chore: Update release configuration files to correctly use conventional-commits (terraform-aws-modules#178)

Author: bryantbiggs

.github/workflows/pr-title.yml

@@ -0,0 +1,52 @@
+name: 'Validate PR title'
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  main:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+    steps:
+      # Please look up the latest version from
+      # https://github.com/amannn/action-semantic-pull-request/releases
+      - uses: amannn/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          # Configure which types are allowed.
+          # Default: https://github.com/commitizen/conventional-commit-types
+          types: |
+            fix
+            feat
+            docs
+            ci
+            chore
+          # Configure that a scope must always be provided.
+          requireScope: false
+          # Configure additional validation for the subject based on a regex.
+          # This example ensures the subject starts with an uppercase character.
+          subjectPattern: ^[A-Z].+$
+          # If `subjectPattern` is configured, you can use this property to override
+          # the default error message that is shown when the pattern doesn't match.
+          # The variables `subject` and `title` can be used within the message.
+          subjectPatternError: |
+            The subject "{subject}" found in the pull request title "{title}"
+            didn't match the configured pattern. Please ensure that the subject
+            starts with an uppercase character.
+          # For work-in-progress PRs you can typically use draft pull requests
+          # from Github. However, private repositories on the free plan don't have
+          # this option and therefore this action allows you to opt-in to using the
+          # special "[WIP]" prefix to indicate this state. This will avoid the
+          # validation of the PR title and the pull request checks remain pending.
+          # Note that a second check will be reported if this is enabled.
+          wip: true
+          # When using "Squash and merge" on a PR with only one commit, GitHub
+          # will suggest using that commit message instead of the PR title for the
+          # merge commit, and it's easy to commit this by mistake. Enable this option
+          # to also validate the commit message for one commit PRs.
+          validateSingleCommit: false

.github/workflows/release.yml

@@ -7,13 +7,17 @@ on:
       - main
       - master
     paths:
+      - '**/*.tpl'
       - '**/*.py'
       - '**/*.tf'
+      - '.github/workflows/release.yml'
 
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    # Skip running release workflow on forks
+    if: github.repository_owner == 'terraform-aws-modules'
     steps:
       - name: Checkout
         uses: actions/checkout@v2
@@ -28,5 +32,6 @@ jobs:
           extra_plugins: |
             @semantic-release/[email protected]
             @semantic-release/[email protected]
+            [email protected]
         env:
           GITHUB_TOKEN: ${{ secrets.SEMANTIC_RELEASE_TOKEN }}

.github/workflows/stale-actions.yaml

@@ -0,0 +1,32 @@
+name: 'Mark or close stale issues and PRs'
+on:
+  schedule:
+    - cron: '0 0 * * *'
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@v4
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          # Staling issues and PR's
+          days-before-stale: 30
+          stale-issue-label: stale
+          stale-pr-label: stale
+          stale-issue-message: |
+            This issue has been automatically marked as stale because it has been open 30 days
+            with no activity. Remove stale label or comment or this issue will be closed in 10 days
+          stale-pr-message: |
+            This PR has been automatically marked as stale because it has been open 30 days
+            with no activity. Remove stale label or comment or this PR will be closed in 10 days
+          # Not stale if have this labels or part of milestone
+          exempt-issue-labels: bug,wip,on-hold
+          exempt-pr-labels: bug,wip,on-hold
+          exempt-all-milestones: true
+          # Close issue operations
+          # Label will be automatically removed if the issues are no longer closed nor locked.
+          days-before-close: 10
+          delete-branch: true
+          close-issue-message: This issue was automatically closed because of stale in 10 days
+          close-pr-message: This PR was automatically closed because of stale in 10 days

.pre-commit-config.yaml

@@ -26,3 +26,4 @@ repos:
     rev: v4.1.0
     hooks:
       - id: check-merge-conflict
+      - id: end-of-file-fixer

.releaserc.json

@@ -5,13 +5,22 @@
   ],
   "ci": false,
   "plugins": [
-    "@semantic-release/commit-analyzer",
-    "@semantic-release/release-notes-generator",
+    [
+      "@semantic-release/commit-analyzer",
+      {
+        "preset": "conventionalcommits"
+      }
+    ],
+    [
+      "@semantic-release/release-notes-generator",
+      {
+        "preset": "conventionalcommits"
+      }
+    ],
     [
       "@semantic-release/github",
       {
-        "successComment":
-        "This ${issue.pull_request ? 'PR is included' : 'issue has been resolved'} in version ${nextRelease.version} :tada:",
+        "successComment": "This ${issue.pull_request ? 'PR is included' : 'issue has been resolved'} in version ${nextRelease.version} :tada:",
         "labels": false,
         "releasedLabels": false
       }

