technical enhancement + logo #1008

starlightretailceo · 2024-07-17T06:53:46Z

This pull request primarily focuses on the addition of new workflows, updates to dependencies, and the addition of new configuration files. The most important changes include the creation of new workflows for Azure Web App deployment and open source static analysis tools, updates to dependencies in package.json and requirements-dev.txt, and the addition of a new certificate request and publish settings.

Addition of new workflows:

.github/workflows/main_starlight-chat-assistant(starlightretail).yml: A new workflow has been added for building and deploying a Python app to Azure Web App. This workflow runs on push to the main branch and on workflow dispatch.
.github/workflows/ossar.yml: A new workflow has been added for integrating a collection of open source static analysis tools with GitHub code scanning. This workflow runs on push and pull requests to the main branch, and on a weekly schedule.

Updates to dependencies:

frontend/package.json: The version of vite has been updated from 4.1.5 to 4.5.3.
requirements-dev.txt: Multiple dependencies have been updated, including requests, tqdm, langchain, and urllib3.

Addition of new configuration files:

.mergify.yml: A new configuration file has been added for Mergify, which will request a review from a specific team when checks are green and the pull request is not closed.
Starlight-Chat-Assistant.PublishSettings: A new publish settings file has been added for the Starlight Chat Assistant.

Description

Contribution Checklist

I have built and tested the code locally and in a deployed app
For frontend changes, I have pulled the latest code from main, built the frontend, and committed all static files.
This is a change for all users of this app. No code or asset is specific to my use case or my organization.
I didn't break any existing functionality 😄

Signed-off-by: starlightretaiil <[email protected]>

Signed-off-by: Mammon Baloch <[email protected]>

Bumps the pip group with 7 updates: | Package | From | To | | --- | --- | --- | | [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.15.0` | `1.16.1` | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.2` | `3.9.4` | | [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `22.0.0` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.2` | | [tqdm](https://github.com/tqdm/tqdm) | `4.66.1` | `4.66.3` | | [langchain](https://github.com/langchain-ai/langchain) | `0.0.340` | `0.2.3` | | [urllib3](https://github.com/urllib3/urllib3) | `2.1.0` | `2.2.2` | Updates `azure-identity` from 1.15.0 to 1.16.1 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md) - [Commits](Azure/azure-sdk-for-python@azure-identity_1.15.0...azure-identity_1.16.1) Updates `aiohttp` from 3.9.2 to 3.9.4 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.9.2...v3.9.4) Updates `gunicorn` from 20.1.0 to 22.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@20.1.0...22.0.0) Updates `requests` from 2.31.0 to 2.32.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.32.2) Updates `tqdm` from 4.66.1 to 4.66.3 - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.66.1...v4.66.3) Updates `langchain` from 0.0.340 to 0.2.3 - [Release notes](https://github.com/langchain-ai/langchain/releases) - [Commits](langchain-ai/langchain@v0.0.340...langchain==0.2.3) Updates `urllib3` from 2.1.0 to 2.2.2 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.1.0...2.2.2) --- updated-dependencies: - dependency-name: azure-identity dependency-type: direct:production dependency-group: pip - dependency-name: aiohttp dependency-type: direct:production dependency-group: pip - dependency-name: gunicorn dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-type: direct:development dependency-group: pip - dependency-name: tqdm dependency-type: direct:development dependency-group: pip - dependency-name: langchain dependency-type: direct:development dependency-group: pip - dependency-name: urllib3 dependency-type: direct:development dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [openai](https://github.com/openai/openai-python) from 1.6.1 to 1.35.3. - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v1.6.1...v1.35.3) --- updated-dependencies: - dependency-name: openai dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps the npm_and_yarn group with 2 updates in the /frontend directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [braces](https://github.com/micromatch/braces). Updates `vite` from 4.1.5 to 4.5.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v4.5.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v4.5.3/packages/vite) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: vite dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

…rontend/npm_and_yarn-efa0627907 Bump the npm_and_yarn group across 1 directory with 2 updates

…6e6a Bump the pip group with 7 updates

Bump openai from 1.6.1 to 1.35.3

Signed-off-by: Mammon Baloch <[email protected]>

Signed-off-by: Mammon Baloch <null>

…o/config-update ci(Mergify): configuration update

Signed-off-by: Mammon Baloch <[email protected]>

starlightretailceo · 2024-07-17T06:55:43Z

This pull request includes a series of changes aimed at enhancing the project's GitHub workflows, updating dependencies, and adding new configuration files. The most significant changes include the addition of two new GitHub workflows, updates to the package.json and requirements-dev.txt files, and the creation of new configuration files.

GitHub workflows:

.github/workflows/main_starlight-chat-assistant(starlightretail).yml: Added a new GitHub workflow for building and deploying a Python app to Azure Web App.
.github/workflows/ossar.yml: Added a new GitHub workflow for integrating a collection of open source static analysis tools with GitHub code scanning.

