gitea-admin/gh-christianlouis-docuelevate
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,071 Commits 28 Branches 0 Tags
16449e75a296d7c24f5fd3d4a01881a8f2a7928c
Commit Graph

6 Commits

Author SHA1 Message Date
google-labs-jules[bot] 2b092592cb 🛡️ Sentinel: Fix CI failures and update dependencies 
- Resolved the GitHub Actions CI deprecation warning by upgrading checkout/setup-python actions to support Node.js 24 (`v4.2.2` and `v5.4.0` respectively).
- Addressed the `pip-audit` failure (CVE-2026-4750) triggered by the malicious `fastar` dependency injection in `fastapi==0.136.3` by explicitly blocking that version (`fastapi[all]!=0.136.3`) in `requirements.txt`.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-05-27 03:38:24 +00:00
copilot-swe-agent[bot] c306d80755 ci: opt into Node.js 24 for all GitHub Actions workflows 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-11 11:52:35 +00:00
copilot-swe-agent[bot] 1fe6f86cc0 ci: restore javascript-typescript CodeQL config alongside javascript 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-08 19:27:01 +00:00
copilot-swe-agent[bot] 3f8a95d808 ci: fix CodeQL javascript language identifier mismatch 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-08 11:11:34 +00:00
copilot-swe-agent[bot] 9d2994a4aa feat(ci): consolidate 6 workflow files into 3 optimized workflows 
BREAKING CHANGE: Workflow files consolidated with proper dependencies

- Create new unified CI pipeline (.github/workflows/ci.yml)
  - Multi-stage pipeline: test/lint/mypy → build → deploy
  - Add concurrency groups to cancel redundant PR runs
  - Fix bug: only push Docker images on push events (not PRs)
  - Fix bug: upgrade checkout action from v3 to v4
  - Fix bug: enforce quality gates with job dependencies
  - Preserve Redis/RabbitMQ services for tests
  - Preserve Codecov integration and test artifacts
  - Push to both Docker Hub and GHCR with proper tags
  - Include SBOM and provenance attestations

- Update release.yml: remove no-op "Trigger Docker Build" step
- Update codeql.yml: remove template comments and boilerplate

- Delete 4 redundant workflow files:
  - tests.yaml (merged into ci.yml)
  - docker-build.yaml (merged into ci.yml)
  - docker-ci.yml (merged into ci.yml)
  - deploy.yaml (merged into ci.yml)

Docker registries: Docker Hub + GHCR (Quay.io auto-builds separately)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-13 13:06:23 +00:00
Christian Krakau-Louis c84f64a846 Add CodeQL analysis workflow configuration 2026-02-07 15:51:10 +01:00