chore(java-cloud-bom): migrate java-cloud-bom into monorepo (googleapis#13498)

b/477663818

This PR migrates the **`java-cloud-bom`** package (historically hosted
in a separate split repository) directly into the `google-cloud-java`
monorepo. This consolidation allows us to centrally validate, build, and
publish the release BOMs (`google-cloud-bom` and `libraries-bom`) inline
with the rest of the libraries.

1. **BOM Migration**:
* Consolidated all `java-cloud-bom` source modules, metadata, and tools
(including `dashboard`, `release-note-generation`, and `tests`
submodules) under `/java-cloud-bom`.
* Centralized configuration POMs for `google-cloud-bom` and
`libraries-bom`.
2. **CI/CD Workflows**:
* Added GitHub Actions configurations for validating the BOM on
presubmits, verifying content assertions, and executing dependency
convergence rules.

Author: jinseopkim0

.github/CODEOWNERS

@@ -20,4 +20,5 @@
 /java-bigtable/ @googleapis/bigtable-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
 /java-firestore/ @googleapis/firestore-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
 /librarian.yaml @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
+/java-cloud-bom/ @googleapis/cloud-sdk-java-team
 /java-shared-config/ @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team

.github/workflows/ci.yaml

@@ -46,8 +46,8 @@ jobs:
           workflows:
             - '.github/workflows/**'
           src:
-            - '!(google-auth-library-java|grpc-gcp-java|java-bigquery|java-bigquery-jdbc|java-bigquerystorage|java-bigtable|java-datastore|java-firestore|java-logging|java-logging-logback|java-pubsub|java-shared-config|java-spanner|java-storage)/**/*.java'
-            - '!(google-auth-library-java|grpc-gcp-java|java-bigquery|java-bigquery-jdbc|java-bigquerystorage|java-bigtable|java-datastore|java-firestore|java-logging|java-logging-logback|java-pubsub|java-shared-config|java-spanner|java-storage)/**/pom.xml'
+            - '!(google-auth-library-java|grpc-gcp-java|java-bigquery|java-bigquery-jdbc|java-bigquerystorage|java-bigtable|java-cloud-bom|java-datastore|java-firestore|java-logging|java-logging-logback|java-pubsub|java-shared-config|java-spanner|java-storage)/**/*.java'
+            - '!(google-auth-library-java|grpc-gcp-java|java-bigquery|java-bigquery-jdbc|java-bigquerystorage|java-bigtable|java-cloud-bom|java-datastore|java-firestore|java-logging|java-logging-logback|java-pubsub|java-shared-config|java-spanner|java-storage)/**/pom.xml'
             - 'pom.xml'
           ci:
             - '.github/workflows/ci.yaml'

.github/workflows/java-cloud-bom-bom-content-test.yaml

@@ -0,0 +1,73 @@
+on:
+  push:
+    branches:
+    - main
+  pull_request:
+name: java-cloud-bom ci
+env:
+  BUILD_SUBDIR: java-cloud-bom
+jobs:
+  filter:
+    runs-on: ubuntu-latest
+    outputs:
+      library: ${{ steps.filter.outputs.library }}
+    steps:
+    - uses: actions/checkout@v4
+    - uses: dorny/paths-filter@v3
+      id: filter
+      with:
+        filters: |
+          library:
+            - 'java-cloud-bom/**'
+            - 'sdk-platform-java/**'
+            - 'google-auth-library-java/**'
+  bom-content-test:
+    needs: filter
+    if: ${{ needs.filter.outputs.library == 'true' && github.repository_owner == 'googleapis' }}
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-java@v5
+      with:
+        distribution: temurin
+        java-version: 11
+        cache: maven
+    - run: java -version
+    - name: Pre-install all BOM modules to populate local cache
+      run: bash java-cloud-bom/tests/pre-install.sh
+      shell: bash
+    - name: Install BOMs
+      run: |
+        mvn -B -V -ntp install -f java-cloud-bom/pom.xml -DskipTests
+    - name: Ensure the members of the Libraries BOM exist in Maven Central
+      uses: ./java-cloud-bom/tests/validate-bom
+      with:
+        bom-path: java-cloud-bom/libraries-bom/pom.xml
+    - name: Ensure the BOM has valid content (at releases)
+      if: github.head_ref == 'release-please--branches--main'
+      run: |
+        mvn -B -V -ntp verify -Dtest="BomContentTest#testLibrariesBom"
+      working-directory: java-cloud-bom/tests
+
+  bom-assertion-test:
+    needs: filter
+    if: ${{ needs.filter.outputs.library == 'true' && github.repository_owner == 'googleapis' }}
+    name: BomContentAssertionsTest (Test for assertion logic in BomContentTest)
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-java@v5
+      with:
+        distribution: zulu
+        java-version: 11
+    - run: java -version
+    - name: Pre-install all BOM modules to populate local cache
+      run: bash java-cloud-bom/tests/pre-install.sh
+      shell: bash
+    - name: Install BOMs
+      run: |
+        mvn -B -V -ntp install -f java-cloud-bom/pom.xml -DskipTests
+    - run: |
+        mvn -B -V -ntp verify -Dtest="BomContentAssertionsTest"
+      working-directory: java-cloud-bom/tests
+

