feat: Implement Trunk tool

.editorconfig

@@ -0,0 +1,36 @@
+# Top-most EditorConfig file
+root = true
+
+[*]
+indent_style = space
+indent_size = 4
+trim_trailing_whitespace = true
+insert_final_newline = true
+# don't set end_of_line; let correct git setting checkout the appropriate one for OS
+charset = utf-8
+
+[*.{json,yml,yaml,html,tf}]
+indent_size = 2
+ij_json_array_wrapping = normal
+
+[*.{kt,kts}]
+ktlint_code_style = intellij_idea
+max_line_length = 150
+ij_kotlin_allow_trailing_comma = true
+ij_kotlin_allow_trailing_comma_on_call_site = true
+
+[tooling/**/*.kt]
+max_line_length = 200
+
+# IntelliJ/Android Studio specific (ktlint respects these too)
+ij_kotlin_continuation_indent_size = 4
+ij_kotlin_align_multiline_parameters = false
+ij_kotlin_align_multiline_parameters_in_calls = false
+ij_kotlin_call_parameters_new_line_after_left_paren = true
+ij_kotlin_call_parameters_right_paren_on_new_line = true
+
+[**/test/**/*.kt]
+max_line_length = off
+
+[**/androidTest/**/*.kt]
+max_line_length = off

.github/workflows/cross-platform-tests.yml

@@ -1,6 +1,9 @@
 name: "Cross Platform Tests"
-on:
-  pull_request
+on: pull_request
+
+permissions:
+  contents: read
+  pull-requests: read
 jobs:
   cross-platform-tests:
     timeout-minutes: 30
@@ -10,14 +13,14 @@ jobs:
         uses: actions/checkout@v5
         with:
           repository: mParticle/crossplatform-sdk-tests
-          
+
       - name: "Checkout Android SDK Branch"
         uses: actions/checkout@v5
         with:
           repository: ${{github.event.pull_request.head.repo.full_name}}
           ref: ${{github.head_ref}}
           path: .sdks/android
-          
+
       - name: Gradle cache
         uses: gradle/gradle-build-action@842c587ad8aa4c68eeba24c396e15af4c2e9f30a #v2.9.0
 
@@ -45,7 +48,7 @@ jobs:
           sudo udevadm control --reload-rules
           sudo udevadm trigger --name-match=kvm
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"

.github/workflows/daily.yml

@@ -1,5 +1,6 @@
 name: "Daily Cron"
 
+# checkov:skip=CKV_GHA_7: This workflow requires dryRun parameter for release control
 on:
   # Allow workflow to be manually run from the GitHub UI
   workflow_dispatch:
@@ -18,8 +19,12 @@ on:
         default: main
         type: string
 
-jobs:
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
 
+jobs:
   confirm-public-repo:
     name: "Confirm android daily cron is run from public origin repo"
     runs-on: ubuntu-latest
@@ -125,6 +130,67 @@ jobs:
 #        with:
 #          name: "instrumented-orchestrator-tests-results"
 #          path: android-core/build/orchestrator/**
+  #  instrumented-tests:
+  #    name: "Instrumented Tests"
+  #    timeout-minutes: 30
+  #    runs-on: ubuntu-latest
+  #    needs: create-regression-branch
+  #    steps:
+  #      - name: "Checkout future release branch"
+  #        uses: actions/checkout@v4
+  #        with:
+  #          repository: mparticle/mparticle-android-sdk
+  #          ref: regression/${{ github.run_number }}
+  #      - name: "Install JDK 17"
+  #        uses: actions/setup-java@v4
+  #        with:
+  #          distribution: "zulu"
+  #          java-version: "17"
+  #          cache: "gradle"
+  #      - name: "Run Instrumented Tests"
+  #        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+  #        with:
+  #          api-level: 28
+  #          #script: ./gradlew :android-core:cAT :android-kit-base:cAT --stacktrace
+  #          script: |
+  #            #Disable benchmark tests as they do not work on emulators
+  #            adb uninstall com.mparticle.kits.test; ./gradlew connectedCheck --stacktrace
+  #            ./gradlew :android-core:cAT :android-kit-base:cAT  -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none
+  #      - name: "Archive Instrumented Test Results"
+  #        uses: actions/upload-artifact@v4
+  #        if: always()
+  #        with:
+  #          name: instrumented-test-results
+  #          path: android-core/build/reports/androidTests/connected/**
+  #
+  #  instrumented-orchestrator-tests:
+  #    name: "Instrumented Orchestrator Tests"
+  #    timeout-minutes: 30
+  #    runs-on: ubuntu-latest
+  #    needs: create-regression-branch
+  #    steps:
+  #      - name: "Checkout Branch"
+  #        uses: actions/checkout@v4
+  #        with:
+  #          repository: mparticle/mparticle-android-sdk
+  #          ref: regression/${{ github.run_number }}
+  #      - name: "Install JDK 17"
+  #        uses: actions/setup-java@v4
+  #        with:
+  #          distribution: "zulu"
+  #          java-version: "17"
+  #          cache: "gradle"
+  #      - name: "Run Instrumented Orchestrator Tests"
+  #        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+  #        with:
+  #          api-level: 28
+  #          script: ./gradlew -Porchestrator=true :android-core:cAT --stacktrace
+  #      - name: "Archive Instrumented Orchestrator Tests Results"
+  #        uses: actions/upload-artifact@v4
+  #        if: always()
+  #        with:
+  #          name: "instrumented-orchestrator-tests-results"
+  #          path: android-core/build/orchestrator/**
 
   unit-tests:
     name: "Unit Tests"
@@ -138,7 +204,7 @@ jobs:
           repository: mparticle/mparticle-android-sdk
           ref: regression/${{ github.run_number }}
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -167,7 +233,7 @@ jobs:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -203,7 +269,7 @@ jobs:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -244,7 +310,7 @@ jobs:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -256,7 +322,7 @@ jobs:
 
