Matthew Meszaros 92b811773e feat: fail the build when a Dockerfile COPY names a path that is not in the repository, because build-push.yml runs only on push to main and nothing on a pull request builds an image, so a COPY of a file the same change deleted is green everywhere until it breaks main

2026-09-09 09:03:54 -07:00

..

build-push.yml

feat: address the review on the image publicity gate by passing build-push only the seven services that workflow actually publishes, since web, admin and cli have no :dev tag and would have warned falsely on every push to main, by taking the release tag through the step env instead of interpolating github.ref_name into the shell, and by no longer asserting the tag is fine when a pull is refused, because GHCR denies an unknown namespace exactly as it denies a private one, so a mistyped --registry now gets its own reading in the installer message, the troubleshooting table and the fork note, which also splits the personal and organization paths to the visibility setting

2026-09-07 09:02:23 -07:00

ci.yml

feat: fail the build when a Dockerfile COPY names a path that is not in the repository, because build-push.yml runs only on push to main and nothing on a pull request builds an image, so a COPY of a file the same change deleted is green everywhere until it breaks main

2026-09-09 09:03:54 -07:00

release.yml

feat: address the review on the image publicity gate by passing build-push only the seven services that workflow actually publishes, since web, admin and cli have no :dev tag and would have warned falsely on every push to main, by taking the release tag through the step env instead of interpolating github.ref_name into the shell, and by no longer asserting the tag is fine when a pull is refused, because GHCR denies an unknown namespace exactly as it denies a private one, so a mistyped --registry now gets its own reading in the installer message, the troubleshooting table and the fork note, which also splits the personal and organization paths to the visibility setting

2026-09-07 09:02:23 -07:00

security.yml

feat: fix the security workflow's unresolvable action pin by changing aquasecurity/trivy-action@0.36.0 to @v0.36.0, since the repository tags its releases with a v prefix and the first main run of security.yml died in job setup with 'unable to find version 0.36.0' before Trivy ever ran

2026-08-20 06:25:47 +02:00