Update dependencies and github actions config

Author: ogesaku

.github/CODEOWNERS

@@ -0,0 +1,12 @@
+* @coditory/reviewers
+
+# Exclusions so changes made by dependabot and other bots could be auto reviewed by Coditory App.
+# Currently App cannot be a part of a team or CODEOWNERS file.
+# https://github.com/orgs/community/discussions/23064
+.github/workflows/*
+gradle/**
+**/build.gradle.kts
+**/settings.gradle.kts
+gradle/**
+gradlew
+gradlew.bat

.github/CONTRIBUTING.md

@@ -0,0 +1,3 @@
+coverage:
+  status:
+    patch: off

.github/ISSUE_TEMPLATE/bug_report.md

@@ -1,11 +1,46 @@
 version: 2
 updates:
-  - package-ecosystem: "gradle"
+  - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "daily"
+    groups:
+      # merged and released instantly
+      sec-updates:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      # merged automatically
+      dev-dependencies:
+        patterns:
+          - "*"
 
-  - package-ecosystem: "github-actions"
+  - package-ecosystem: "gradle"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "daily"
+    groups:
+      # merged and released instantly
+      sec-updates:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      # merged automatically
+      dev-dependencies:
+        patterns:
+          # gradle plugins
+          - "*kotlin-gradle-plugin"
+          - "*publish-plugin"
+          # test dependencies
+          - "org.spockframework*"
+          - "ch.qos.logback*"
+          - "*jsonassert"
+      # merged and released automatically
+      prod-dependencies:
+        update-types:
+          - "patch"
+          - "minor"
+      # requires human approval and has higher chance to fail build
+      prod-dependencies-major:
+        update-types:
+          - "major"

.github/ISSUE_TEMPLATE/config.yml

@@ -1,29 +1,47 @@
-source:
-  - "src/**"
+backport:
+  - head-branch: ['^v[0-9]+\.x\.x']
+
+code:
+  - changed-files:
+      - any-glob-to-any-file:
+          - "src/**"
 
 build:
-  - "**/*.gradle"
-  - "**/*.gradle.kts"
+  - changed-files:
+      - any-glob-to-any-file:
+          - "**/*.gradle*"
 
 ci:
-  - ".github/**"
+  - changed-files:
+      - any-glob-to-any-file:
+          - ".github/**"
 
 documentation:
-  - "**/*.md"
-  - "docs/**"
+  - changed-files:
+      - any-glob-to-any-file:
+          - "**/*.md"
+          - "docs/**"
 
 license:
-  - "LICENSE"
+  - changed-files:
+      - any-glob-to-any-file:
+          - "LICENSE"
 
 gradle:
-  - "gradlew"
-  - "gradlew.bat"
-  - ".gradle/**"
-  - "gradle/**"
+  - changed-files:
+      - any-glob-to-any-file:
+          - "gradlew*"
+          - ".gradle/**"
+          - "gradle/**"
+          - "setting.gradle*"
 
-git:
-  - ".gitignore"
+gitignore:
+  - changed-files:
+      - any-glob-to-any-file:
+          - ".gitignore"
 
-style:
-  - ".editorconfig"
-  - ".idea/codeStyles/**"
+codestyle:
+  - changed-files:
+      - any-glob-to-any-file:
+          - ".editorconfig"
+          - ".idea/codeStyles/**"

.github/ISSUE_TEMPLATE/feature-request.md

@@ -1,113 +1,17 @@
 name: Build
 
 on:
-  pull_request:
   workflow_dispatch:
+  pull_request:
   push:
-    tags:
-      - 'v*'
     branches-ignore:
-      - 'dependabot/**'
       - 'gh-pages'
 
 jobs:
   build:
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    if: |
-      (github.event_name != 'pull_request' && ! github.event.pull_request.head.repo.fork)
-      || (github.event_name == 'pull_request' && (github.event.pull_request.head.repo.fork || startsWith(github.head_ref, 'dependabot/')))
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup Gradle
-        uses: gradle/gradle-build-action@v2
-
-      - name: Setup JDK
-        uses: actions/setup-java@v4
-        with:
-          java-version: 21
-          cache: gradle
-          distribution: temurin
-
-      - name: Build
-        run: ./gradlew build coverage
-
-      - name: Publish Test Report
-        if: success() || failure()  # run this step even if previous step failed
-        continue-on-error: true
-        uses: dorny/test-reporter@v1
-        with:
-          name: test report
-          path: ./**/build/test-results/test/*.xml
-          reporter: java-junit
-
-      - name: Publish Coverage Report
-        uses: codecov/codecov-action@v4
-        if: github.repository == 'coditory/quark-context' && github.ref == 'refs/heads/main'
-        continue-on-error: true
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-          override_commit: ${{ github.event.workflow_run.head_sha }}
-          override_branch: ${{ github.event.workflow_run.head_branch }}
-          override_build: ${{ github.event.workflow_run.id }}
-          files: 'build/reports/kover/report.xml'
-
-      - name: Import GPG Key
-        id: gpg
-        uses: crazy-max/ghaction-import-gpg@v6
-        if: |
-          github.repository == 'coditory/quark-context' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v'))
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-          git_committer_name: Coditory Bot
-          git_committer_email: [email protected]
-
-      - name: Publish Snapshot
-        if: github.repository == 'coditory/quark-context' && github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
-        env:
-          SIGNING_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          SIGNING_PASSWORD: ${{ secrets.GPG_PASSPHRASE }}
-          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
-        run: ./gradlew publishToSonatype version
-
-      - name: Publish Release
-        id: publish-release
-        if: github.repository == 'coditory/quark-context' && startsWith(github.ref, 'refs/tags/v') && (github.event_name == 'push' || github.event_name == 'release' || github.event_name == 'workflow_dispatch')
-        env:
-          SIGNING_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          SIGNING_PASSWORD: ${{ secrets.GPG_PASSPHRASE }}
-          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
-          OSSRH_STAGING_PROFILE_ID: ${{ secrets.OSSRH_STAGING_PROFILE_ID }}
-        run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository version -Pversion=${GITHUB_REF_NAME:1}
-
-      - name: Generate Release Notes
-        id: generate-release-notes
-        if: steps.publish-release.conclusion == 'success'
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          declare -r NOTES="$(gh api \
-            --method POST \
-            -H "Accept: application/vnd.github+json" \
-            /repos/${{ github.repository }}/releases/generate-notes \
-            -f target_commitish='main' \
-            | jq -r '.body')"
-          declare -r ESCAPED="${NOTES//$'\n'/'%0A'}"
-          echo "notes=$ESCAPED" >> $GITHUB_OUTPUT
-
-      - name: Create github release
-        if: steps.generate-release-notes.conclusion == 'success'
-        uses: ncipollo/release-action@v1
-        with:
-          allowUpdates: true
-          body: ${{ steps.notes.outputs.notes }}
-          token: ${{ secrets.GITHUB_TOKEN }}
+    uses: coditory/jvm-workflows/.github/workflows/build.yml@v1
+    # Required to pass codecov token
+    secrets: inherit
+    with:
+      java-version: 21
+      build-command: ./gradlew build coverage