   semantic-release-dryrun:
     name: "Test Semantic Release - Dry Run"
-    needs: [ unit-tests, lint-checks, kotlin-lint-checks, update-kits ]
+    needs: [unit-tests, lint-checks, kotlin-lint-checks, update-kits]
     runs-on: macos-latest
     env:
       GITHUB_TOKEN: ${{ secrets.MP_SEMANTIC_RELEASE_BOT }}
@@ -274,7 +340,7 @@ jobs:
         run: |
           git pull origin regression/${{ github.run_number }}
       - name: "Semantic Release --dry-run"
-        if: ${{ inputs.dryRun }} == 'true'
+        if: inputs.dryRun == 'true'
         run: |
           npx \
           -p lodash \

.github/workflows/dependabot-automerge.yml

@@ -6,7 +6,12 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   automerge-dependabot:
     name: "Automerge Dependabot PR"
-    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-automerge.yml@main
+    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-automerge.yml@main

.github/workflows/dependabot-rebase-branch.yml

@@ -6,6 +6,11 @@ on:
       - development
   workflow_dispatch:
 
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   rebase-branch:
     name: "Rebase Development onto Dependabot Branch"

.github/workflows/issue-autorespond-and-close.yml

@@ -5,10 +5,14 @@ on:
     types:
       - opened
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   auto-respond-and-close-issue:
     uses: mparticle/mparticle-workflows/.github/workflows/auto-respond-close-issue.yml@main
     with:
       issue_number: ${{ github.event.issue.number }}
       repository: ${{ github.repository }}
-      user_login: ${{ github.event.issue.user.login }}
+      user_login: ${{ github.event.issue.user.login }}

.github/workflows/pull-request.yml

@@ -1,6 +1,6 @@
 name: "Build and Test"
 
-on: [ workflow_dispatch, pull_request ]
+on: [workflow_dispatch, pull_request]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -31,7 +31,7 @@ jobs:
       - name: "Checkout Branch"
         uses: actions/checkout@v5
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -67,11 +67,11 @@ jobs:
           emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
           disable-animations: true
           script: |
-            # Disable benchmark tests as they do not work on emulators
-            adb uninstall com.mparticle.kittests || true
-            adb uninstall com.mparticle.kits.test || true
-            adb uninstall com.mparticle.legacyTest || true
-            adb uninstall com.mparticle.test || true
+            # Disable animations and clean up test packages
+            adb shell settings put global transition_animation_scale 0.0
+            adb shell settings put global animator_duration_scale 0.0
+
+            for pkg in com.mparticle.kittests com.mparticle.kits.test com.mparticle.legacyTest com.mparticle.test; do if adb shell pm list packages | grep -q "$pkg"; then adb uninstall "$pkg"; fi; done
 
             ./gradlew connectedCheck --info --stacktrace
 
@@ -92,12 +92,20 @@ jobs:
       - name: "Checkout Branch"
         uses: actions/checkout@v5
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
       - name: Gradle cache
         uses: gradle/gradle-build-action@842c587ad8aa4c68eeba24c396e15af4c2e9f30a #v2.9.0
+      - name: AVD cache
+        uses: actions/cache@v4
+        id: avd-cache
+        with:
+          path: |
+            ~/.android/avd/*
+            ~/.android/adb*
+          key: avd-29
 
       - name: create AVD and generate snapshot for caching
         if: steps.avd-cache.outputs.cache-hit != 'true'
@@ -122,11 +130,12 @@ jobs:
           disable-animations: true
           script: |
             # Disable benchmark tests as they do not work on emulators
-            adb uninstall com.mparticle.kittests || true
-            adb uninstall com.mparticle.kits.test || true
-            adb uninstall com.mparticle.legacyTest || true
-            adb uninstall com.mparticle.test || true
-
+            # Disable animations and clean up test packages
+            adb shell settings put global transition_animation_scale 0.0
+            adb shell settings put global animator_duration_scale 0.0
+
+            for pkg in com.mparticle.kittests com.mparticle.kits.test com.mparticle.legacyTest com.mparticle.test; do if adb shell pm list packages | grep -q "$pkg"; then adb uninstall "$pkg"; fi; done
+
             ./gradlew connectedCheck --stacktrace
             ./gradlew -Porchestrator=true :android-core:cAT -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none
       - name: "Archive Instrumented Orchestrator Tests Results"
@@ -143,7 +152,7 @@ jobs:
       - name: "Checkout Branch"
         uses: actions/checkout@v5
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -169,7 +178,7 @@ jobs:
         with:
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -192,7 +201,7 @@ jobs:
         with:
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -222,7 +231,7 @@ jobs:
           submodules: recursive
           fetch-depth: 0
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -237,7 +246,15 @@ jobs:
 
   automerge-dependabot:
     name: "Save PR Number for Dependabot Automerge"
-    needs: [ instrumented-tests, instrumented-orchestrator-tests, unit-tests, lint-checks, kotlin-lint-checks, kit-compatibility-test ]
+    needs:
+      [
+        instrumented-tests,
+        instrumented-orchestrator-tests,
+        unit-tests,
+        lint-checks,
+        kotlin-lint-checks,
+        kit-compatibility-test,
+      ]
     uses: mParticle/mparticle-workflows/.github/workflows/dependabot-save-pr-number.yml@main
 
   pr-notify:
@@ -254,4 +271,3 @@ jobs:
     uses: ROKT/rokt-workflows/.github/workflows/oss_pr_opened_notification.yml@main
     secrets:
       gchat_webhook: ${{ secrets.GCHAT_PRS_WEBHOOK }}
-