add version updater

- script to update our versions after a release
- cleanup some git ignore files
- other minor version related doc cleanup

Signed-off-by: Appu Goundan <[email protected]>

.github/ISSUE_TEMPLATE/release-checklist.md

@@ -20,3 +20,8 @@ Full release instructions are at: [RELEASING.md](/sigstore/sigstore-java/blob/ma
 - [ ] [sigstore-java](https://repo1.maven.org/maven2/dev/sigstore/sigstore-java)
 - [ ] [sigstore-maven-plugin](https://repo1.maven.org/maven2/dev/sigstore/sigstore-maven-plugin)
 - [ ] sigstore-gradle-plugin [[base](https://plugins.gradle.org/plugin/dev.sigstore.sign-base)], [[sign](https://plugins.gradle.org/plugin/dev.sigstore.sign)]
+
+## Post Release
+- [ ] Update README if required
+- [ ] Update versions (`./scripts/update_version.sh`)
+- [ ] Update CHANGELOG.md

.gitignore

@@ -1,10 +1,15 @@
 .gradle
 /build
-/*/build
+/**/build
 /out
-/*/out
+/**/out
 /http
 
+/target
+/**/target
+.mvn/timing.properties
+.mvn/wrapper/maven-wrapper.jar
+
 # For occasional use of https://github.com/melix/includegit-gradle-plugin
 /checkouts
 
@@ -20,6 +25,9 @@
 .classpath
 .project
 .DS_Store
+.vscode
+.factorypath
 
 # except this icon
 !/.idea/icon.png
+

RELEASING.md

@@ -2,6 +2,10 @@
 
 Release is done on github. Do not release from your local machine.
 
+## Create an issue
+
+Create a release issue using the release template
+
 ## Create a tag
 
 Tag the release at the version you wish (ex `v0.5.3`), this *MUST* match the project version (`0.5.3`). See version info in [gradle.properties](gradle.properties).

gradle.properties

@@ -4,7 +4,5 @@ systemProp.org.gradle.kotlin.dsl.precompiled.accessors.strict=true
 
 group=dev.sigstore
 
-# remember to also update version in
-# - SigstoreSignExtension.kt
-# - build-logic/publishing/build.gradle.kts 
+# use the ./scripts/update_version.sh script to update all versions
 version=0.12.0

scripts/update_versions.sh

@@ -0,0 +1,38 @@
+#!/bin/bash
+
+# this script is simple and should work for most usecases, but it may break if we do weird things
+set -Eeo pipefail
+
+calculated_release_version=$(grep "^version=" gradle.properties | cut -d'=' -f2)
+read -r -p "Enter released version [${calculated_release_version}]: " vin
+release_version=${vin:-${calculated_release_version}}
+
+calculated_previous_version=$(grep "sigstore-gradle-sign-plugin" build-logic/publishing/build.gradle.kts | cut -d':' -f3 | cut -d'"' -f1)
+read -r -p "Enter previous version [${calculated_previous_version}]: " pvin
+previous_version=${pvin:-${calculated_previous_version}}
+
+calculated_next_version=$(echo "$release_version" | awk -F. -v OFS=. '{$2 += 1 ; print}')
+read -r -p "Enter next version [${calculated_next_version}]: " nvin
+next_version=${nvin:-${calculated_next_version}}
+
+echo ""
+echo "previous: $previous_version"
+echo "latest  : $release_version"
+echo "next    : $next_version"
+read -r -p "Run update? [y/N]: " yn
+go=${yn:-"n"}
+if [ "${go,,}" != "y" ]; then
+  echo "aborting"
+  exit
+fi
+
+# sed below is probably accepting .'s in versions as regex any chars, but this works for our purposes
+
+# updates to new release version
+sed -i "s/\(sigstore-gradle-sign-plugin:\)$previous_version/\1$release_version/" build-logic/publishing/build.gradle.kts
+sed -i "s/\(<version>\)$previous_version/\1$release_version/" sigstore-maven-plugin/README.md
+sed -i "s/\(dev.sigstore.sign\") version \"\)$previous_version/\1$release_version/" sigstore-gradle/README.md
+
+# update to latest dev version
+sed -i "s/\(sigstoreJavaVersion.convention(\"\)$release_version/\1$next_version/" sigstore-gradle/sigstore-gradle-sign-base-plugin/src/main/kotlin/dev/sigstore/sign/SigstoreSignExtension.kt
+sed -i "s/version=$release_version/version=$next_version/" gradle.properties

sigstore-gradle/README.md

@@ -16,7 +16,7 @@ Signature format uses [Sigstore bundle](https://github.com/sigstore/protobuf-spe
 
 ```kotlin
 plugins {
-    id("dev.sigstore.sign")
+    id("dev.sigstore.sign") version "0.11.0"
 }
 
 // Automatically sign all Maven publications, using GitHub Actions OIDC when available,