Dependency updates:

frontend/package.json: Updated the version of vite from 4.1.5 to 4.5.3.
requirements-dev.txt: Updated the versions of requests, tqdm, langchain, and urllib3.

Configuration files:

.mergify.yml: Added a new configuration file for Mergify, a tool that automates the merging process of pull requests.
Starlight-Chat-Assistant.PublishSettings: Added a new configuration file for publishing settings of the Starlight Chat Assistant.
primarycert.csr: Added a new certificate signing request file.

Signed-off-by: Mammon Baloch <[email protected]>

starlightretailceo · 2024-07-24T14:51:21Z

This pull request includes changes to improve the security and deployment process of the codebase. The most important changes include adding GitHub Actions workflows for CodeQL, OSSAR, and Azure Web App deployment, updating the vite and langchain packages in package.json and requirements-dev.txt respectively, and adding a certificate signing request file.

GitHub Actions workflows:

.github/workflows/codeql.yml: Added a new workflow for CodeQL to perform static analysis of the codebase and identify security vulnerabilities.
.github/workflows/ossar.yml: Added a new workflow for OSSAR, a collection of open source static analysis tools, to perform security scanning of the codebase.
.github/workflows/main_starlight-chat-assistant(starlightretail).yml: Added a new workflow to build and deploy the Python app to Azure Web App.

Package updates:

frontend/package.json: Updated the vite package from version 4.1.5 to 4.5.3.
requirements-dev.txt: Updated the langchain package from version 0.0.340 to 0.2.3, and the urllib3 package from version 2.1.0 to 2.2.2.

Other changes:

primarycert.csr: Added a new certificate signing request file.
.mergify.yml: Added a new rule to request review from a specific team when checks are green.
Starlight-Chat-Assistant.PublishSettings: Added new publish settings for the Starlight Chat Assistant.

starlightretailceo · 2024-08-24T00:45:44Z

This pull request includes several workflow configuration updates and dependency version upgrades. The most important changes include the addition of new GitHub Actions workflows for CodeQL analysis, OSSAR scanning, and Azure Web App deployment, as well as updates to the requirements-dev.txt and frontend/package.json dependencies.

Workflow Automation Enhancements:

CodeQL Analysis: Added a new workflow for CodeQL analysis to scan for vulnerabilities and errors in the codebase. (.github/workflows/codeql.yml)
OSSAR Scanning: Introduced a workflow for integrating open source static analysis tools with GitHub code scanning. (.github/workflows/ossar.yml)
Azure Deployment: Added workflows for building and deploying the Python app to Azure Web App for different environments. (.github/workflows/main_starlight-chat-assistant(starlightretail).yml, .github/workflows/main_starlight-chat-assistant.yml) [1] [2]

Dependency Updates:

Frontend: Updated the vite dependency in the package.json file. (frontend/package.json)
Backend: Updated several dependencies in the requirements-dev.txt file. (requirements-dev.txt)

starlightretailceo · 2024-09-08T13:56:57Z

This pull request includes several updates to GitHub Actions workflows, dependency upgrades, and configuration changes. The main updates involve setting up CodeQL and OSSAR workflows, adding deployment workflows for a Python app, and updating dependencies in the requirements-dev.txt and package.json files.

GitHub Actions Workflows:

Added a CodeQL workflow to analyze the codebase for security vulnerabilities and errors. This includes setting up a matrix for supported languages and initializing CodeQL tools. (.github/workflows/codeql.yml)
Introduced an OSSAR workflow to integrate open source static analysis tools with GitHub code scanning. This includes setting up permissions and running OSSAR on windows-latest. (.github/workflows/ossar.yml)
Created deployment workflows for the Starlight-Chat-Assistant Python app, targeting both starlightretail and Production environments. These workflows include steps to set up Python, create a virtual environment, install dependencies, and deploy to Azure Web App. (.github/workflows/main_starlight-chat-assistant(starlightretail).yml, .github/workflows/main_starlight-chat-assistant.yml) [1] [2]

Dependency Updates:

Upgraded vite in the frontend/package.json file from version 4.1.5 to 4.5.3. (frontend/package.json)
Updated several dependencies in the requirements-dev.txt file, including requests, tqdm, langchain, and urllib3. (requirements-dev.txt)

Configuration Changes:

Added a Mergify configuration to request reviews from a specific team when checks are green and no reviews have been requested. (.mergify.yml)

These changes aim to enhance the security, deployment, and dependency management of the project.

