From 35f4b2ec800a97755239efb2ea5a46410954f360 Mon Sep 17 00:00:00 2001 From: theEvilReaper Date: Wed, 26 Aug 2026 22:28:33 +0200 Subject: [PATCH 1/4] fix(game): add missign public keyword --- game/src/main/java/net/onelitefeather/cygnus/CygnusLoader.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/game/src/main/java/net/onelitefeather/cygnus/CygnusLoader.java b/game/src/main/java/net/onelitefeather/cygnus/CygnusLoader.java index a3956a1d..17f86846 100644 --- a/game/src/main/java/net/onelitefeather/cygnus/CygnusLoader.java +++ b/game/src/main/java/net/onelitefeather/cygnus/CygnusLoader.java @@ -8,7 +8,7 @@ public final class CygnusLoader { - static void main() { + public static void main() { // minestom-extensions loads platform extensions - the CloudNet bridge and our // :bridge permission extension among them - from the extensions/ folder. Running // standalone simply loads none. This also performs MinecraftServer.init(). From 0aefeb629d6cca80de18e7d3f3efedaad2a084e6 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 26 Aug 2026 22:32:23 +0200 Subject: [PATCH 2/4] chore(main): release 2.7.1 (#200) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- .release-please-manifest.json | 2 +- CHANGELOG.md | 7 +++++++ build.gradle.kts | 2 +- 3 files changed, 9 insertions(+), 2 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 6ed9c801..984e5f0f 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "2.7.0" + ".": "2.7.1" } diff --git a/CHANGELOG.md b/CHANGELOG.md index 77fc634c..3f8dcbfb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,13 @@ * **setup:** add support for data deletion ([#105](https://github.com/OneLiteFeatherNET/Cygnus/issues/105)) ([92670e5](https://github.com/OneLiteFeatherNET/Cygnus/commit/92670e5258e906c5c36e515185bebd678be9ba3a)) +## [2.7.1](https://github.com/OneLiteFeatherNET/Cygnus/compare/v2.7.0...v2.7.1) (2026-08-26) + + +### Bug Fixes + +* **game:** add missign public keyword ([35f4b2e](https://github.com/OneLiteFeatherNET/Cygnus/commit/35f4b2ec800a97755239efb2ea5a46410954f360)) + ## [2.7.0](https://github.com/OneLiteFeatherNET/Cygnus/compare/v2.6.6...v2.7.0) (2026-08-26) diff --git a/build.gradle.kts b/build.gradle.kts index d3f57917..42039198 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -3,4 +3,4 @@ plugins { } group = "net.onelitefeather" -version = "2.7.0" // x-release-please-version +version = "2.7.1" // x-release-please-version From d1a436a1e646deb355483aad3379e78dd2b847fa Mon Sep 17 00:00:00 2001 From: Phillipp Glanz <6745190+TheMeinerLP@users.noreply.github.com> Date: Wed, 26 Aug 2026 22:33:35 +0200 Subject: [PATCH 3/4] chore(ci): adopt shared workflows and central Renovate preset (#198) --- .github/workflows/pr-lint.yml | 17 +++++++++ .github/workflows/release-please.yml | 28 ++++++++++++++ .github/workflows/security.yml | 55 ++++++++++++++++++++++++++++ commitlint.config.mjs | 3 ++ release-please-config.json | 5 ++- renovate.json | 2 +- 6 files changed, 108 insertions(+), 2 deletions(-) create mode 100644 .github/workflows/pr-lint.yml create mode 100644 .github/workflows/security.yml create mode 100644 commitlint.config.mjs diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml new file mode 100644 index 00000000..759b37b8 --- /dev/null +++ b/.github/workflows/pr-lint.yml @@ -0,0 +1,17 @@ +name: PR Lint + +# Conventional Commits on the PR title and every commit on the branch. +# release-please parses those commit types to decide the version bump and to +# build the changelog - a non-conventional commit silently produces neither. +on: + pull_request: + types: [opened, edited, synchronize, reopened] + +permissions: + contents: read + pull-requests: read + +jobs: + lint: + uses: OneLiteFeatherNET/workflows/.github/workflows/pr-lint.yml@v2.8.1 + secrets: inherit diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 8095d36e..9e1e09a1 