Zyy and Codex
3ac9d5f6f8
ci: keep repository checks independent
...
Remove automatic cross-repository source integration from host CI while
preserving host checks against locked dependencies. Keep source integration
available for explicit local version combinations and align the documentation.
Co-authored-by: Codex <noreply@openai.com >
2026-10-25 22:34:48 +08:00
Zyy and Codex
d819315d8b
fix(ci): allow independent UI dependency versions
...
Keep frozen installs, source compatibility builds, and lockfile checks
without requiring every consumer to pin the UI submodule revision.
Co-authored-by: Codex <noreply@openai.com >
2026-10-25 04:48:28 +08:00
Zyy and Codex
a8f183707e
chore(build): refresh base images and pin Ubuntu runners
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-25 01:02:46 +08:00
Zyy
f7f59103a3
fix: harden request lifecycles and align repository documentation
...
Preserve request evidence and cold middleware boundaries across cancellation. Make backup auditing atomic, retain committed account-group results, and serialize restart operations.
Unify frontend stream authentication and session recovery, clear stale secrets, and remove redundant runtime paths. Correct CI permissions and database test URL handling.
Align documentation with current module responsibilities, APIs, and validation workflows, including both submodules.
2026-10-22 22:06:01 +08:00
dependabot[bot] and Codex
c4d9576639
chore(deps): update GitHub Actions and composite action pins ( #472 )
...
Align pinned action versions across CI, release workflows and composite actions.
Co-authored-by: Codex <noreply@openai.com >
2026-10-19 13:52:12 +08:00
Zyy and Codex
733e9aa8a0
fix(release): guard publication and consolidate release tooling
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-18 04:02:17 +08:00
Zyy and Codex
dc45aee5da
ci: streamline cache handling and release jobs
...
Validate Cargo mount snapshots before saving, group cache tooling in a local action, and decouple image builds from release packaging. Use prebuilt security tooling and narrow unrelated CI triggers.
Co-authored-by: Codex <noreply@openai.com >
2026-09-28 18:33:20 +08:00
Zyy and Codex
8fb42300c1
ci: streamline release checks and protect contribution rules
...
Reuse test binaries and frontend builds, reduce redundant cache writes, and overlap release preparation with quality checks.
Protect skills, contribution rules, and GitHub configuration, and simplify workflow names.
Co-authored-by: Codex <noreply@openai.com >
2026-09-28 16:54:13 +08:00
Zyy and Codex
999fcc1770
feat(dev): integrate source modules and plugin multi-select settings
...
Co-authored-by: Codex <noreply@openai.com >
2026-09-25 23:59:13 +08:00
Zyy and Codex
817b0f2d6d
chore(release): commit version and notes together
...
Allow staged or unstaged release notes and commit their final contents with the version update before tagging. Continue rejecting unrelated tracked changes and require notes to remain uncommitted.
Update the release skill, skip duplicate push CI for release metadata alone, and check the publish script syntax in CI. Validated publication behavior in temporary Git repositories, Bash syntax, and Actionlint.
Co-authored-by: Codex <noreply@openai.com >
2026-09-15 15:14:18 +08:00
Zyy and Codex
2a7fd08e9e
perf(ci): reuse release images and persist Cargo build caches
...
Share container verification between CI and release image jobs. Validate both native release architectures and publish manifests from the verified digests, eliminating the duplicate release source build.
Persist BuildKit Cargo cache mounts across CI runs, refresh release caches per commit, and generate SARIF and vulnerability gate results from one Trivy scan.
Validation: actionlint, composite action ShellCheck, embedded shell syntax, Trivy severity and malformed-report checks, and manifest digest validation passed locally. Full GitHub workflow timing remains to be measured.
Co-authored-by: Codex <noreply@openai.com >
2026-09-08 17:50:17 +08:00
Zyy and Codex
e25639c11b
fix(release): gate publishing on container validation
...
Skip standalone CI for version-only release commits so they do not cancel the preceding source run. Reuse the container workflow in Release and require it before publishing.
