Update rc1 test branch from develop

.github/actions/deploy-release/action.yml

@@ -37,7 +37,7 @@ runs:
       uses: actions/setup-java@v4
       with:
         distribution: 'sapmachine'
-        java-version: '17'
+        java-version: '21'
         cache: maven
         server-id: central
         server-username: MAVEN_CENTRAL_USER

.github/actions/deploy/action.yml

@@ -34,11 +34,11 @@ runs:
         echo "altDeploymentRepository: ${{inputs.server-id}}::default::${{inputs.repository-url}}"
       shell: bash
 
-    - name: Setup Java 17
+    - name: Setup Java 21
       uses: actions/setup-java@v4
       with:
         distribution: sapmachine
-        java-version: '17'
+        java-version: '21'
         server-id: ${{ inputs.server-id }}
         server-username: CAP_DEPLOYMENT_USER
         server-password: CAP_DEPLOYMENT_PASS

.github/scripts/analyze-failure.js

@@ -0,0 +1,197 @@
+const { getOctokit } = require("@actions/github");
+const { GoogleGenerativeAI } = require("@google/generative-ai");
+
+// Configuration
+const MAX_LOG_LINES = 500; // Lines to analyze from the tail of the log
+const MAX_TOKENS = 15000;
+
+async function run() {
+    try {
+        const token = process.env.GITHUB_TOKEN;
+        const apiKey = process.env.GEMINI_API_KEY;
+        const runId = process.env.WORKFLOW_RUN_ID;
+        const workflowName = process.env.WORKFLOW_NAME;
+        const owner = process.env.REPO_OWNER;
+        const repo = process.env.REPO_NAME;
+
+        if (!token || !apiKey || !runId) {
+            throw new Error("Missing required environment variables.");
+        }
+
+        const octokit = getOctokit(token);
+        const genAI = new GoogleGenerativeAI(apiKey);
+        const model = genAI.getGenerativeModel({ model: "gemini-2.5-flash" });
+
+        console.log(`Analyzing failure for workflow run ${runId} (${workflowName})...`);
+
+        // 1. Get Jobs for the Run
+        const jobs = await octokit.rest.actions.listJobsForWorkflowRun({
+            owner,
+            repo,
+            run_id: runId,
+        });
+
+        // 2. Find the Failed Job(s)
+        const failedJob = jobs.data.jobs.find(j => j.conclusion === 'failure');
+        if (!failedJob) {
+            console.log("No failed job found (or it was cancelled). Exiting.");
+            return;
+        }
+
+        console.log(`Found failed job: ${failedJob.name} (ID: ${failedJob.id})`);
+
+        // 3. Download Logs for the Failed Job
+        console.log("Downloading logs...");
+        let logContent = "";
+        try {
+            const logs = await octokit.rest.actions.downloadJobLogsForWorkflowRun({
+                owner,
+                repo,
+                job_id: failedJob.id,
+            });
+            logContent = logs.data;
+        } catch (error) {
+            // Sometimes logs redirect, handle if necessary, but octokit usually handles it.
+            // If raw text is returned, use it.
+            logContent = error.response?.data || "";
+            if (!logContent && typeof logs === 'string') logContent = logs;
+            if (!logContent) {
+                console.error("Could not retrieve logs:", error.message);
+                return;
+            }
+        }
+
+        // 4. Pre-process Logs (Tail & Token Limit)
+        const lines = logContent.split('\n');
+        // Simple heuristic: Take the last N lines, as errors are usually at the end.
+        // For better results, one could scan for "ERROR" or "FAILED" and take surrounding context.
+        const tailLogs = lines.slice(-MAX_LOG_LINES).join('\n');
+
+        console.log(`Extracted log tail (${tailLogs.length} characters). Generating analysis...`);
+
+        // 5. Generate Analysis with Gemini
+        // const prompt = `
+        // You are a DevOps Expert and "Build Doctor".
+        // A GitHub Actions workflow '${workflowName}' failed.
+
+        // Analyze the following log snippet (last ${MAX_LOG_LINES} lines) to identify the root cause.
+
+        // Log Snippet:
+        // \`\`\`
+        // ${tailLogs}
+        // \`\`\`
+
+        // Your response must be a concise Markdown comment suitable for a developer.
+        // Structure:
+
+        // ## 🩺 Build Doctor Diagnosis
+
+        // **1. Root Cause:** 
+        // (Explain what went wrong in 1-2 senteces. Be specific: Syntax error, Dependencies, Test failure, Infra, etc.)
+
+        // **2. Relevant Log Lines:**
