Merge branch 'master' into dependabot/npm_and_yarn/docker/sync-wrap/multi-e7bf267bf3

Author: saptarshimandal1

.github/README.md .github/SBOM-README.md.github/README.md renamed to .github/SBOM-README.md

@@ -0,0 +1,51 @@
+version: 2
+updates:
+
+  # ---------------------------
+  # Python (Poetry via pip)
+  # ---------------------------
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    target-branch: "master"
+    labels: ["dependencies", "python", "poetry"]
+    open-pull-requests-limit: 10
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
+  # ---------------------------
+  # NodeJS (root)
+  # ---------------------------
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    target-branch: "master"
+    labels: ["dependencies", "npm"]
+    open-pull-requests-limit: 10
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
+  # ---------------------------
+  # Docker (Dockerfile updates)
+  # ---------------------------
+  - package-ecosystem: "docker"
+    directory: "/docker"
+    schedule:
+      interval: "daily"
+    target-branch: "master"
+    labels: ["dependencies", "docker"]
+    open-pull-requests-limit: 10
+
+  # ---------------------------
+  # GitHub Actions
+  # ---------------------------
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    target-branch: "master"
+    labels: ["dependencies", "github-actions"]

.github/dependabot.yml

@@ -0,0 +1,37 @@
+name: Dependabot auto-merge
+
+on:
+  pull_request_target:
+    types: [opened, reopened, synchronize, ready_for_review]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  automerge:
+    name: Auto-merge Dependabot patch updates
+    runs-on: ubuntu-latest
+
+    # Only run on Dependabot PRs
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+
+    steps:
+      - name: Fetch Dependabot metadata
+        id: meta
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Approve PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Auto-merge patch updates only
+        if: steps.meta.outputs.update-type == 'version-update:semver-patch'
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/dependabot-auto-merge.yml

@@ -66,5 +66,5 @@ extends:
         inputs:
           testResultsFormat: "JUnit"
           testResultsFiles: "${{ variables.service_name }}/reports/tests/*.xml"
-          failTaskOnFailedTests: false
-        displayName: publish test report
+          failTaskOnFailedTests: true
+        displayName: publish test report

azure/azure-build-pipeline.yml

@@ -39,4 +39,5 @@ extends:
         post_deploy:
           - template: templates/e2e.yml
             parameters:
-              test_type: e2e
+              test_type: e2e
+              python_version: ${{ variables.python_version}}

azure/azure-pr-pipeline.yml

@@ -40,26 +40,31 @@ extends:
           - template: templates/e2e.yml
             parameters:
               test_type: e2e
+              python_version: ${{ variables.python_version}}
       - environment: internal-dev-sandbox
         post_deploy:
           - template: templates/e2e.yml
             parameters:
               test_type: smoketest
+              python_version: ${{ variables.python_version}}
       - environment: internal-qa
         post_deploy:
           - template: templates/e2e.yml
             parameters:
               test_type: e2e
+              python_version: ${{ variables.python_version}}
       - environment: internal-qa-sandbox
         post_deploy:
           - template: templates/e2e.yml
             parameters:
               test_type: smoketest
+              python_version: ${{ variables.python_version}}
       - environment: ref
         post_deploy:
           - template: templates/e2e.yml
             parameters:
               test_type: smoketest
+              python_version: ${{ variables.python_version}}
         depends_on:
           - internal_qa
       - environment: int
@@ -68,6 +73,7 @@ extends:
             parameters:
               app_id: "84aa2219-7170-4279-93fb-3d37b89bbc01"
               test_type: smoketest
+              python_version: ${{ variables.python_version}}
         depends_on:
           - internal_qa
       - environment: sandbox
@@ -76,6 +82,7 @@ extends:
             parameters:
               app_id: "a50e2f01-ea28-41c9-8666-850c034ddd82"
               test_type: smoketest
+              python_version: ${{ variables.python_version}}
         depends_on:
           - internal_qa
       - environment: prod
@@ -84,6 +91,7 @@ extends:
             parameters:
               app_id: "72ada63b-9d70-4ca2-b9f2-cd1ce74c2dde"
               test_type: smoketest
+              python_version: ${{ variables.python_version}}
         depends_on:
           - int
           - ref

azure/azure-release-pipeline.yml

@@ -2,4 +2,4 @@ variables:
   service_name: sync-wrap
   service_base_path: sync-wrap
   short_service_name: sync-wrap
-  python_version: 3.10
+  python_version: "3.10"

azure/project.yml

@@ -3,8 +3,14 @@ parameters:
   - name: app_id
     type: string
     default: ""
+  - name: python_version
+    default: ""
 
 steps:
+    - task: UsePythonVersion@0
+      displayName: 'Use Python 3.10'
+      inputs:
+        versionSpec: '3.10'
 
     - task: s3-cache-action@1
       inputs: