feat: Implement Trunk tool

.editorconfig

@@ -0,0 +1,36 @@
+# Top-most EditorConfig file
+root = true
+
+[*]
+indent_style = space
+indent_size = 4
+trim_trailing_whitespace = true
+insert_final_newline = true
+# don't set end_of_line; let correct git setting checkout the appropriate one for OS
+charset = utf-8
+
+[*.{json,yml,yaml,html,tf}]
+indent_size = 2
+ij_json_array_wrapping = normal
+
+[*.{kt,kts}]
+ktlint_code_style = intellij_idea
+max_line_length = 150
+ij_kotlin_allow_trailing_comma = true
+ij_kotlin_allow_trailing_comma_on_call_site = true
+
+[tooling/**/*.kt]
+max_line_length = 200
+
+# IntelliJ/Android Studio specific (ktlint respects these too)
+ij_kotlin_continuation_indent_size = 4
+ij_kotlin_align_multiline_parameters = false
+ij_kotlin_align_multiline_parameters_in_calls = false
+ij_kotlin_call_parameters_new_line_after_left_paren = true
+ij_kotlin_call_parameters_right_paren_on_new_line = true
+
+[**/test/**/*.kt]
+max_line_length = off
+
+[**/androidTest/**/*.kt]
+max_line_length = off

.github/dependabot.yml

@@ -1,14 +1,14 @@
 version: 2
 updates:
-    - package-ecosystem: gradle
-      directory: "/"
-      schedule:
-          interval: daily
-      target-branch: "chore/dependabot"
-      labels: ["dependabot"]
-      open-pull-requests-limit: 10
-      ignore:
-        - dependency-name: "com.mparticle:android-core"
-        - dependency-name: "com.google.firebase:firebase-messaging"
-      commit-message:
-        prefix: "chore"
+  - package-ecosystem: gradle
+    directory: "/"
+    schedule:
+      interval: daily
+    target-branch: "chore/dependabot"
+    labels: ["dependabot"]
+    open-pull-requests-limit: 10
+    ignore:
+      - dependency-name: "com.mparticle:android-core"
+      - dependency-name: "com.google.firebase:firebase-messaging"
+    commit-message:
+      prefix: "chore"

.github/workflows/cross-platform-tests.yml

@@ -1,28 +1,31 @@
 name: "Cross Platform Tests"
-on:
-  pull_request
+on: pull_request
+
+permissions:
+  contents: read
+  pull-requests: read
 jobs:
   cross-platform-tests:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Cross Platform Tests Repo"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: mParticle/crossplatform-sdk-tests
-          
+
       - name: "Checkout Android SDK Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: ${{github.event.pull_request.head.repo.full_name}}
           ref: ${{github.head_ref}}
           path: .sdks/android
-          
+
       - name: Gradle cache
         uses: gradle/gradle-build-action@842c587ad8aa4c68eeba24c396e15af4c2e9f30a #v2.9.0
 
       - name: AVD cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         id: avd-cache
         with:
           path: |
@@ -45,7 +48,7 @@ jobs:
           sudo udevadm control --reload-rules
           sudo udevadm trigger --name-match=kvm
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"

.github/workflows/daily.yml

@@ -1,5 +1,6 @@
 name: "Daily Cron"
 
+# checkov:skip=CKV_GHA_7: This workflow requires dryRun parameter for release control
 on:
   # Allow workflow to be manually run from the GitHub UI
   workflow_dispatch:
@@ -18,8 +19,12 @@ on:
         default: "development"
         type: string
 
-jobs:
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
 
+jobs:
   confirm-public-repo:
     name: "Confirm android daily cron is run from public origin repo"
     runs-on: ubuntu-latest
@@ -40,7 +45,7 @@ jobs:
       GIT_COMMITTER_EMAIL: [email protected]
     steps:
       - name: "Clone branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: mparticle/mparticle-android-sdk
           ref: ${{ inputs.branch_name }}
@@ -64,67 +69,67 @@ jobs:
       - name: "Push kit updates to release branch"
         run: git push origin regression/${{ github.run_number }}
 
