Merge branch 'master' into javier-zombienet-backchannel

.github/CODEOWNERS

@@ -1,2 +1,7 @@
 bridges/ @tomusdrw @svyatonik @adoerr @acatangiu @antonio-dropulic
-
+
+# CI
+/.github/ @paritytech/ci @chevdor
+/scripts/github/ @paritytech/ci @chevdor
+/scripts/gitlab/ @paritytech/ci @chevdor
+/.gitlab-ci.yml @paritytech/ci

.github/ISSUE_TEMPLATE/release.md

@@ -17,7 +17,8 @@ candidate branch.
 
 - [ ] Verify [`spec_version`](#spec-version) has been incremented since the
     last release for any native runtimes from any existing use on public
-    (non-private/test) networks.
+    (non-private/test) networks. If the runtime was published (release or pre-release), either
+    the `spec_version` or `impl` must be bumped.
 - [ ] Verify previously [completed migrations](#old-migrations-removed) are
     removed for any public (non-private/test) networks.
 - [ ] Verify pallet and [extrinsic ordering](#extrinsic-ordering) has stayed

.github/workflows/publish-docker-release.yml

@@ -30,7 +30,7 @@ jobs:
         uses: docker/build-push-action@v2
         with:
           push: true
-          file: scripts/docker/polkadot_injected_release.Dockerfile
+          file: scripts/dockerfiles/polkadot_injected_release.Dockerfile
           tags: |
             parity/polkadot:latest
             parity/polkadot:${{ github.event.release.tag_name }}

.github/workflows/publish-draft-release.yml

@@ -82,7 +82,7 @@ jobs:
           RUSTC_NIGHTLY: ${{ needs.get-rust-versions.outputs.rustc-nightly }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          gem install changelogerator git toml
+          gem install changelogerator:0.0.16 git toml
           ruby $GITHUB_WORKSPACE/polkadot/scripts/github/generate_release_text.rb | tee release_text.md
       - name: Create draft release
         id: create-release

.github/workflows/release-bot.yml

@@ -3,22 +3,35 @@ on:
   release:
     types:
       - published
+
 jobs:
   ping_matrix:
     strategy:
       matrix:
         channel:
-        - '!LhjZccBOqFNYKLdmbb:polkadot.builders' # #KusamaValidatorLounge:polkadot.builders
-        - '!FMwxpQnYhRCNDRsYGI:matrix.parity.io' # #kusama-announcements:matrix.parity.io
-        - '!NZrbtteFeqYKCUGQtr:matrix.parity.io' # #polkadotvalidatorlounge:web3.foundation
-        - '!UqHPWiCBGZWxrmYBkF:matrix.parity.io' # #polkadot-announcements:matrix.parity.io
-        - '!NTogofoetwjbTwOoPi:matrix.parity.io' # Internal release-notes channel
+          - name: '#KusamaValidatorLounge:polkadot.builders'
+            room: '!LhjZccBOqFNYKLdmbb:polkadot.builders'
+            pre-releases: false
+          - name: '#kusama-announcements:matrix.parity.io'
+            room: '!FMwxpQnYhRCNDRsYGI:matrix.parity.io'
+            pre-release: false
+          - name: '#polkadotvalidatorlounge:web3.foundation'
+            room: '!NZrbtteFeqYKCUGQtr:matrix.parity.io'
+            pre-release: false
+          - name: '#polkadot-announcements:matrix.parity.io'
+            room: '!UqHPWiCBGZWxrmYBkF:matrix.parity.io'
+            pre-release: false
+          - name: Internal release-notes channel
+            room: '!NTogofoetwjbTwOoPi:matrix.parity.io'
+            pre-release: true
+
     runs-on: ubuntu-latest
     steps:
-      - name: Send Matrix message
+      - name: Send Matrix message to ${{ matrix.channel.name }}
+        if: github.event.release.prerelease == false || matrix.channel.pre-release
         uses: s3krit/[email protected]
         with:
-          room_id: ${{ matrix.channel }} # heh
+          room_id: ${{ matrix.channel.room }}
           access_token: ${{ secrets.MATRIX_ACCESS_TOKEN }}
-          message: "***Polkadot ${{github.event.release.tag_name}} has been released!***<br/>${{github.event.release.html_url}}<br/><br/>${{github.event.release.body}}<br/>"
           server: "matrix.parity.io"
+          message: "***Polkadot ${{github.event.release.tag_name}} has been released!***<br/>${{github.event.release.html_url}}<br/><br/>${{github.event.release.body}}<br/>"

.gitlab-ci.yml

@@ -31,7 +31,7 @@ variables:
   VAULT_SERVER_URL:                "https://vault.parity-mgmt-vault.parity.io"
   VAULT_AUTH_PATH:                 "gitlab-parity-io-jwt"
   VAULT_AUTH_ROLE:                 "cicd_gitlab_parity_${CI_PROJECT_NAME}"
-  PIPELINE_SCRIPTS_TAG:            "v0.1"
+  PIPELINE_SCRIPTS_TAG:            "v0.4"
 
 default:
   cache:                           {}
@@ -201,7 +201,10 @@ test-build-linux-stable:
     - mkdir -p ./artifacts
     - VERSION="${CI_COMMIT_REF_NAME}" # will be tag or branch name
     - mv ./target/release/polkadot ./artifacts/.
-    - sha256sum ./artifacts/polkadot | tee ./artifacts/polkadot.sha256
+    - pushd artifacts
+    - sha256sum polkadot | tee polkadot.sha256
+    - shasum -c polkadot.sha256
+    - popd
     - EXTRATAG="$(./artifacts/polkadot --version |
         sed -n -r 's/^polkadot ([0-9.]+.*-[0-9a-f]{7,13})-.*$/\1/p')"
     - EXTRATAG="${CI_COMMIT_REF_NAME}-${EXTRATAG}-$(cut -c 1-8 ./artifacts/polkadot.sha256)"
@@ -300,11 +303,13 @@ build-malus:
         --polkadot
         "$DEPENDENT_REPO"
         "$GITHUB_PR_TOKEN"
+        $CARGO_UPDATE_CRATES
 
 check-dependent-cumulus:
   <<: *check-dependent-project
   variables:
     DEPENDENT_REPO: cumulus
+    CARGO_UPDATE_CRATES: "sp-io polkadot-runtime-common"
 
 check-transaction-versions:
   stage:                           build