examples/iam-policy/main.tf

@@ -58,4 +58,4 @@ module "iam_policy_optional" {
   source = "../../modules/iam-policy"
 
   create_policy = false
-}
+}

examples/iam-read-only-policy/main.tf

@@ -63,4 +63,4 @@ resource "aws_ssoadmin_permission_set_inline_policy" "example" {
   inline_policy      = module.read_only_iam_policy_doc.policy_json
   instance_arn       = aws_ssoadmin_permission_set.example.instance_arn
   permission_set_arn = aws_ssoadmin_permission_set.example.arn
-}
+}

modules/iam-account/main.tf

@@ -19,4 +19,3 @@ resource "aws_iam_account_password_policy" "this" {
   require_numbers                = var.require_numbers
   require_symbols                = var.require_symbols
 }
-

modules/iam-account/outputs.tf

@@ -17,4 +17,3 @@ output "iam_account_password_policy_expire_passwords" {
   description = "Indicates whether passwords in the account expire. Returns true if max_password_age contains a value greater than 0. Returns false if it is 0 or not present."
   value       = element(concat(aws_iam_account_password_policy.this.*.expire_passwords, [""]), 0)
 }
-

modules/iam-account/variables.tf

@@ -68,4 +68,3 @@ variable "require_symbols" {
   type        = bool
   default     = true
 }
-

modules/iam-assumable-role-with-oidc/variables.tf

@@ -100,4 +100,3 @@ variable "force_detach_policies" {
   type        = bool
   default     = false
 }
-

modules/iam-assumable-roles/main.tf

@@ -114,4 +114,3 @@ resource "aws_iam_role_policy_attachment" "readonly" {
   role       = aws_iam_role.readonly[0].name
   policy_arn = element(var.readonly_role_policy_arns, count.index)
 }
-

modules/iam-assumable-roles/outputs.tf

@@ -75,4 +75,3 @@ output "readonly_iam_role_requires_mfa" {
   description = "Whether readonly IAM role requires MFA"
   value       = var.readonly_role_requires_mfa
 }
-

modules/iam-assumable-roles/variables.tf

@@ -156,4 +156,3 @@ variable "force_detach_policies" {
   type        = bool
   default     = false
 }
-

modules/iam-group-with-assumable-roles-policy/main.tf

@@ -30,4 +30,3 @@ resource "aws_iam_group_membership" "this" {
   name  = var.name
   users = var.group_users
 }
-

modules/iam-group-with-assumable-roles-policy/outputs.tf

@@ -22,4 +22,3 @@ output "group_arn" {
   description = "IAM group arn"
   value       = aws_iam_group.this.arn
 }
-

modules/iam-group-with-assumable-roles-policy/variables.tf

@@ -20,4 +20,3 @@ variable "tags" {
   type        = map(string)
   default     = {}
 }
-

modules/iam-group-with-policies/main.tf

@@ -61,4 +61,3 @@ resource "aws_iam_policy" "custom" {
 
   tags = var.tags
 }
-

modules/iam-group-with-policies/outputs.tf

@@ -17,4 +17,3 @@ output "group_name" {
   description = "IAM group name"
   value       = element(concat(aws_iam_group.this.*.name, [var.name]), 0)
 }
-

modules/iam-group-with-policies/policies.tf

@@ -91,4 +91,3 @@ data "aws_iam_policy_document" "iam_self_management" {
     }
   }
 }
-

modules/iam-read-only-policy/main.tf

@@ -87,4 +87,4 @@ data "aws_iam_policy_document" "combined" {
     data.aws_iam_policy_document.logs_query.*.json,
     [var.additional_policy_json]
   )
-}
+}

modules/iam-read-only-policy/outputs.tf

@@ -31,4 +31,4 @@ output "path" {
 output "policy" {
   description = "The policy document"
   value       = element(concat(aws_iam_policy.policy.*.policy, [""]), 0)
-}
+}

modules/iam-read-only-policy/variables.tf

@@ -61,4 +61,4 @@ variable "web_console_services" {
   description = "List of web console services to allow"
   type        = list(string)
   default     = ["resource-groups", "tag", "health"]
-}
+}

modules/iam-user/main.tf

@@ -38,4 +38,3 @@ resource "aws_iam_user_ssh_key" "this" {
   encoding   = var.ssh_key_encoding
   public_key = var.ssh_public_key
 }
-