-#  instrumented-tests:
-#    name: "Instrumented Tests"
-#    timeout-minutes: 30
-#    runs-on: ubuntu-latest
-#    needs: create-regression-branch
-#    steps:
-#      - name: "Checkout future release branch"
-#        uses: actions/checkout@v3
-#        with:
-#          repository: mparticle/mparticle-android-sdk
-#          ref: regression/${{ github.run_number }}
-#      - name: "Install JDK 17"
-#        uses: actions/setup-java@v3
-#        with:
-#          distribution: "zulu"
-#          java-version: "17"
-#          cache: "gradle"
-#      - name: "Run Instrumented Tests"
-#        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
-#        with:
-#          api-level: 28
-#          #script: ./gradlew :android-core:cAT :android-kit-base:cAT --stacktrace
-#          script: |
-#            #Disable benchmark tests as they do not work on emulators
-#            adb uninstall com.mparticle.kits.test; ./gradlew connectedCheck --stacktrace
-#            ./gradlew :android-core:cAT :android-kit-base:cAT  -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none
-#      - name: "Archive Instrumented Test Results"
-#        uses: actions/upload-artifact@v4
-#        if: always()
-#        with:
-#          name: instrumented-test-results
-#          path: android-core/build/reports/androidTests/connected/**
-#
-#  instrumented-orchestrator-tests:
-#    name: "Instrumented Orchestrator Tests"
-#    timeout-minutes: 30
-#    runs-on: ubuntu-latest
-#    needs: create-regression-branch
-#    steps:
-#      - name: "Checkout Branch"
-#        uses: actions/checkout@v3
-#        with:
-#          repository: mparticle/mparticle-android-sdk
-#          ref: regression/${{ github.run_number }}
-#      - name: "Install JDK 17"
-#        uses: actions/setup-java@v3
-#        with:
-#          distribution: "zulu"
-#          java-version: "17"
-#          cache: "gradle"
-#      - name: "Run Instrumented Orchestrator Tests"
-#        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
-#        with:
-#          api-level: 28
-#          script: ./gradlew -Porchestrator=true :android-core:cAT --stacktrace
-#      - name: "Archive Instrumented Orchestrator Tests Results"
-#        uses: actions/upload-artifact@v4
-#        if: always()
-#        with:
-#          name: "instrumented-orchestrator-tests-results"
-#          path: android-core/build/orchestrator/**
+  #  instrumented-tests:
+  #    name: "Instrumented Tests"
+  #    timeout-minutes: 30
+  #    runs-on: ubuntu-latest
+  #    needs: create-regression-branch
+  #    steps:
+  #      - name: "Checkout future release branch"
+  #        uses: actions/checkout@v4
+  #        with:
+  #          repository: mparticle/mparticle-android-sdk
+  #          ref: regression/${{ github.run_number }}
+  #      - name: "Install JDK 17"
+  #        uses: actions/setup-java@v4
+  #        with:
+  #          distribution: "zulu"
+  #          java-version: "17"
+  #          cache: "gradle"
+  #      - name: "Run Instrumented Tests"
+  #        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+  #        with:
+  #          api-level: 28
+  #          #script: ./gradlew :android-core:cAT :android-kit-base:cAT --stacktrace
+  #          script: |
+  #            #Disable benchmark tests as they do not work on emulators
+  #            adb uninstall com.mparticle.kits.test; ./gradlew connectedCheck --stacktrace
+  #            ./gradlew :android-core:cAT :android-kit-base:cAT  -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none
+  #      - name: "Archive Instrumented Test Results"
+  #        uses: actions/upload-artifact@v4
+  #        if: always()
+  #        with:
+  #          name: instrumented-test-results
+  #          path: android-core/build/reports/androidTests/connected/**
+  #
+  #  instrumented-orchestrator-tests:
+  #    name: "Instrumented Orchestrator Tests"
+  #    timeout-minutes: 30
+  #    runs-on: ubuntu-latest
+  #    needs: create-regression-branch
+  #    steps:
+  #      - name: "Checkout Branch"
+  #        uses: actions/checkout@v4
+  #        with:
+  #          repository: mparticle/mparticle-android-sdk
+  #          ref: regression/${{ github.run_number }}
+  #      - name: "Install JDK 17"
+  #        uses: actions/setup-java@v4
+  #        with:
+  #          distribution: "zulu"
+  #          java-version: "17"
+  #          cache: "gradle"
+  #      - name: "Run Instrumented Orchestrator Tests"
+  #        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+  #        with:
+  #          api-level: 28
+  #          script: ./gradlew -Porchestrator=true :android-core:cAT --stacktrace
+  #      - name: "Archive Instrumented Orchestrator Tests Results"
+  #        uses: actions/upload-artifact@v4
+  #        if: always()
+  #        with:
+  #          name: "instrumented-orchestrator-tests-results"
+  #          path: android-core/build/orchestrator/**
 
   unit-tests:
     name: "Unit Tests"
@@ -133,12 +138,12 @@ jobs:
     needs: create-regression-branch
     steps:
       - name: "Checkout future release branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: mparticle/mparticle-android-sdk
           ref: regression/${{ github.run_number }}
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -162,12 +167,12 @@ jobs:
     needs: create-regression-branch
     steps:
       - name: "Checkout Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -198,12 +203,12 @@ jobs:
     needs: create-regression-branch
     steps:
       - name: "Checkout Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -238,13 +243,13 @@ jobs:
       GIT_COMMITTER_EMAIL: [email protected]
     steps:
       - name: "Checkout future release branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: mparticle/mparticle-android-sdk
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -256,7 +261,7 @@ jobs:
 
   semantic-release-dryrun:
     name: "Test Semantic Release - Dry Run"
-    needs: [ unit-tests, lint-checks, kotlin-lint-checks, update-kits ]
+    needs: [unit-tests, lint-checks, kotlin-lint-checks, update-kits]
     runs-on: macos-latest
     env:
       GITHUB_TOKEN: ${{ secrets.MP_SEMANTIC_RELEASE_BOT }}
@@ -266,15 +271,15 @@ jobs:
       GIT_COMMITTER_EMAIL: [email protected]
     steps:
       - name: "Checkout public main branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           ref: main
       - name: "Merge future release branch into main branch"
         run: |
           git pull origin regression/${{ github.run_number }}
       - name: "Semantic Release --dry-run"
-        if: ${{ inputs.dryRun }} == 'true'
+        if: inputs.dryRun == 'true'
         run: |
           npx \
           -p lodash \
@@ -297,7 +302,7 @@ jobs:
       GIT_COMMITTER_EMAIL: [email protected]
     steps:
       - name: "Checkout repo"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           repository: ${{ github.repository }}

.github/workflows/dependabot-automerge.yml

@@ -6,7 +6,12 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   automerge-dependabot:
     name: "Automerge Dependabot PR"
-    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-automerge.yml@main
+    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-automerge.yml@main

.github/workflows/dependabot-rebase-branch.yml

@@ -6,6 +6,11 @@ on:
       - development
   workflow_dispatch:
 
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   rebase-branch:
     name: "Rebase Development onto Dependabot Branch"