Skip to content

Add CI and automated GitHub Releases#1

Open
Geph wants to merge 8 commits into
mainfrom
animal-ai
Open

Add CI and automated GitHub Releases#1
Geph wants to merge 8 commits into
mainfrom
animal-ai

Conversation

@Geph

@Geph Geph commented Jun 5, 2026

Copy link
Copy Markdown
Member

Summary

  • Adds Maven CI on PRs to main (and pushes to animal-ai / llm-agent)
  • Runs dependency review, TruffleHog, and CodeQL on PRs
  • On merge to main, builds the plugin JAR, publishes a GitHub Release, and opens an automated PR to bump the patch version in pom.xml
  • Updates the Protect Main ruleset required checks from npm/vitest names to the Maven CI job names

Release flow

  1. Feature PR merges to main (e.g. at 3.3.10)
  2. Release workflow publishes WHIMC-OverworldAgent-3.3.11.jar as v3.3.11
  3. Bot opens a small PR bumping pom.xml to 3.3.11 (needs one approval like any other PR)

No repository secrets are used — only the built-in GITHUB_TOKEN.

Test plan

  • Confirm CI jobs pass on this PR
  • Merge to main and verify a Release is created
  • Approve/merge the automated version-bump PR

Made with Cursor

Geph and others added 2 commits June 5, 2026 16:00
Build and security-check pull requests to main, publish a Maven-built
JAR on merge, and open a follow-up PR to bump the patch version in pom.xml.

Co-authored-by: Cursor <cursoragent@cursor.com>
Run Maven build before CodeQL analysis and replace GitHub dependency
review with a Maven dependency audit job.

Co-authored-by: Cursor <cursoragent@cursor.com>
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Geph and others added 6 commits June 5, 2026 16:17
Replace dependency:go-offline (which tried to fetch local system
dependencies from Maven repos) with dependency:tree and analyze-only.
Clarify release workflow is GitHub Releases only, not server deploy.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…rlds.

Rename build to WHIMC-QRF-Agent, remove tagging, merge builder into the main dialogue with go-back navigation, fix player-shaped agents to walk-follow, add catch-up teleport beside the owner when far behind, and expand Journey guidance with name_id resolution, linked-world clusters, and poi-* region discovery.

Co-authored-by: Cursor <cursoragent@cursor.com>
v3.3.11 tag already exists from a prior release run; bumping pom avoids duplicate-tag failures on deploy.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants