Skip to content

contentful/marketplace-partner-apps

Repository files navigation

Marketplace Partner Apps

This repository contains the source code for partner apps on the marketplace and helpful resources to build your own apps for Contentful.

Installing an app

Head over to the marketplace and follow the installation flow to set up any of the apps in your Contentful space.

Adding and maintaining your app in this repo

The Marketplace Partner Apps repo is maintained as a single repository for apps, containing several ecosystem partner apps + the tools needed to build and maintain them. The apps folder contains each partner app, and each sub-folder within apps should contain all the code necessary to build, test, and deploy your app without references to other apps or folders. All dependencies between apps are indepedent and isolated from each other.

First time setup

The marketplace-partner-apps repo uses Circle CI (configured in .circleci/config.yml) to deploy itself, and Lerna (configured in lerna.json) to manage the collection of partner apps.

In order for your app to be deployed successfully (with the exception of the test script), it must meet the following criteria:

  • Have a package.json file with the following scripts:
    • install-ci
      • Installs required dependencies for your project. Highly recommended that the script is npm ci that installs off of a package-lock file.
    • build
      • Creates a build artifact(s). "react-scripts build" is common for most apps without specific needs, though whatever tool or process you prefer is fine so long as it creates artifacts that can be referenced in the deploy step.
    • test (not necessary, but highly encouraged).
      • Once again "react-scripts test" is common for many apps and should be considered if you do not have complicated tests. Having at least basic testing and coverage will ensure your app does not deploy if breaking changes are introduced by your work or dependabot (see below).
    • deploy
      • All code deployed by the marketplace-partner-apps repo must be hosted by contentful. Your deploy job should look something like this: contentful-app-scripts upload --ci --bundle-dir ./build --organization-id ${DEFINITIONS_ORG_ID} --definition-id APP_DEFINITION_ID --token ${CONTENTFUL_CMA_TOKEN} - Make sure --bundle-dir points to the output of your build process (./build if you used "react-scripts build"). - DEFINITIONS_ORG_ID and CONTENTFUL_CMA_TOKEN do not need to be changed and will be appropriately filled by the build process. - The value of APP_DEFINITION_ID can be the id you might have used to test your deploy in you contentful space. This value can be found in the app definition after creating a custom app. The Ecosystems Integrations team will update this value to a shared, official space. Please do not update it in subsequent changes/pull requests.
    • deploy:staging This script is not necessary at this point in time. We are currently working to add an official Contentful staging organization to house staging marketplace partner spaces and the respective staging app definition, for which this script can eventually point to.
    • Additionally, ensure that the package version number is below 1.0.0. The version of 1.0.0 is reserved for initial release.

Note

Please note that dependabot is enabled in this repo and will run automatically. While it will attempt to only upgrade dependencies without breaking changes, it is possible it will still introduce issues. Creating and maintaining comprehensive tests is critical to preventing code and build issues. See Keeping dependencies up to date for more details.

Committing and updating your repo

When you are ready to submit your app to the marketplace apps repo, clone the repo locally, create a new branch with a descriptive name for the app/changes you are introducing, and create a pull-request against the main branch. An ecosystems integrations will review your PR soon and let you know if any changes or clarifications are needed. To ensure the fastest approval time on your PR, make sure you:

  • PR titles must confirm to the Conventional Commits standard. (A Github Action will emit a failing status check if your PR title does not match)
  • Commit messages are public! We highly recommend following standards for good commit messages. Commit messages are automatically pulled into your app's changelog for each release and should be clear and understandable to the end user.
  • Add the new app to the release-please-config.json file so that the release workflow will include the new app. The release workflow encapsulates versioning as well as the creation and maintenance of a changelog,
  • Fill out the pull-request template as much as possible. Screenshots, images, and videos are often helpful for providing context and are encouraged.
  • Comment your changes, either in GitHub or the code itself to provide reviewers more context than they might get otherwise.
  • Ensure your changes are wholly contained within your app's folder, and do not make alterations to other folders or the root level. If you have need for root-level changes, please create an issue instead.
  • Prevent / reduce references to external resources and code. The marketplace-partner-apps is intended to be open and transparent and any external resources will be highly scrutinized.

Keeping dependencies up to date

It is the responsibility of all partner app developers to ensure their app is kept up to date with the latest versions of all depedencies required by their app. This is required not only to ensure their app continues to function as expected alongside the constantly evolving Contentful platform, but also to ensure that critical security updates are applied in a timely fashion and are not slowed down by out of date cross depedencies.

To keep depedencies up to date, Contentful uses Dependabot in this repository. Dependabot will:

  • Open PRs to propose dependency updates for every depedency listed in your app's package.json file.
  • Automatically approve and merge PRs for patch and minor version updates.
  • Hold off on merging PRs for major version updates pending manual review by a human.

Tip

We recommend specifying bare versions (e.g. 1.2.3) of dependencies in your package.json file vs. a range of versions (e.g. 1.2.x or ~1.2.3). Dependabot will increment versions in your package.json file automatically.

As an app developer, it is important to review and approve any dependency update PRs assigned to you on a frequent basis. Specifically we ask that you:

  • Provide a reasonably confident test suite that exercises the main functionality of your app. Test suites generally do an excellent job of catching errors caused by backward breaking compatibility changes in updated depedencies.
  • Respond to, review, and informally approve (adding a PR comment suffices as an approval) any dependency-related PRs that are opened against your app (whether by Dependabot or the Contentful team) in a timely fashion. If errors exist in aformentioned dependency-related PRs, please manually resolve these errors.
  • Talk to us if you have a specific requirement to firmly pin a dependency version. We can make custom modifications to our Dependabot configuration to support exceptions as needed.

Building your own app

The best way to get started on app development is with our create-contentful-app CLI tool. This tool will bootstrap a brand new project with all the boilerplate code you need to start building an app. If you are interested in learning how to build a simple example app, you can check out our tutorial.

Detailed documentation can be found in the App SDK documentation and the Management HTTP API reference documentation.

Please note that each app has its individual source code license associated with it. Refer to the LICENSE file in the apps root folder.

We also highly encourage the use of TypeScript within your code, though this is not a requirement.

Resources

Support and feature requests

If you require support, or want to request a new feature then please use the appropriate support channel which will be listed with the app on our app marketplace.