+        // (Quote the specific error message from the logs)
+
+        // **3. Suggested Fix:**
+        // (Actionable advice. If it's a code fix, show the snippet. If it's a config tweak, show the command or yaml change.)
+
+        // **Confidence:** (High/Medium/Low)
+        // `;
+        const prompt = `
+        You are an expert DevOps engineer and "Build Doctor".
+        A GitHub Actions workflow '${workflowName}' has failed.
+
+        Your job:
+        - Read the log snippet carefully.
+        - Identify the **single most likely root cause** of the failure.
+        - Map it to a clear category (Syntax, Dependency, Test, Infra, Config, Credential, Network, Tooling, etc.).
+        - Propose **one** primary fix that a developer can apply quickly.
+
+        Context:
+        - These are the last ${MAX_LOG_LINES} lines of the job log.
+        - They may contain retries, warnings, and noisy stack traces.
+        - The **true error** is usually near the first occurrence of "error", "exception", "failed", "fatal", non‑zero exit codes, or GitHub Actions step failure messages.
+
+        Log Snippet:
+        \`\`\`
+        ${tailLogs}
+        \`\`\`
+
+        First, think step by step (do NOT include this reasoning in the final answer):
+        1. Skim for the first real failure signal (error/exception/exit code/failed step).
+        2. Summarize in your own words what actually went wrong.
+        3. Decide which category it belongs to: Syntax, Dependency, Test, Infra, Config, Credential, Network, Tooling, Other.
+        4. Decide the most likely fix a DevOps/dev engineer should try first.
+        5. If there is not enough information, state that clearly and suggest what extra logs/checks are needed.
+
+        Then, output **only** the following Markdown comment, nothing else:
+
+        # 🩺 Build Doctor Diagnosis
+
+        ### Diagnosis (${workflowName})
+        **1. Root Cause:**  
+        (Explain what went wrong in 1–2 sentences. Be specific: e.g. "Maven dependency not found", "JUnit test failure", "Docker login failed", "Kubernetes connection timeout". If unsure, say "Most likely ..." and why.)
+
+        **2. Relevant Log Lines:**  
+        (Quote the *minimal* most important 1–3 lines from the logs that show the error. Do not paste large blocks.)
+
+        **3. Suggested Fix:**  
+        (Give concrete, copy‑pasteable steps. 
+        - For code issues: show the key code or config snippet to change.
+        - For pipeline/config issues: show the YAML or command to adjust.
+        - For infra/credentials: describe exact checks or commands to run, and what to update.)
+
+        **Confidence:** High | Medium | Low
+        (Choose one based on how clear the error is. If logs are ambiguous or truncated, use Medium or Low and say what’s missing.)
+        `;
+
+
+        const result = await model.generateContent(prompt);
+        const analysis = result.response.text();
+
+        console.log("Analysis generated. Posting comment...");
+
+        // 6. Post Comment
+        // We need to find where to post.
+        // If triggered by PR, we post to the PR.
+        // If triggered by Push, we post to the Commit.
+
+        // Context is tricky in 'workflow_run'. We have to look at the 'workflow_run' event payload.
+        // We can get the PRs associated with the run.
+        const runDetails = await octokit.rest.actions.getWorkflowRun({
+            owner,
+            repo,
+            run_id: runId
+        });
+
+        const prs = runDetails.data.pull_requests;
+
+        if (prs && prs.length > 0) {
+            // Post to the first associated PR
+            const prNumber = prs[0].number;
+            await octokit.rest.issues.createComment({
+                owner,
+                repo,
+                issue_number: prNumber,
+                body: analysis
+            });
+            console.log(`Posted analysis to PR #${prNumber}`);
+        } else {
+            // Post to the Commit
+            const headSha = runDetails.data.head_sha;
+            await octokit.rest.repos.createCommitComment({
+                owner,
+                repo,
+                commit_sha: headSha,
+                body: analysis
+            });
+            console.log(`Posted analysis to Commit ${headSha}`);
+        }
+
+    } catch (error) {
+        console.error("Build Doctor failed:", error);
+        process.exit(1);
+    }
+}
+
+run();

