feat(pyproject): add workspace/monorepo support

.eslintrc.json

@@ -32,13 +32,12 @@
     }]
   },
   "settings": {
+	"typescript": {},
     "import/resolver": {
-      "node": {
+      "typescript": {
         "extensions": [".js"]
       }
     }
   },
-  "ignorePatterns": [
-    "integration"
-  ]
+  "ignorePatterns": []
 }

.github/ISSUE_TEMPLATE/config.yml

@@ -2,5 +2,5 @@
 blank_issues_enabled: false
 contact_links:
   - name: GitHub Discussions
-    url: https://github.com/trustification/exhort-javascript-api/discussions/
+    url: https://github.com/guacsec/trustify-da-javascript-client/discussions/
     about: You can also use Discussions for questions and ideas.

.github/dependabot.yml

@@ -0,0 +1,47 @@
+# yaml-language-server: $schema=https://www.schemastore.org/dependabot-2.0.json
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    exclude-paths:
+      - "test/providers/tst_manifests/**"
+    groups:
+      npm-dependencies:
+        patterns:
+          - "*"
+  - package-ecosystem: "docker"
+    directory: "/docker-image/Dockerfiles"
+    schedule:
+      interval: "daily"
+    groups:
+      dockerfile:
+        patterns:
+          - "*"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    exclude-paths:
+      - "test/providers/tst_manifests/**"
+  - package-ecosystem: "maven"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    exclude-paths:
+      - "test/providers/tst_manifests/**"
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    exclude-paths:
+      - "test/providers/tst_manifests/**"

.github/workflows/integration.yml

@@ -0,0 +1,26 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+---
+name: Integration Tests
+
+on:
+  workflow_run:
+    workflows: ["Test"]
+    types:
+      - completed
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  call-shared:
+    # Only run if the test workflow succeeded, or if triggered manually
+    if: |
+      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') ||
+      github.event_name == 'workflow_dispatch'
+    uses: trustification/exhort-integration-tests/.github/workflows/integration.yml@main
+    with:
+      language: javascript
+      repo-url: ${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_repository.full_name || github.repository }}
+      commit-sha: ${{ github.event_name == 'workflow_dispatch' && github.sha || github.event.workflow_run.head_sha || github.sha }}

.github/workflows/pr-validation.yml

@@ -1,3 +1,5 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+---
 name: Validate PR
 
 on:
@@ -11,29 +13,23 @@ jobs:
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
   commit-message-validation:
     name: Validate commit messages
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
-          registry-url: 'https://npm.pkg.github.com'
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Create .npmrc
-        run: |
-          echo "@trustification:registry=https://npm.pkg.github.com" >> .npmrc
+          node-version: 24
 
       - name: Install commitlint
         run: |

.github/workflows/publish.yml

@@ -0,0 +1,115 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+---
+name: Publish
+
+on:
+  workflow_dispatch:
+  workflow_run:
+    workflows: ["Release"]
+    types:
+      - completed
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  id-token: write
+  actions: read
+
+jobs:
+  publish-ea:
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    name: Publish EA release to NPM
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ github.ref_name }}
+          fetch-depth: 0
+
+      - name: Install node 24
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Update npm
+        run: npm install -g npm@11.11.1
+
+      - name: Configure git
+        run: |
+          git config user.name "${{ github.actor }}"
+          git config user.email "${{ github.actor }}@users.noreply.github.com"
+
+      - name: Reset to commit
+        run: |
+          git reset --hard ${{ github.sha }}
+
+      - name: Get current version
+        id: current-version
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          # Remove both -ea. and -ea- formats for compatibility
+          BASE_VERSION=$(echo "$VERSION" | sed -E 's/-ea[.-][0-9]+$//')
+          echo "base-version=$BASE_VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Install project modules
+        run: npm ci
+
+      - name: Compile project
+        run: npm run compile
+
+      - name: Publish package
+        run: |
+          SHORT_SHA=$(git rev-parse --short "${{ github.sha }}")
+          EA_VERSION="${{ steps.current-version.outputs.base-version }}-ea.${SHORT_SHA}"
+          npm version "$EA_VERSION" --no-git-tag-version
+          npm publish --verbose --tag ea --access public --provenance
+
+  publish-release:
+    if: (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') || github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    name: Publish release to NPM
+    steps:
+      - name: Get releasebranch.txt artifact from Release pipeline
+        if: github.event_name == 'workflow_run'
+        uses: actions/download-artifact@v8
+        with:
+          name: releasebranch.txt
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Read releasebranch.txt
+        if: github.event_name == 'workflow_run'
+        id: releasebranch
+        run: |
+          echo "branch=$(cat releasebranch.txt)" >> "$GITHUB_OUTPUT"
+          rm releasebranch.txt
+
+      - name: Checkout sources
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ (github.event_name == 'workflow_run' && steps.releasebranch.outputs.branch) || github.ref }}
+          fetch-depth: 0
+
+      - name: Install node 24
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Update npm
+        run: npm install -g npm@11.11.1
+
+      - name: Install project modules
+        run: npm ci
+
+      - name: Compile project
+        run: npm run compile
+
+      - name: Publish package
+        run: npm publish --verbose --access public --provenance

.github/workflows/push-to-registry.yml

@@ -0,0 +1,104 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+---
+name: Push to registry
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    tags:
+      - 'v*.*.*'
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Install node 24
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install latest npm
+        run: npm install -g npm@11.11.1
+
+      - name: Install project modules
+        run: npm ci
+
+      - name: Compile project
+        run: npm run compile
+
+      - name: Determine package version
+        id: version
+        run: |
+          if [[ "${GITHUB_REF}" =~ refs/tags/ ]]; then
+            # Release tag
+            VERSION="${GITHUB_REF#refs/tags/v}"
+            EA_BUILD=false
+          elif [ "${GITHUB_REF}" = "refs/heads/main" ]; then
+            # EA build for main
+            BASE=$(node -p "require('./package.json').version" | sed -E 's/-ea[.-][0-9]+$//')
+            SHORT_SHA=$(git rev-parse --short "${GITHUB_SHA}")
+            VERSION="${BASE}-ea.${SHORT_SHA}"
+            EA_BUILD=true
+          else
+            echo "Not building image for this branch"
+            exit 0
+          fi
+
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "ea_build=$EA_BUILD" >> $GITHUB_OUTPUT
+
+      - name: Get image metadata
+        id: image-meta
+        run: |
+          echo "revision=${{ github.sha }}" >> $GITHUB_OUTPUT
+          echo "created=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=latest,enable=${{ steps.version.outputs.ea_build == 'true' }}
+            type=raw,value=${{ steps.version.outputs.version }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          file: ./docker-image/Dockerfiles/Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            IMAGE_VERSION=${{ steps.version.outputs.version }}
+            IMAGE_REVISION=${{ steps.image-meta.outputs.revision }}
+            IMAGE_CREATED=${{ steps.image-meta.outputs.created }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          provenance: true
+          sbom: true