first commit

.github/CODEOWNERS

@@ -0,0 +1 @@
+*       @filipelautert

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: "maven"
+    directory: "/"
+    schedule:
+      interval: "daily"
+

.github/workflows/attach-artifact-release.yml

@@ -0,0 +1,11 @@
+name: Attach Artifact to Release
+
+on:
+  pull_request:
+    types:
+      - closed
+
+jobs:
+  attach-artifact-to-release:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit

.github/workflows/build-nightly.yml

@@ -0,0 +1,14 @@
+# This workflow will build the extension against the latest Liquibase artifact
+name: "Nightly build"
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 7 * * 1-5'
+
+jobs:
+  nightly-build:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    with:
+      nightly: true
+    secrets: inherit

.github/workflows/codeql.yml

@@ -0,0 +1,22 @@
+name: CodeQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+      - master
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches:
+      - main
+      - master
+  schedule:
+    - cron: '16 14 * * 4'
+
+jobs:
+  codeql:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit
+    with:
+      languages: '["java"]'

.github/workflows/create-release.yml

@@ -0,0 +1,12 @@
+name: Create Release
+
+on:
+  push:
+    branches:
+      - main
+      - master
+
+jobs:
+  create-release:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit

.github/workflows/label-pr.yml

@@ -0,0 +1,19 @@
+name: Pull Request Labels
+on:
+  pull_request:
+    types: [opened, labeled, unlabeled, synchronize, reopened]
+jobs:
+  label:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+    steps:
+      - name: Validate PR Labels
+        uses: mheap/github-action-required-labels@v5
+        with:
+          mode: minimum
+          count: 1
+          labels: "breakingChanges, newContributors, notableChanges, sdou, skipReleaseNotes, TypeBug, TypeEnhancement, TypeTest"
+          add_comment: true
+          message: "Label error: This PR is being prevented from merging because you have not added one of the labels: {{ provided }}. You'll need to add it before this PR can be merged."

.github/workflows/release-drafter.yml

@@ -0,0 +1,26 @@
+name: Release Drafter
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  update_release_draft:
+    permissions:
+      # write permission is required to create a github release
+      contents: write
+      # write permission is required for autolabeler
+      # otherwise, read permission is required at least
+      pull-requests: write
+    runs-on: ubuntu-22.04
+    steps:
+      # Drafts your next Release notes as Pull Requests are merged into the default branch
+      - uses: release-drafter/release-drafter@v6
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-published.yml

@@ -0,0 +1,11 @@
+name: Release Extension to Sonatype
+
+on:
+  workflow_dispatch:
+  release:
+    types: [published]
+
+jobs:
+  release:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit

.github/workflows/synk-nightly.yml

@@ -0,0 +1,14 @@
+# Run Snyk nightly to scan and report security issues on staging.
+name: Nightly Snyk Scan
+
+# Job will run nightly at 02:05 EDT / 01:05 CDT
+# Time below is UTC
+on:
+  schedule:
+    - cron: "5 6 * * *"
+  workflow_dispatch:
+
+jobs:
+  security-scan:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit

.github/workflows/test.yml

@@ -0,0 +1,20 @@
+name: Build and Test
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+
+jobs:
+  #delete this block if the repository you are creating is a PRO extension
+  build-test:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit
+
+  #delete this block if the repository you are creating is a CORE extension
+  build-test:
+    uses: liquibase/build-logic/.github/workflows/[email protected]
+    secrets: inherit

.gitignore

@@ -0,0 +1,13 @@
+target/
+pom.xml.tag
+pom.xml.releaseBackup
+pom.xml.versionsBackup
+pom.xml.next
+release.properties
+dependency-reduced-pom.xml
+buildNumber.properties
+.mvn/timing.properties
+# https://github.com/takari/maven-wrapper#usage-without-binary-jar
+.mvn/wrapper/maven-wrapper.jar
+*.iml
+.idea

.mvn/wrapper/maven-wrapper.properties

@@ -0,0 +1,18 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.6/apache-maven-3.9.6-bin.zip
+wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar