feat: Implement Trunk tool (#604)

Author: Mansi-mParticle

.editorconfig

@@ -0,0 +1,36 @@
+# Top-most EditorConfig file
+root = true
+
+[*]
+indent_style = space
+indent_size = 4
+trim_trailing_whitespace = true
+insert_final_newline = true
+# don't set end_of_line; let correct git setting checkout the appropriate one for OS
+charset = utf-8
+
+[*.{json,yml,yaml,html,tf}]
+indent_size = 2
+ij_json_array_wrapping = normal
+
+[*.{kt,kts}]
+ktlint_code_style = intellij_idea
+max_line_length = 150
+ij_kotlin_allow_trailing_comma = true
+ij_kotlin_allow_trailing_comma_on_call_site = true
+
+[tooling/**/*.kt]
+max_line_length = 200
+
+# IntelliJ/Android Studio specific (ktlint respects these too)
+ij_kotlin_continuation_indent_size = 4
+ij_kotlin_align_multiline_parameters = false
+ij_kotlin_align_multiline_parameters_in_calls = false
+ij_kotlin_call_parameters_new_line_after_left_paren = true
+ij_kotlin_call_parameters_right_paren_on_new_line = true
+
+[**/test/**/*.kt]
+max_line_length = off
+
+[**/androidTest/**/*.kt]
+max_line_length = off

.github/workflows/cross-platform-tests.yml

@@ -1,6 +1,9 @@
 name: "Cross Platform Tests"
-on:
-  pull_request
+on: pull_request
+
+permissions:
+  contents: read
+  pull-requests: read
 jobs:
   cross-platform-tests:
     timeout-minutes: 30
@@ -10,14 +13,14 @@ jobs:
         uses: actions/checkout@v5
         with:
           repository: mParticle/crossplatform-sdk-tests
-          
+
       - name: "Checkout Android SDK Branch"
         uses: actions/checkout@v5
         with:
           repository: ${{github.event.pull_request.head.repo.full_name}}
           ref: ${{github.head_ref}}
           path: .sdks/android
-          
+
       - name: Gradle cache
         uses: gradle/gradle-build-action@842c587ad8aa4c68eeba24c396e15af4c2e9f30a #v2.9.0
 
@@ -45,7 +48,7 @@ jobs:
           sudo udevadm control --reload-rules
           sudo udevadm trigger --name-match=kvm
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"

.github/workflows/daily.yml

@@ -1,5 +1,6 @@
 name: "Daily Cron"
 
+# checkov:skip=CKV_GHA_7: This workflow requires dryRun parameter for release control
 on:
   # Allow workflow to be manually run from the GitHub UI
   workflow_dispatch:
@@ -18,8 +19,12 @@ on:
         default: main
         type: string
 