.github/workflows/SAPUI5_Version_Monitoring.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout the develop_deploy branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           ref: develop_deploy
 

.github/workflows/blackduck.yml

@@ -11,30 +11,33 @@ on:
   workflow_dispatch:
 
 permissions:
+  contents: read # allows workflow to checkout private repository
   pull-requests: read # allows SonarQube to decorate PRs with analysis results
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
 
-      - name: Set up JDK 17
+      - name: Set up JDK 21
         uses: actions/setup-java@v4
         with:
-          java-version: '17'
+          java-version: '21'
           distribution: 'temurin'
           cache: maven
 
       - name: Install dependencies
         run: |
           mvn clean install -P unit-tests  -DskipIntegrationTests
 
-      - name: Download Synopsys Detect Script
-        run: curl --silent -O https://detect.synopsys.com/detect9.sh
+      # - name: Download Synopsys Detect Script
+      #   run: curl --silent -O https://detect.synopsys.com/detect9.sh
+      - name: Download Black Duck Detect Script
+        run: curl --silent -O https://detect.blackduck.com/detect9.sh
 
       - name: Run & analyze BlackDuck Scan
         run: |

.github/workflows/cfdeploy.yml

@@ -26,6 +26,7 @@ on:
         default: ''
 
 permissions:
+  contents: read
   pull-requests: read
   packages: read  # Added permission to read packages
 
@@ -36,14 +37,14 @@ jobs:
 
     steps:
       - name: Checkout repository 📁
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.inputs.deploy_branch }}
 
-      - name: Set up Java 17 ☕
+      - name: Set up Java 21 ☕
         uses: actions/setup-java@v3
         with:
-          java-version: 17
+          java-version: 21
           distribution: 'temurin'
 
       - name: Build and package 🔨
@@ -114,7 +115,7 @@ jobs:
           wget -q -O - https://packages.cloudfoundry.org/debian/cli.cloudfoundry.org.key | sudo tee /etc/apt/trusted.gpg.d/cloudfoundry.asc
           echo "deb https://packages.cloudfoundry.org/debian stable main" | sudo tee /etc/apt/sources.list.d/cloudfoundry-cli.list
           sudo apt update
-          sudo apt install cf-cli
+          sudo apt install cf8-cli
 
           cf install-plugin multiapps -f
 
@@ -132,14 +133,14 @@ jobs:
 
     steps:
       - name: Checkout repository 📁
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           ref: develop
 
-      - name: Set up Java 17 ☕
+      - name: Set up Java 21 ☕
         uses: actions/setup-java@v3
         with:
-          java-version: 17
+          java-version: 21
           distribution: 'temurin'
 
       - name: Verify and Checkout Deploy Branch 🔄
@@ -249,7 +250,7 @@ jobs:
           wget -q -O - https://packages.cloudfoundry.org/debian/cli.cloudfoundry.org.key | sudo tee /etc/apt/trusted.gpg.d/cloudfoundry.asc
           echo "deb https://packages.cloudfoundry.org/debian stable main" | sudo tee /etc/apt/sources.list.d/cloudfoundry-cli.list
           sudo apt update
-          sudo apt install cf-cli
+          sudo apt install cf8-cli
 
           cf install-plugin multiapps -f
 

.github/workflows/codeql.yml

@@ -27,13 +27,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      - name: Set up JDK 17
+      - name: Set up JDK 21
         uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
-          java-version: '17'
+          java-version: '21'
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/demo-build.yml

@@ -0,0 +1,20 @@
+name: Demo Build
+
+on:
+  push:
+    branches:
+      - 'demo/**'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+          cache: maven
+      - name: Build with Maven
+        run: mvn clean install