starlightretailceo and others added 26 commits May 21, 2024 12:54

Add files via upload

c10becc

Signed-off-by: starlightretaiil <[email protected]>

Add files via upload

06adf2c

Signed-off-by: starlightretaiil <[email protected]>

Merge branch 'microsoft:main' into main

7fe54d6

Merge branch 'microsoft:main' into main

d57ffb4

Add files via upload

68963ab

Signed-off-by: Mammon Baloch <[email protected]>

Update Contoso-ff70ad88.svg

90ea20f

Signed-off-by: Mammon Baloch <[email protected]>

Merge branch 'microsoft:main' into main

bf2df47

Delete static/assets/Contoso-ff70ad88.svg

b04b9be

Signed-off-by: Mammon Baloch <[email protected]>

Merge branch 'microsoft:main' into main

97081ff

Create ossar.yml

2fdd164

Signed-off-by: Mammon Baloch <[email protected]>

Merge branch 'microsoft:main' into main

eb3ed10

Merge branch 'microsoft:main' into main

60d37f8

Add or update the Azure App Service build and deployment workflow config

cc000ec

Merge pull request #13 from STARLIGHTRETAIL/dependabot/npm_and_yarn/f…

72b32bd

…rontend/npm_and_yarn-efa0627907 Bump the npm_and_yarn group across 1 directory with 2 updates

Merge pull request #11 from STARLIGHTRETAIL/dependabot/pip/pip-23efc6…

2be7fef

…6e6a Bump the pip group with 7 updates

Merge pull request #12 from STARLIGHTRETAIL/dependabot/pip/openai-1.35.3

c347ff6

Bump openai from 1.6.1 to 1.35.3

Delete static/assets/StarlightRetailInc-ff70ad88.svg

3c3d6e2

Signed-off-by: Mammon Baloch <[email protected]>

Update Contoso-ff70ad88.svg

6201ade

Signed-off-by: Mammon Baloch <[email protected]>

Delete static/assets/squareLogo.png

24274ba

Signed-off-by: Mammon Baloch <[email protected]>

ci(Mergify): configuration update

3440642

Signed-off-by: Mammon Baloch <null>

Merge pull request #16 from STARLIGHTRETAIL/mergify/starlightretailce…

bd6df41

…o/config-update ci(Mergify): configuration update

Merge branch 'microsoft:main' into main

7c32f0f

Update Contoso.svg

e877fb9

Signed-off-by: Mammon Baloch <[email protected]>

starlightretailceo closed this Jul 17, 2024

starlightretailceo changed the title ~~technical and customizing update~~ technical enhancement + logo Jul 17, 2024

starlightretailceo reopened this Jul 17, 2024

starlightretailceo added 2 commits July 17, 2024 13:03

Create codeql.yml

b533661

Signed-off-by: Mammon Baloch <[email protected]>

Merge branch 'main' into main

3d5366b

starlightretailceo added 6 commits July 27, 2024 21:30

Add or update the Azure App Service build and deployment workflow config

032985f

Merge branch 'main' into main

1f6f9e9

Merge branch 'main' into main

b576129

Merge branch 'microsoft:main' into main

675cfe3

Merge branch 'microsoft:main' into main

e8db8fb

Merge branch 'main' into main

0645fe2

starlightretailceo marked this pull request as draft August 24, 2024 10:17

starlightretailceo marked this pull request as ready for review August 24, 2024 10:17

starlightretailceo added 3 commits September 2, 2024 15:20

Merge branch 'microsoft:main' into main

bbe24b6

Add or update the Azure App Service build and deployment workflow config

2e71fa3

Merge branch 'microsoft:main' into main

552e82b

starlightretailceo added 6 commits September 16, 2024 21:56

Merge branch 'microsoft:main' into main

55cc6df

Merge branch 'microsoft:main' into main

be0702d

Merge branch 'microsoft:main' into main

6a1e53d

Merge branch 'main' into main

5facce9

Merge branch 'main' into main

7a2245c

Add or update the Azure App Service build and deployment workflow config

3608096

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

technical enhancement + logo #1008

technical enhancement + logo #1008

starlightretailceo commented Jul 17, 2024 •

edited

Loading

starlightretailceo commented Jul 17, 2024

starlightretailceo commented Jul 24, 2024

starlightretailceo commented Aug 24, 2024

starlightretailceo commented Sep 8, 2024

technical enhancement + logo #1008

Are you sure you want to change the base?

technical enhancement + logo #1008

Conversation

starlightretailceo commented Jul 17, 2024 • edited Loading

Description

Contribution Checklist

starlightretailceo commented Jul 17, 2024

starlightretailceo commented Jul 24, 2024

starlightretailceo commented Aug 24, 2024

Workflow Automation Enhancements:

Dependency Updates:

starlightretailceo commented Sep 8, 2024

GitHub Actions Workflows:

Dependency Updates:

Configuration Changes:

starlightretailceo commented Jul 17, 2024 •

edited

Loading