable
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - .github/**
+      - build/**
+      - installation/**
+      - tests/**
+      - .dockerignore
+      - docker-bake.hcl
+      - docker-compose.yml
+      - env*
+  push:
+    branches:
+      - main
+    paths:
+      - .github/**
+      - build/**
+      - installation/**
+      - tests/**
+      - .dockerignore
+      - docker-bake.hcl
+      - docker-compose.yml
+      - env*
+
+  # Triggered from frappe/frappe and frappe/erpnext on releases
+  repository_dispatch:
+
+  workflow_dispatch:
+
+env:
+  IS_AUTHORIZED_RUN: ${{ github.repository == 'frappe/frappe_docker' && github.event_name != 'pull_request' }}
+
+jobs:
+  build_frappe:
+    name: Frappe
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        version: [12, 13]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Setup Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login
+        uses: docker/login-action@v1
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Get latest versions
+        run: ./.github/scripts/get-latest-tags.sh
+        env:
+          VERSION: ${{ matrix.version }}
+
+      - name: Build
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: frappe-stable-test
+          load: true
+
+      - name: Push
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: frappe-stable
+          push: true
+        env:
+          GIT_TAG: ${{ env.FRAPPE_VERSION }}
+
+  build_erpnext:
+    name: ERPNext
+    runs-on: ubuntu-latest
+    needs: build_frappe
+    strategy:
+      matrix:
+        version: [12, 13]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Setup Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Login
+        uses: docker/login-action@v1
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Get latest versions
+        run: ./.github/scripts/get-latest-tags.sh
+        env:
+          VERSION: ${{ matrix.version }}
+
+      - name: Build
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: erpnext-stable-test
+          load: true
+
+      - name: Push
+        if: env.IS_AUTHORIZED_RUN == 'true'
+        uses: docker/[email protected]
+        with:
+          files: docker-bake.hcl
+          targets: erpnext-stable
+          push: true
+        env:
+          GIT_TAG: ${{ env.ERPNEXT_VERSION }}
+
+  release_helm:
+    name: Release Helm
+    runs-on: ubuntu-latest
+    if: github.repository == 'frappe/frappe_docker' && github.event_name != 'pull_request'
+    needs: [build_frappe, build_erpnext]
+
+    steps:
+      - name: Setup deploy key
+        uses: webfactory/[email protected]
+        with:
+          ssh-private-key: ${{ secrets.HELM_DEPLOY_KEY }}
+
+      - name: Setup Git Credentials
+        run: |
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+
+      - name: Release
+        run: |
+          git clone [email protected]:frappe/helm.git && cd helm
+          pip install -r release_wizard/requirements.txt
+          ./release_wizard/wizard 13 patch --remote origin --ci

.github/workflows/lint.yml

@@ -0,0 +1,18 @@
+name: Lint
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: ludeeus/[email protected]
+        env:
+          SHELLCHECK_OPTS: -x

.github/workflows/stale.yml

@@ -2,18 +2,17 @@ name: Mark stale issues and pull requests
 
 on:
   schedule:
-  - cron: "0 0 * * *"
+    # Every day at 12:00 pm
+    - cron: 0 0 * * *
 
 jobs:
   stale:
-
     runs-on: ubuntu-latest
-
     steps:
-    - uses: actions/stale@v1
-      with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
-        stale-issue-message: 'This issue has been automatically marked as stale. You have a week to explain why you believe this is an error.'
-        stale-pr-message: 'This PR has been automatically marked as stale. You have a week to explain why you believe this is an error.'
-        stale-issue-label: 'no-issue-activity'
-        stale-pr-label: 'no-pr-activity'
+      - uses: actions/stale@v4
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          stale-issue-message: This issue has been automatically marked as stale. You have a week to explain why you believe this is an error.
+          stale-pr-message: This PR has been automatically marked as stale. You have a week to explain why you believe this is an error.
+          stale-issue-label: no-issue-activity
+          stale-pr-label: no-pr-activity