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -48,3 +48,31 @@ jobs: bomfilename: "build/reports/cyclonedx/bom.xml" autocreate: true parent: '735737f3-8c00-4123-aa2a-ea6cb62b0b6f' + + sbom: + name: Attach SBOM to release + needs: release-please + if: needs.release-please.outputs.release_created == 'true' + runs-on: ubuntu-latest + permissions: + contents: write + steps: + - name: Checkout + uses: actions/checkout@v6 + with: + ref: ${{ needs.release-please.outputs.tag_name }} + + - name: Generate CycloneDX SBOM + uses: aquasecurity/trivy-action@v0.36.0 + with: + scan-type: fs + scan-ref: . + format: cyclonedx + output: bom.json + exit-code: '0' + + - name: Attach SBOM to the release + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + TAG: ${{ needs.release-please.outputs.tag_name }} + run: gh release upload "$TAG" bom.json --clobber diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml new file mode 100644 index 00000000..e2958753 --- /dev/null +++ b/.github/workflows/security.yml @@ -0,0 +1,55 @@ +name: Security + +# Trivy vulnerability gate plus a CycloneDX SBOM of the repository. Self-contained +# on purpose: it needs no build tool and no registry credentials, so it is the +# baseline security gate for every repository regardless of language. +on: + pull_request: + push: + branches: [main] + schedule: + - cron: "37 3 * * 1" + workflow_dispatch: +permissions: + contents: read + security-events: write + +jobs: + trivy: + name: Trivy scan + uses: OneLiteFeatherNET/workflows/.github/workflows/security-scan.yml@v2.8.1 + with: + scan-type: "fs" + scanners: "vuln,secret" + severity: "CRITICAL,HIGH" + # Report-only for now, so adopting this does not turn CI red on day one. + fail-on-findings: false + upload-sarif: true + secrets: inherit + + sbom: + name: CycloneDX SBOM + runs-on: ubuntu-latest + permissions: + contents: read + steps: + - name: Checkout + uses: actions/checkout@v6 + + - name: Generate SBOM + uses: aquasecurity/trivy-action@v0.36.0 + with: + scan-type: fs + scan-ref: . + format: cyclonedx + output: bom.json + # An SBOM is an inventory, not a finding list - never fail on it. + exit-code: '0' + + - name: Upload SBOM + uses: actions/upload-artifact@v4 + with: + name: sbom-cyclonedx + path: bom.json + if-no-files-found: error + retention-days: 90 diff --git a/commitlint.config.mjs b/commitlint.config.mjs new file mode 100644 index 00000000..0616fb93 --- /dev/null +++ b/commitlint.config.mjs @@ -0,0 +1,3 @@ +export default { + extends: ['@commitlint/config-conventional'], +}; diff --git a/release-please-config.json b/release-please-config.json index 0d47f158..e0787484 100644 --- a/release-please-config.json +++ b/release-please-config.json @@ -10,7 +10,10 @@ "package-name": "cygnus", "changelog-path": "CHANGELOG.md", "extra-files": [ - { "type": "generic", "path": "build.gradle.kts" } + { + "type": "generic", + "path": "build.gradle.kts" + } ] } } diff --git a/renovate.json b/renovate.json index d5fb3982..607db884 100644 --- a/renovate.json +++ b/renovate.json @@ -12,4 +12,4 @@ "allowedVersions": "<=4.0.0-RC16" } ] -} \ No newline at end of file +} From e7b4d7b730209bb5dbad34b506cc69d05a3c406b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 26 Aug 2026 20:35:00 +0000 Subject: [PATCH 4/4] chore(deps): update actions/checkout action to v7 --- .github/workflows/release-please.yml | 2 +- .github/workflows/security.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 9e1e09a1..9772598c 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -58,7 +58,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ needs.release-please.outputs.tag_name }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index e2958753..a504eda5 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -34,7 +34,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Generate SBOM uses: aquasecurity/trivy-action@v0.36.0