040a43f341
chore(release): fix release changelog text formatting
2026-05-15 02:03:06 +00:00
3138cf3a4d
fix(security): complete sanitizeLogValue sweep, DOMParser stripHtml, least-privilege CI permissions, pin Dockerfile image
2026-05-15 00:15:23 +00:00
db2b3f9696
ci: run E2E only on nightly schedule, skip E2E on PR/push/manual CI, keep manual e2e workflow for on-demand runs, and align matrix/docs accordingly
2026-05-14 16:37:18 +00:00
102360116b
ci: pin stale action to valid v9 commit hash
...
Use the correct resolvable SHA for actions/stale v9 so the workflow can download the action successfully.
2026-05-14 08:17:34 -06:00
f9c1e29911
feat: implement version UI and short-sha CI versioning
2026-05-13 22:24:46 +00:00
266b57c38a
chore: reorganize docs, improve README, and add FOSS project hygiene
2026-05-13 15:05:04 +00:00
e1cdc16245
chore(deps): bump actions/dependency-review-action ( #3 )
...
Bumps the github-actions group with 1 update: [actions/dependency-review-action](https://github.com/actions/dependency-review-action ).
Updates `actions/dependency-review-action` from 4.9.0 to 5.0.0
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/2031cfc080254a8a887f58cffee85186f0e49e48...a1d282b36b6f3519aa1f3fc636f609c47dddb294 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-12 00:46:52 -06:00
838033717c
fix(ci,books): resolve GHCR/CVE issues and clean pin/unpin fallbacks
...
- regenerate lockfile after package version alignment
- remove useless fallback spreads in pin and unpin column
- resolve GHCR push auth and fast-uri CVE
- patch fast-xml-builder CVE in image scan
2026-05-08 19:10:03 -06:00
de7a61888b
ci: consolidate release workflow and automate release notes
...
- Hardened multi-arch container release flow with build-once promotion and safer image gating.
- Reworked semantic-release execution, permissions, and action pinning for more reliable releases.
- Expanded release notes transformation with contributor and artifact metadata, plus cleaner formatting.
- Fixed edge cases in notes rendering by preserving commit metadata and guarding author formatting.
- Removed redundant release notes sections to keep generated output concise and consistent.
2026-04-27 08:21:15 -06:00
812efcd1be
ci: fix PR token permissions and gate dependency review
2026-04-26 19:15:56 -06:00
8ce315a7d0
ci: add semantic-release workflow and docs
2026-04-26 19:03:03 -06:00
739d311e9e
chore: sync dependency branch with main
2026-04-25 21:35:27 -06:00
cfc3672a6c
refactor: rename book-bucket to book-dock and lens to smart-scope
2026-04-20 22:57:27 -06:00
ef7f63cb1c
ci: allow dependency-review to fail without blocking CI
2026-04-14 04:38:10 -06:00
19f81faf4d
ci: reorganize project scripts and E2E workflows by type
2026-04-12 17:12:36 -06:00
b804abb043
chore: enhance ci pipeline
2026-04-10 11:06:25 -06:00
e6186c09df
test: add comprehensive unit tests and increase coverage thresholds
2026-04-10 09:26:37 -06:00
3c95efe25b
ci: add Trivy image scan gate before GHCR push
2026-04-07 05:51:02 -06:00
9fd4e162aa
feat(server): harden booklore migration with adapters and E2E tests
2026-04-05 16:01:04 -06:00
bab3813ff8
feat(metadata): add per-field locking to protect fields from overwrites
2026-04-03 21:31:02 -06:00
0a58a87239
refactor(scanner): rename staging module to book bucket
2026-04-03 20:50:11 -06:00
c3fd3f8f2e
ci: consolidate E2E into pipeline and gate image builds on test suite
2026-04-02 06:45:00 -06:00
6e999ccaa8
ci: standardize E2E naming across workflows and scripts
2026-04-02 05:25:00 -06:00
00ecdc34cd
test(users): add lifecycle E2E suite and harden admin contracts
2026-04-02 04:05:00 -06:00
6115656153
test(email): add email lifecycle E2E suite and harden send behavior
2026-04-02 02:45:00 -06:00
835bc91a09
test(reader): add state isolation E2E suite and fix isolation bugs
2026-04-02 01:25:00 -06:00
64abfa8c41
test(opds): add auth catalog end-to-end tests
2026-04-02 00:05:00 -06:00
157224be9f
test(metadata): expand end-to-end scenarios and assertions
2026-04-01 11:50:59 -06:00
a6d84ae20c
test(metadata): add initial E2E coverage for metadata write flow
2026-04-01 08:05:00 -06:00
0c195165e6
test(scanner): add staging ingest and finalize E2E test suite
2026-03-30 23:17:27 -06:00
4d58418b93
test(auth): add end-to-end coverage for authentication flows
2026-03-30 03:58:27 -06:00
b5cc1ef370
test(scanner): refactor E2E scaffolding and extract shared test harness
2026-03-30 02:11:51 -06:00
db30a45782
test(scanner): bootstrap scanner E2E test infrastructure
2026-03-30 01:18:32 -06:00
1418957b6f
chore: cleanup project structure and resolve client type errors
...
- resolve all 69 client type-checking errors for stricter TS compliance
- remove obsolete type-check baseline scripts and files
- overhaul project root with updated README.md and new DEVELOPMENT.md
- migrate to unified baseline migration strategy and cleanup docker configs
- remove redundant production and dev-specific shell scripts
2026-03-25 07:14:51 -06:00
8abfb82214
chore: speed up Docker builds
...
- drop arm64/QEMU — build amd64 only
- add pnpm store cache mounts to client and server install steps
2026-03-11 14:07:42 -06:00
4c4a5cbf25
chore: migrate server tests from Jest to Vitest
2026-03-11 13:30:04 -06:00
a3579ac57f
ci: overhaul CI workflows for reliability and maintainability
...
- add CODEOWNERS assigning .github/ to @neonsolstice
- configure automated updates for npm, docker, and github-actions ecosystems
- replace custom change-detection bash script with dorny/paths-filter@v4
- consolidate lint, typecheck, and test into a single checks matrix job
- gate per-package change detection via has-changes step (matrix unavailable in job-level if)
- fix duplicate actions/setup-node call in setup-node-pnpm composite action
- scope pnpm store cache key by pnpm version to prevent stale cross-version cache hits
- pin all action references to commit SHAs
- fix container-image concurrency group to use commit SHA across all trigger types
- add timeout-minutes to all jobs
- document fail-fast: false rationale and checks: write trade-off
2026-03-07 18:14:36 -06:00
neon
dependabot[bot]