Co-authored-by: Codex <noreply@openai.com >
2026-08-31 04:40:24 +08:00
dependabot[bot] and Zyy
d7b80a2066
chore(deps): bump the minor-and-patch group with 5 updates ( #36 )
...
Bumps the minor-and-patch group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.37.4` | `4.37.6` |
| [Swatinem/rust-cache](https://github.com/swatinem/rust-cache ) | `2.9.1` | `2.9.2` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup ) | `6.0.9` | `6.0.10` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter ) | `4.0.2` | `4.0.3` |
| [actions/attest](https://github.com/actions/attest ) | `4.2.1` | `4.2.2` |
Updates `github/codeql-action/upload-sarif` from 4.37.4 to 4.37.6
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/f205ea1c3313d32999d8d6a48b4f6530d4437b38...5595ccaf912efad79be6eef63a5619ff05969be3 )
Updates `Swatinem/rust-cache` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/swatinem/rust-cache/releases )
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md )
- [Commits](https://github.com/swatinem/rust-cache/compare/c19371144df3bb44fab255c43d04cbc2ab54d1c4...6323deb102c322ba6fcbdcafc7e3dddab59af2b6 )
Updates `pnpm/action-setup` from 6.0.9 to 6.0.10
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/0ebf47130e4866e96fce0953f49152a61190b271...0977fd99725f1db4007ccb2928dbb4e90d06cc86 )
Updates `dorny/paths-filter` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/dorny/paths-filter/releases )
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md )
- [Commits](https://github.com/dorny/paths-filter/compare/7b450fff21473bca461d4b92ce414b9d0420d706...ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d )
Updates `actions/attest` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/actions/attest/releases )
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest/compare/508db95dd578ae2727ebd6217d5ba78e4fbda05d...1e69f48acb82d1966a394da916b4c1698aa569d6 )
---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: Swatinem/rust-cache
dependency-version: 2.9.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: pnpm/action-setup
dependency-version: 6.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: dorny/paths-filter
dependency-version: 4.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: actions/attest
dependency-version: 4.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zyy <39424122+zyycn@users.noreply.github.com >
2026-08-10 12:01:38 +08:00
dependabot[bot]
b296c795ac
chore(deps): Bump the minor-and-patch group across 1 directory with 3 updates ( #22 )
...
Bumps the minor-and-patch group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout ), [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) and [docker/login-action](https://github.com/docker/login-action ).
Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1 )
Updates `github/codeql-action/upload-sarif` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 )
Updates `docker/login-action` from 4.4.0 to 4.5.1
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: docker/login-action
dependency-version: 4.5.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-27 11:41:57 +08:00
Zyy and Codex
9e57f78bab
ci: speed up validation pipelines
...
Run affected CI checks in parallel and skip unrelated backend or frontend work while retaining workflow lint.
Start release binary builds after release metadata is available, while keeping image assembly, packaging, and publication gated by quality checks.
Co-authored-by: Codex <noreply@openai.com >
2026-07-16 16:07:55 +08:00
zyycn and Codex
37a368de32
fix(ci): avoid duplicate pull request checks
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-15 11:33:11 +08:00
zyycn and Codex
f867f13ce7
fix: upgrade GitHub Actions runtimes
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-12 12:59:49 +08:00
zyycn and Codex
4dcd9dc31d
feat: harden deployment and CI pipeline
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-11 17:18:17 +08:00
zyycn and Codex
fe5494a614
refactor: align implementation with authoritative architecture
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-10 22:53:27 +08:00
Zyy and Codex
45e4b36225
refactor: complete postgresql redis migration
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-10 19:00:14 +08:00
zyycn and Codex
0179d02c80
chore: prepare release cleanup
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-03 23:37:27 +08:00
Zyy and Codex
112bd76f66
refactor: address audit findings
...
Co-authored-by: Codex <noreply@openai.com >
Signed-off-by: Zyy <No Email>
2026-07-03 18:20:05 +08:00
Zyy and Codex
9092740c9a
ci: complete release pipeline
...
Co-authored-by: Codex <noreply@openai.com >
2026-07-02 12:09:22 +08:00