.github/workflows/java-cloud-bom-ci-release-note-generation.yaml

@@ -0,0 +1,69 @@
+on:
+  pull_request:
+    paths:
+      - 'release-note-generation/**'
+name: java-cloud-bom release-note-generation-test
+env:
+  BUILD_SUBDIR: java-cloud-bom
+jobs:
+  filter:
+    runs-on: ubuntu-latest
+    outputs:
+      library: ${{ steps.filter.outputs.library }}
+    steps:
+    - uses: actions/checkout@v4
+    - uses: dorny/paths-filter@v3
+      id: filter
+      with:
+        filters: |
+          library:
+            - 'java-cloud-bom/**'
+  test:
+    needs: filter
+    if: ${{ needs.filter.outputs.library == 'true' }}
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-java@v5
+      with:
+        distribution: temurin
+        java-version: 11
+        cache: maven
+    - run: java -version
+    - name: Run test in release-note-generation
+      shell: bash
+      run: |
+        mvn -B -ntp verify -f java-cloud-bom/release-note-generation/pom.xml
+      working-directory: java-cloud-bom/release-note-generation
+      env:
+        GH_TOKEN: ${{ github.token }}
+
+  dry-run:
+    needs: filter
+    if: ${{ needs.filter.outputs.library == 'true' }}
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-java@v5
+      with:
+        distribution: temurin
+        java-version: 11
+        cache: maven
+    - run: java -version
+    - name: Dry-run release-note-generation
+      shell: bash
+      run: |
+        mvn -B -ntp compile -f java-cloud-bom/release-note-generation/pom.xml
+        # This generates release_note.md file
+        mvn -B -ntp exec:java -f java-cloud-bom/release-note-generation/pom.xml \
+            -Dlibraries-bom.version="26.2.0" \
+            -Dgoogle-cloud-java.version="1.1.0"
+      working-directory: java-cloud-bom/release-note-generation
+      env:
+        GH_TOKEN: ${{ github.token }}
+    - name: Show generated release note
+      shell: bash
+      run: |
+        # This fails if the file does not exist
+        cat release_note.md
+      working-directory: java-cloud-bom/release-note-generation

.github/workflows/java-cloud-bom-ci-validate-bom.yaml

@@ -0,0 +1,64 @@
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# Github action job to test core java library features on
+# downstream client libraries before they are released.
+on:
+  push:
+    branches:
+    - main
+  pull_request:
+name: java-cloud-bom test for tests/validate-bom logic
+env:
+  BUILD_SUBDIR: java-cloud-bom
+jobs:
+  filter:
+    runs-on: ubuntu-latest
+    outputs:
+      library: ${{ steps.filter.outputs.library }}
+    steps:
+    - uses: actions/checkout@v4
+    - uses: dorny/paths-filter@v3
+      id: filter
+      with:
+        filters: |
+          library:
+            - 'java-cloud-bom/**'
+            - 'sdk-platform-java/**'
+            - 'google-auth-library-java/**'
+  test-invalid-bom:
+    needs: filter
+    if: ${{ needs.filter.outputs.library == 'true' }}
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Fetch the bad protobuf-bom version 3.22.1
+      shell: bash
+      # 3.22.1 had a issue in their pom.xml
+      # https://github.com/protocolbuffers/protobuf/issues/12170
+      run: |
+        mkdir -p bad-protobuf-bom
+        curl https://repo1.maven.org/maven2/com/google/protobuf/protobuf-bom/3.22.1/protobuf-bom-3.22.1.pom \
+            --output bad-protobuf-bom/pom.xml
+    - name: Check the bad BOM
+      uses: ./java-cloud-bom/tests/validate-bom
+      id: validate-bom
+      with:
+        bom-path: bad-protobuf-bom/pom.xml
+      continue-on-error: true
+    - name: Ensure the validate-bom invalidated the bad BOM
+      shell: bash
+      if: steps.validate-bom.outcome != 'failure'
+      run: |
+        echo "The validate-bom check should have invalidated the bad BOM"
+        exit 1