chore: 4.20.0

.dockerignore

@@ -0,0 +1,4 @@
+target
+.github
+.idea
+hooks

.gitattributes

@@ -0,0 +1,4 @@
+# Auto detect text files and perform LF normalization
+* text=auto
+
+mvnw -text -eol=lf

.github/workflows/docker-prerelease.yml

@@ -0,0 +1,23 @@
+name: Build Beta
+
+on:
+  release:
+    types: [prereleased]
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          file: ./Dockerfile.bauhaus
+          tags: ghcr.io/inseefr/bauhaus-back-office:${{ github.event.release.tag_name }}

.github/workflows/docker.yml

@@ -0,0 +1,38 @@
+name: Build release candidate
+
+on: 
+  release:
+    types: [released]
+
+jobs:
+  check-version:
+    runs-on: ubuntu-latest
+    outputs:
+      release-version: ${{ steps.version.outputs.version }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Check if on main branch
+        run: |
+          if [[ "${{ github.ref_name }}" =~ ^v?[0-9]+[.][0-9]+[.][0-9]+$ ]]; then
+          echo "Le nom de la référence correspond au motif."
+          else
+            echo "Le nom de la référence ne correspond PAS au motif."
+            exit 1
+          fi
+
+  docker:
+    needs:
+      - check-version
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Publish to Docker Hub
+        uses: elgohr/Publish-Docker-Github-Action@v5
+        with:
+          name: inseefr/bauhaus-back-office
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          tags: "latest, ${{ github.event.release.tag_name }}"
+          dockerfile: Dockerfile.bauhaus

.github/workflows/pr-name.yml

@@ -0,0 +1,21 @@
+name: "Lint PR"
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - reopened
+
+jobs:
+  main:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
+    steps:
+      - uses: amannn/action-semantic-pull-request@v5
+        with:
+          requireScope: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/quality.yml

@@ -0,0 +1,39 @@
+name: Test and Sonar Analysis
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches:
+      - main
+  schedule:
+    - cron: '0 12 * * 1'
+jobs:
+  test-build:
+    name: build & test & analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: Cache SonarCloud packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.sonar/cache
+          key: ${{ runner.os }}-sonar
+          restore-keys: ${{ runner.os }}-sonar
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+      - name: Set up JDK 25
+        uses: actions/setup-java@v5
+        with:
+          java-version: '25'
+          distribution: 'corretto'
+      - name: Run Sonar
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: mvn -T 1C clean -B clean verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Pcoverage

.gitignore

@@ -6,7 +6,12 @@ node_modules
 .classpath
 .project
 .idea
-graphdb
 *.iml
-src/main/resources/request/BeforeMarkdown.ftlh
 .properties
+.run/
+# Local Netlify folder
+.netlify
+CLAUDE.md
+/fr/
+.DS_Store
+mise.local.toml

.mvn/wrapper/maven-wrapper.properties

@@ -0,0 +1,19 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+wrapperVersion=3.3.2
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip

Dockerfile.bauhaus

@@ -0,0 +1,30 @@
+FROM eclipse-temurin:25-jdk-jammy AS builder
+
+WORKDIR /opt/app
+
+COPY .mvn/ .mvn
+COPY mvnw mvnw
+
+COPY . .
+
+RUN chmod +x mvnw
+RUN ./mvnw -T 1C clean install -Dmaven.test.skip=true -X --no-transfer-progress --batch-mode --errors --fail-at-end --show-version
+
+FROM eclipse-temurin:25-jre-jammy
+
+ARG ELASTIC_APM_VERSION=1.55.4
+
+RUN groupadd -g 10000 javagroup
+RUN useradd -u 10000 -g javagroup -s /usr/sbin/nologin javauser
+RUN mkdir /opt/app/
+RUN chown -R 10000:10000 /opt/app/
+
+ADD https://repo.maven.apache.org/maven2/co/elastic/apm/elastic-apm-agent/$ELASTIC_APM_VERSION/elastic-apm-agent-$ELASTIC_APM_VERSION.jar /opt/elastic_apm/java/elastic-apm-agent.jar
+RUN chown -R 10000:10000 /opt/elastic_apm/
+
+USER 10000
+COPY --from=builder /opt/app/module-bauhaus-bo/target/*.jar /opt/app/bauhaus.jar
+
+EXPOSE 8080
+
+ENTRYPOINT ["java", "-jar",  "/opt/app/bauhaus.jar"]