Merge release branch '1.18.0'

.github/dependabot.yml

@@ -0,0 +1,17 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: maven
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "04:00"
+    open-pull-requests-limit: 10
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/build-for-development.yml

@@ -0,0 +1,83 @@
+name: Build for development
+
+on:
+  push:
+    branches: [ 'feature/**', 'dependabot/**' ]
+  pull_request_target:
+    branches: [ develop, main ]
+    types: [ ready_for_review, closed ]
+
+jobs:
+  test_and_scan:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: 'maven'
+      - name: Run unit tests
+        run: mvn clean test
+      - name: Run integration tests
+        run: mvn verify -P integration-tests
+      - name: Prepare test results
+        run: |
+          mkdir -p ~/test-results/unit-tests/
+          mkdir -p ~/test-results/integration-tests/
+          find . -type f -regex ".*/target/surefire-reports/.*xml" -exec cp {} ~/test-results/unit-tests/ \;
+          find . -type f -regex ".*/target/failsafe-reports/.*xml" -exec cp {} ~/test-results/integration-tests/ \;
+      - name: Upload test coverage report
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-coverage-report
+          path: target/site/jacoco-merged-test-coverage-report
+      - name: Upload unit tests report
+        uses: actions/upload-artifact@v4
+        with:
+          name: unit-tests-report
+          path: ~/test-results/unit-tests/
+      - name: Upload integration tests report
+        uses: actions/upload-artifact@v4
+        with:
+          name: integration-tests-report
+          path: ~/test-results/integration-tests/
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'fs'
+          ignore-unfixed: true
+          format: 'sarif'
+          output: 'trivy-results.sarif'
+          severity: 'CRITICAL,HIGH'
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: 'trivy-results.sarif'
+
+  docker:
+    needs: test_and_scan
+    if: github.event.pull_request.merged == true
+
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: 'maven'
+      - name: Login to docker hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and push docker image
+        run: |
+          mvn spring-boot:build-image -Dspring-boot.build-image.imageName=${{ secrets.DOCKER_USERNAME }}/num-portal:develop -DskipTests
+          docker push ${{ secrets.DOCKER_USERNAME }}/num-portal:develop