chore(ci): Notify on release failures and other small CI changes [fixes FLU-222, FLU-194, FLU-41 and FLU-196] (#185)

* Notify on release failure

* Set timeout

* Update renovate

* Fix

.github/renovate.json

@@ -6,10 +6,24 @@
   ],
   "enabledManagers": ["cargo", "npm", "github-actions", "pip_requirements"],
   "rangeStrategy": "pin",
+  "schedule": "every weekend",
   "packageRules": [
+    {
+      "matchManagers": ["cargo", "npm"],
+      "matchPackagePatterns": [
+        "@fluencelabs/.*",
+        "fluence-.*",
+        "marine-.*"
+      ],
+      "semanticCommitType": "fix",
+      "semanticCommitScope": "deps",
+      "schedule": "at any time"
+    },
     {
       "matchDepTypes": ["devDependencies"],
-      "prPriority": -1
+      "prPriority": -1,
+      "semanticCommitType": "chore",
+      "semanticCommitScope": "deps"
     },
     {
       "matchUpdateTypes": ["major"],
@@ -17,7 +31,8 @@
     },
     {
       "matchManagers": ["github-actions"],
-      "groupName": "all github-actions"
+      "groupName": "all github-actions",
+      "prPriority": -1
     }
   ]
 }

.github/workflows/e2e.yml

@@ -22,6 +22,7 @@ jobs:
   cargo:
     name: "registry / Run cargo tests"
     runs-on: builder
+    timeout-minutes: 60
 
     defaults:
       run:

.github/workflows/release.yml

@@ -170,3 +170,50 @@ jobs:
             "url": "https://github.com/fluencelabs/registry/releases/download/${{ needs.release-please.outputs.tag-name }}/registry.tar.gz",
             "sha256": "${{ steps.sha.outputs.sha256 }}"
           }'
+
+  slack:
+    if: always()
+    name: "Notify"
+    runs-on: ubuntu-latest
+
+    needs:
+      - release-please
+      - registry
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: lwhiteley/dependent-jobs-result-check@v1
+        id: status
+        with:
+          statuses: failure
+          dependencies: ${{ toJSON(needs) }}
+
+      - name: Log output
+        run: |
+          echo "statuses:" "${{ steps.status.outputs.statuses }}"
+          echo "jobs:" "${{ steps.status.outputs.jobs }}"
+          echo "found any?:" "${{ steps.status.outputs.found }}"
+
+      - name: Import secrets
+        uses: hashicorp/vault-action@v2.4.3
+        with:
+          url: https://vault.fluence.dev
+          path: jwt/github
+          role: ci
+          method: jwt
+          jwtGithubAudience: "https://github.com/fluencelabs"
+          jwtTtl: 300
+          exportToken: false
+          secrets: |
+            kv/slack/release-please webhook | SLACK_WEBHOOK_URL
+
+      - uses: ravsamhq/notify-slack-action@v2
+        if: steps.status.outputs.found == true
+        with:
+          status: "failure"
+          notification_title: "*{workflow}* has {status_message}"
+          message_format: "${{ steps.status.outputs.jobs }} {status_message} in <{repo_url}|{repo}>"
+          footer: "<{run_url}>"

.github/workflows/tests.yml

@@ -29,6 +29,7 @@ jobs:
   aqua:
     name: "Run aqua tests"
     runs-on: builder
+    timeout-minutes: 60
 
     permissions:
       contents: read