[jeanphi-baconnais]

📝 Description

Calling the GitLab REST API (GET /api/v4/merge_requests) without an Authorization: Bearer header falls under GitLab's throttle_unauthenticated_api rate limit (500 requests / minute per IP), triggering 429 Too Many Requests during organization-wide contribution synchronization. However, calling the REST endpoint with the Bearer token returns merge requests from private/internal projects without exposing project visibility in the REST payload.

This PR switches the monthly GitLab Merge Requests lookup in GitLabServices to GitLab's GraphQL API (/api/graphql) authenticated with the Bearer token (2,000 requests / minute quota), querying project { name fullPath webUrl visibility } and strictly filtering on visibility == "public".

🚀 Main Changes

• GraphQL Query (GitLabGraphQLQueries.java):
  • Added qGetMergedMergeRequestsForAPeriod querying user(username: $username) { authoredMergeRequests(state: merged, updatedAfter: $updatedAfter, updatedBefore: $updatedBefore, first: 100) } along with project { name fullPath webUrl visibility }.
• GraphQL Beans (src/main/java/fr/zenika/opensource/stats/beans/gitlab/graphql/):
  • Added GitLabMergeRequestProject (with isPublic()) and GitLabMergeRequestNode.
  • Updated GitLabMergeRequestsCount to expose List<GitLabMergeRequestNode> nodes.
• Service (GitLabServices.java):
  • Configured an authenticated DynamicGraphQLClient using quarkus.smallrye-graphql-client.gitlab-api.url and gitlab.token.
  • Updated getContributionsByUserId and getContributionsForTheCurrentYear to query GitLab GraphQL per month by username (removing the extra /users?username=... REST call) and filter merge requests to keep only public projects (GitLabMergeRequestProject::isPublic).
• Unit Tests (GitLabServicesTest.java):
  • Updated unit tests to verify GraphQL invocation and public/private MR filtering, and added a GraphQL JSON deserialization test.

🧪 Verification & Testing

• Executed ./mvnw -Dtest=GitLabServicesTest test (3/3 tests passing).

[github-actions]

🎉 This PR is included in version 1.12.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