-jobs:
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
 
+jobs:
   confirm-public-repo:
     name: "Confirm android daily cron is run from public origin repo"
     runs-on: ubuntu-latest
@@ -125,6 +130,67 @@ jobs:
 #        with:
 #          name: "instrumented-orchestrator-tests-results"
 #          path: android-core/build/orchestrator/**
+  #  instrumented-tests:
+  #    name: "Instrumented Tests"
+  #    timeout-minutes: 30
+  #    runs-on: ubuntu-latest
+  #    needs: create-regression-branch
+  #    steps:
+  #      - name: "Checkout future release branch"
+  #        uses: actions/checkout@v4
+  #        with:
+  #          repository: mparticle/mparticle-android-sdk
+  #          ref: regression/${{ github.run_number }}
+  #      - name: "Install JDK 17"
+  #        uses: actions/setup-java@v4
+  #        with:
+  #          distribution: "zulu"
+  #          java-version: "17"
+  #          cache: "gradle"
+  #      - name: "Run Instrumented Tests"
+  #        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+  #        with:
+  #          api-level: 28
+  #          #script: ./gradlew :android-core:cAT :android-kit-base:cAT --stacktrace
+  #          script: |
+  #            #Disable benchmark tests as they do not work on emulators
+  #            adb uninstall com.mparticle.kits.test; ./gradlew connectedCheck --stacktrace
+  #            ./gradlew :android-core:cAT :android-kit-base:cAT  -Pandroid.testInstrumentationRunnerArguments.androidx.benchmark.enabledRules=none
+  #      - name: "Archive Instrumented Test Results"
+  #        uses: actions/upload-artifact@v4
+  #        if: always()
+  #        with:
+  #          name: instrumented-test-results
+  #          path: android-core/build/reports/androidTests/connected/**
+  #
+  #  instrumented-orchestrator-tests:
+  #    name: "Instrumented Orchestrator Tests"
+  #    timeout-minutes: 30
+  #    runs-on: ubuntu-latest
+  #    needs: create-regression-branch
+  #    steps:
+  #      - name: "Checkout Branch"
+  #        uses: actions/checkout@v4
+  #        with:
+  #          repository: mparticle/mparticle-android-sdk
+  #          ref: regression/${{ github.run_number }}
+  #      - name: "Install JDK 17"
+  #        uses: actions/setup-java@v4
+  #        with:
+  #          distribution: "zulu"
+  #          java-version: "17"
+  #          cache: "gradle"
+  #      - name: "Run Instrumented Orchestrator Tests"
+  #        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+  #        with:
+  #          api-level: 28
+  #          script: ./gradlew -Porchestrator=true :android-core:cAT --stacktrace
+  #      - name: "Archive Instrumented Orchestrator Tests Results"
+  #        uses: actions/upload-artifact@v4
+  #        if: always()
+  #        with:
+  #          name: "instrumented-orchestrator-tests-results"
+  #          path: android-core/build/orchestrator/**
 
   unit-tests:
     name: "Unit Tests"
@@ -138,7 +204,7 @@ jobs:
           repository: mparticle/mparticle-android-sdk
           ref: regression/${{ github.run_number }}
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -167,7 +233,7 @@ jobs:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -203,7 +269,7 @@ jobs:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -244,7 +310,7 @@ jobs:
           ref: regression/${{ github.run_number }}
           submodules: recursive
       - name: "Install JDK 17"
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: "zulu"
           java-version: "17"
@@ -256,7 +322,7 @@ jobs:
 
   semantic-release-dryrun:
     name: "Test Semantic Release - Dry Run"
-    needs: [ unit-tests, lint-checks, kotlin-lint-checks, update-kits ]
+    needs: [unit-tests, lint-checks, kotlin-lint-checks, update-kits]
     runs-on: macos-latest
     env:
       GITHUB_TOKEN: ${{ secrets.MP_SEMANTIC_RELEASE_BOT }}
@@ -274,7 +340,7 @@ jobs:
         run: |
           git pull origin regression/${{ github.run_number }}
       - name: "Semantic Release --dry-run"
-        if: ${{ inputs.dryRun }} == 'true'
+        if: inputs.dryRun == 'true'
         run: |
           npx \
           -p lodash \

.github/workflows/dependabot-automerge.yml

@@ -6,7 +6,12 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   automerge-dependabot:
     name: "Automerge Dependabot PR"
-    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-automerge.yml@main
+    uses: mParticle/mparticle-workflows/.github/workflows/dependabot-automerge.yml@main

.github/workflows/dependabot-rebase-branch.yml

@@ -6,6 +6,11 @@ on:
       - development
   workflow_dispatch:
 
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   rebase-branch:
     name: "Rebase Development onto Dependabot Branch"

.github/workflows/issue-autorespond-and-close.yml

@@ -5,10 +5,14 @@ on:
     types:
       - opened
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   auto-respond-and-close-issue:
     uses: mparticle/mparticle-workflows/.github/workflows/auto-respond-close-issue.yml@main
     with:
       issue_number: ${{ github.event.issue.number }}
       repository: ${{ github.repository }}
-      user_login: ${{ github.event.issue.user.login }}
+      user_login: ${{ github.event.issue.user.login }}