From 7e95599f7ba9210df75abd4aec4227b8d92d5a56 Mon Sep 17 00:00:00 2001
From: Marijn van der Horst <github@marijnvanderhorst.nl>
Date: Fri, 29 Nov 2024 10:58:12 +0100
Subject: [PATCH] Set codecov patch status checks to `informational` (#381)

* This _should_ make the status check not show up as a fail anymore in
PRs.
* Added
[CODEOWNERS](https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners)
file, for instance to be used in rulesets.
---
 .github/CODEOWNERS          |  1 +
 .github/dependabot.yml      | 23 +++++++++++++++++++++++
 .github/workflows/build.yml | 33 ++++++++++++++++++++++-----------
 codecov.yml                 |  7 +++----
 4 files changed, 49 insertions(+), 15 deletions(-)
 create mode 100644 .github/CODEOWNERS
 create mode 100644 .github/dependabot.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..b3b6b6f8
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+*       @esac-ic/code-owners
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..fbc7c359
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,23 @@
+version: 2
+updates:
+  - package-ecosystem: "composer"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+      time: "16:00"
+    groups:
+      prod-dependencies:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+          - "patch"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "sunday"
+      time: "16:00"
+    ignore:
+      - dependency-name: "*"
+        update-types: [ "version-update:semver-major" ]
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 60d54f81..a0c2c7ba 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -10,9 +10,11 @@ env:
   DB_DATABASE: esac
   DB_USERNAME: mysql
   DB_PASSWORD: mysql
+  HAS_CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN != '' }}
 
 jobs:
-  laravel-tests:
+  tests:
+    name: Build front-end & run tests
     runs-on: ubuntu-latest
     environment: Build
     steps:
@@ -35,12 +37,6 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-node-
 
-    - name: Docker Login
-      uses: docker/login-action@v3
-      with:
-        username: esacci
-        password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
-
     - name: Setup PHP
       uses: shivammathur/setup-php@v2
       with:
@@ -85,22 +81,37 @@ jobs:
     - name: Execute tests (Unit and Feature tests) via PHPUnit
       run: vendor/bin/phpunit -c phpunit.xml --coverage-clover=coverage.xml
 
-    - name: Upload to codecov
+    - name: Upload to Codecov
       uses: codecov/codecov-action@v3
+      if: env.HAS_CODECOV_TOKEN
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         file: coverage.xml
         fail_ci_if_error: true
 
-    - name: Build and push Docker images
-      uses: docker/build-push-action@v5
+  publish:
+    name: Build and push Docker image
+    runs-on: ubuntu-latest
+    environment: Build
+    needs: tests
+    if: github.secret_source == 'Actions' || github.secret_source == 'Dependabot'
+    steps:
+    - name: Docker Login
+      uses: docker/login-action@v3
+      with:
+        username: esacci
+        password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+
+    - name: Build and push Docker image
+      uses: docker/build-push-action@v6
       with:
         push: true
         tags: esac/website:${{ github.run_number }}
 
   deploy:
+    name: Deploy to production
     runs-on: ubuntu-latest
-    needs: laravel-tests
+    needs: publish
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
     steps:
     - name: Deploy via SSH
diff --git a/codecov.yml b/codecov.yml
index 20073534..7d8acad6 100644
--- a/codecov.yml
+++ b/codecov.yml
@@ -1,11 +1,10 @@
 coverage:
   status:
-    project:  # Applies to the entire project
+    project: # Applies to the entire project
       default:
         target: auto
         threshold: 25%  # Allows coverage to drop by up to 30% without failing
 
-    patch:  # Applies only to the changes in the pull request
+    patch: # Applies to the contents of a single PR or commit only.
       default:
-        target: auto
-        threshold: 25%  # Allows coverage to drop by up to 30% without failing
\ No newline at end of file
+        informational: true