chore: merge development branch to main

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @mParticle/sdk-team

.github/dependabot.yml

@@ -1,7 +1,7 @@
 version: 2
 updates:
   - package-ecosystem: gradle
-    directory: "/core-sdk-samples/higgs-shop-sample-app/"
+    directory: "/"
     schedule:
       interval: daily
       time: "08:00"
@@ -10,4 +10,13 @@ updates:
     labels: ['dependabot']
     open-pull-requests-limit: 10
     commit-message:
-      prefix: "chore"
+      prefix: "chore"
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 4
+    labels:
+      - dependabot
+    commit-message:
+      prefix: "chore"

.github/workflows/pull-request-app-checks.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout Sample Apps"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
       #      - name: "Create Path Triggers"
@@ -35,27 +35,34 @@ jobs:
   instrumented-tests:
     name: "Instrumented Tests"
     timeout-minutes: 30
-    runs-on: macos-latest
+    runs-on: ubuntu-latest
     needs: confirm-folder-changes
     steps:
       - name: "Checkout Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
-      - name: "Install JDK 11"
-        uses: actions/setup-java@v3
+      - name: "Install JDK"
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
-          java-version: "11"
+          java-version: 17
           cache: "gradle"
+      - name: Enable KVM group perms
+        run: |
+          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
+          sudo udevadm control --reload-rules
+          sudo udevadm trigger --name-match=kvm
       - name: "Run Instrumented Tests"
-        uses: reactivecircus/android-emulator-runner@v2.27.0
+        uses: reactivecircus/android-emulator-runner@v2
         with:
           working-directory: ${{ inputs.app_relative_path }}
           api-level: 29
+          arch: x86_64
+          profile: Nexus 6
           script: ./gradlew connectedCheck
       - name: "Archive Instrumented Tests Results"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: ${{ always() }}
         with:
           name: "instrumented-tests-results"
@@ -68,20 +75,20 @@ jobs:
     needs: confirm-folder-changes
     steps:
       - name: "Checkout Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
-      - name: "Install JDK 11"
-        uses: actions/setup-java@v3
+      - name: "Install JDK"
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
-          java-version: "11"
+          java-version: 17
           cache: "gradle"
       - name: "Run Unit Tests"
         working-directory: ${{ inputs.app_relative_path }}
         run: ./gradlew test
       - name: "Android Unit Tests Report"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: ${{ always() }}
         with:
           name: "unit-tests-results"
@@ -90,24 +97,24 @@ jobs:
   lint-checks:
     name: "Lint Checks"
     timeout-minutes: 15
-    runs-on: macos-latest
+    runs-on: ubuntu-latest
     needs: confirm-folder-changes
     steps:
       - name: "Checkout Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
-      - name: "Install JDK 11"
-        uses: actions/setup-java@v3
+      - name: Install JDK
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
-          java-version: "11"
+          java-version: 17
           cache: "gradle"
       - name: "Run Android Core SDK Lint"
         working-directory: ${{ inputs.app_relative_path }}
         run: ./gradlew lint
       - name: "Archive Lint Test Results"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: ${{ always() }}
         with:
           name: "lint-results"
@@ -116,24 +123,24 @@ jobs:
   kotlin-lint-checks:
     name: "Kotlin Lint Checks"
     timeout-minutes: 15
-    runs-on: macos-latest
+    runs-on: ubuntu-latest
     needs: confirm-folder-changes
     steps:
       - name: "Checkout Branch"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
-      - name: "Install JDK 11"
-        uses: actions/setup-java@v3
+      - name: Install JDK
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
-          java-version: "11"
+          java-version: 17
           cache: "gradle"
       - name: "Run Android Core SDK Kotlin Lint"
         working-directory: ${{ inputs.app_relative_path }}
         run: ./gradlew ktlintCheck
       - name: "Archive Lint Test Results"
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: ${{ always() }}
         with:
           name: "kotlin-lint-results"

.github/workflows/pull-request.yml

@@ -2,15 +2,36 @@ name: "Build and Test"
 
 on: [ push, workflow_dispatch, pull_request ]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+  id-token: write
+
 jobs:
 
   higgs-shop-sample-app:
     name: "Check Higgs Shop Sample App"
-    uses: mParticle/mparticle-android-sample-apps/.github/workflows/pull-request-app-checks.yml@main
+    uses: ./.github/workflows/pull-request-app-checks.yml
     with:
       app_relative_path: "core-sdk-samples/higgs-shop-sample-app"
 
   automerge-dependabot:
     name: "Save PR Number for Dependabot Automerge"
     needs: [ higgs-shop-sample-app ]
     uses: mParticle/mparticle-workflows/.github/workflows/dependabot-save-pr-number.yml@main
+
+  pr-notify:
+    if: >
+      github.event_name == 'pull_request' &&
+      github.event.pull_request.draft == false
+    needs:
+      - higgs-shop-sample-app
+    name: Notify GChat
+    uses: ROKT/rokt-workflows/.github/workflows/oss_pr_opened_notification.yml@main
+    secrets:
+      gchat_webhook: ${{ secrets.GCHAT_PRS_WEBHOOK }}

.gitignore

@@ -23,3 +23,5 @@ hs_err_pid*
 
 .idea
 .gradle
+
+local.properties

SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+To avoid abuse by malicious actors please do not open GitHub issues or pull requests for any security related issue you may have spotted.
+
+The safest way to report any vulnerability or concern you may have is via our [dedicated submission form](https://www.rokt.com/vulnerability-disclosure/).
+
+For further information please refer to the [Rokt Vulnerability Disclosure Policy](https://www.rokt.com/vulnerability-disclosure/).