9 Commits

Author	SHA1	Message	Date
neon	838033717c	fix(ci,books): resolve GHCR/CVE issues and clean pin/unpin fallbacks ... - regenerate lockfile after package version alignment - remove useless fallback spreads in pin and unpin column - resolve GHCR push auth and fast-uri CVE - patch fast-xml-builder CVE in image scan	2026-05-08 19:10:03 -06:00
neon	de7a61888b	ci: consolidate release workflow and automate release notes ... - Hardened multi-arch container release flow with build-once promotion and safer image gating. - Reworked semantic-release execution, permissions, and action pinning for more reliable releases. - Expanded release notes transformation with contributor and artifact metadata, plus cleaner formatting. - Fixed edge cases in notes rendering by preserving commit metadata and guarding author formatting. - Removed redundant release notes sections to keep generated output concise and consistent.	2026-04-27 08:21:15 -06:00
neon	8ce315a7d0	ci: add semantic-release workflow and docs	2026-04-26 19:03:03 -06:00
neon	739d311e9e	chore: sync dependency branch with main	2026-04-25 21:35:27 -06:00
neon	b804abb043	chore: enhance ci pipeline	2026-04-10 11:06:25 -06:00
neon	3c95efe25b	ci: add Trivy image scan gate before GHCR push	2026-04-07 05:51:02 -06:00
neon	c3fd3f8f2e	ci: consolidate E2E into pipeline and gate image builds on test suite	2026-04-02 06:45:00 -06:00
neon	8abfb82214	chore: speed up Docker builds ... - drop arm64/QEMU — build amd64 only - add pnpm store cache mounts to client and server install steps	2026-03-11 14:07:42 -06:00
neon	a3579ac57f	ci: overhaul CI workflows for reliability and maintainability ... - add CODEOWNERS assigning .github/ to @neonsolstice - configure automated updates for npm, docker, and github-actions ecosystems - replace custom change-detection bash script with dorny/paths-filter@v4 - consolidate lint, typecheck, and test into a single checks matrix job - gate per-package change detection via has-changes step (matrix unavailable in job-level if) - fix duplicate actions/setup-node call in setup-node-pnpm composite action - scope pnpm store cache key by pnpm version to prevent stale cross-version cache hits - pin all action references to commit SHAs - fix container-image concurrency group to use commit SHA across all trigger types - add timeout-minutes to all jobs - document fail-fast: false rationale and checks: write trade-off	2026-03-07 18:14:36 -06:00