chore: upgrade terraform 1.12.0 and github provider 6.6.0 (#194)

* chore: upgrade terraform 1.12.0 and github provider 6.6.0

* feat: add support for efficient labels handling (#195)

Author: galargh

.github/workflows/apply.yml

@@ -69,7 +69,7 @@ jobs:
       - name: Setup terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: 1.2.9
+          terraform_version: 1.12.0
           terraform_wrapper: false
       - name: Initialize terraform
         run: terraform init

.github/workflows/clean.yml

@@ -73,7 +73,7 @@ jobs:
       - name: Setup terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: 1.2.9
+          terraform_version: 1.12.0
           terraform_wrapper: false
       - name: Initialize terraform
         run: terraform init -upgrade

.github/workflows/fix.yml

@@ -95,7 +95,7 @@ jobs:
       - name: Setup terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: 1.2.9
+          terraform_version: 1.12.0
           terraform_wrapper: false
       - name: Initialize terraform
         run: terraform init

.github/workflows/plan.yml

@@ -82,7 +82,7 @@ jobs:
       - name: Setup terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: 1.2.9
+          terraform_version: 1.12.0
           terraform_wrapper: false
       - name: Initialize terraform
         run: terraform init
@@ -124,7 +124,7 @@ jobs:
       - name: Setup terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: 1.2.9
+          terraform_version: 1.12.0
           terraform_wrapper: false
       - name: Initialize terraform
         run: terraform init

.github/workflows/sync.yml

@@ -67,7 +67,7 @@ jobs:
       - name: Setup terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
-          terraform_version: 1.2.9
+          terraform_version: 1.12.0
           terraform_wrapper: false
       - name: Initialize terraform
         run: terraform init -upgrade

CHANGELOG.md

@@ -23,6 +23,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - new args for repositories and branch protection rules
 
 ### Changed
+- **BREAKING**: added support for efficient labels handling via the `github_issue_labels` resource (please clean `github_issue_label.this.*` from the terraform state and update `locals_override.tf` and `resources_override.tf` before syncing)
+- **BREAKING**: upgraded to terraform 1.12.0 and github provider 6.6.0 (please clean `github_branch_protection.this.*` from the terraform state and update `resources_override.tf` before syncing the upgrade)
 - **BREAKING**: turned scripts into an ESM project (please ensure you remove the following files during the upgrade: `scripts/.eslintignore`, `scripts/.eslintrc.json`, `scripts/jest.config.js`, `jest.d.ts`, `jest.setup.ts`; please update your imports in the `scripts/src/actions/fix-yaml-config.ts` file to include the `.js` extension)
 - **BREAKING**: Updated the signatures of all the shared actions; now the runAction function will persist the changes to disk while action functions will operate on the in-memory state (please update your imports in the `scripts/src/actions/fix-yaml-config.ts` file accordingly)
 - Synchronization script: to use GitHub API directly instead of relying on TF GH Provider's Data Sources

docs/ABOUT.md

@@ -47,7 +47,7 @@ Running the `Sync` GitHub Action workflows refreshes the underlying terraform st
 - [github_team_repository](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team_repository)
 - [github_team_membership](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team_membership)
 - [github_repository_file](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository_file)
-- [github_issue_label](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/issue_label)
+- [github_issue_labels](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/issue_labels)
 
 # Config Fix Rules
 

docs/EXAMPLE.yml

@@ -32,7 +32,6 @@ repositories: # This group defines repositories (https://registry.terraform.io/p
         require_conversation_resolution: false
         require_signed_commits: false
         required_linear_history: false
-        push_restrictions: [] # This field accepts node IDs (TODO: make this field accept human friendly names too)
         required_pull_request_reviews:
           dismiss_stale_reviews: false
           dismissal_restrictions: [] # This field accepts node IDs (TODO: make this field accept human friendly names too)

github/.schema.json

@@ -156,6 +156,13 @@
               "pages": {
                 "additionalProperties": false,
                 "properties": {
+                  "build_type": {
+                    "enum": [
+                      "legacy",
+                      "workflow"
+                    ],
+                    "type": "string"
+                  },
                   "cname": {
                     "type": "string"
                   },
@@ -225,6 +232,9 @@
               "template": {
                 "additionalProperties": false,
                 "properties": {
+                  "include_all_branches": {
+                    "type": "boolean"
+                  },
                   "owner": {
                     "type": "string"
                   },
@@ -245,6 +255,9 @@
               },
               "vulnerability_alerts": {
                 "type": "boolean"
+              },
+              "web_commit_signoff_required": {
+                "type": "boolean"
               }
             },
             "type": "object"
@@ -309,21 +322,18 @@
         "allows_force_pushes": {
           "type": "boolean"
         },
-        "blocks_creations": {
-          "type": "boolean"
-        },
         "enforce_admins": {
           "type": "boolean"
         },
-        "lock_branch": {
-          "type": "boolean"
-        },
-        "push_restrictions": {
+        "force_push_bypassers": {
           "items": {
             "type": "string"
           },
           "type": "array"
         },
+        "lock_branch": {
+          "type": "boolean"
+        },
         "require_conversation_resolution": {
           "type": "boolean"
         },
@@ -354,6 +364,9 @@
             "require_code_owner_reviews": {
               "type": "boolean"
             },
+            "require_last_push_approval": {
+              "type": "boolean"
+            },
             "required_approving_review_count": {
               "type": "number"
             },
@@ -377,6 +390,21 @@
             }
           },
           "type": "object"
+        },
+        "restrict_pushes": {
+          "additionalProperties": false,
+          "properties": {
+            "blocks_creations": {
+              "type": "boolean"
+            },
+            "push_allowances": {
+              "items": {
+                "type": "string"
+              },
+              "type": "array"
+            }
+          },
+          "type": "object"
         }
       },
       "type": "object"

scripts/__tests__/__resources__/terraform/locals_override.tf

@@ -8,7 +8,7 @@ locals {
     "github_team",
     "github_branch_protection",
     "github_repository_file",
-    "github_issue_label"
+    "github_issue_labels"
   ]
   ignore = {
     "repositories" = ["ignored"]