Commit Graph

1258 Commits

Author SHA1 Message Date
Haitao Pan
99fe1f33b3 chore(docker): install make in builder stage and clean runtime env vars 2025-12-04 21:44:46 +08:00
Haitao Pan
9aef9281fe refactor(build): enable standalone next.js build and fix rag-server Dockerfile paths 2025-12-04 21:40:58 +08:00
Haitao Pan
b059fbd265 build(dashboard): refactor Dockerfile to two-stage COPY + make build workflow 2025-12-04 21:27:53 +08:00
Haitao Pan
47fb88f55c ci: simplify image fallback logic with non-empty defaults 2025-12-04 21:17:38 +08:00
Haitao Pan
437b367032 ci(build-service-images): add default node/go runtime image values 2025-12-04 21:09:56 +08:00
Haitao Pan
5264ffc9eb refactor(docker): replace GO_BASE_IMAGE with GO_RUNTIME_IMAGE across Dockerfiles 2025-12-04 21:04:31 +08:00
Haitao Pan
d733981c22 ci(service-images): remove image-ref indirection and simplify build args 2025-12-04 20:58:53 +08:00
Haitao Pan
95e2a94461 ci: simplify service image workflow by removing prepare-image-refs indirection 2025-12-04 20:52:03 +08:00
Haitao Pan
bc13268279 ci(workflow): rename base-image inputs and simplify service build
Replaces the old *_digest inputs with clearer *_image references that
accept full repo URLs. Cleans up the service matrix and switches the
build step to proper context/file usage. Removes unused base image args
to match current service needs.
2025-12-04 20:42:33 +08:00
9a5ee27cb2 Adjust workflow build directories (#749) 2025-12-04 20:28:44 +08:00
Haitao Pan
e8964a9902 fix(account,ci): adjust image digests and simplify account config handling 2025-12-04 20:21:57 +08:00
Haitao Pan
c3fab178d8 ci(pipeline): fix CD job dependency to wait for service image build 2025-12-04 19:54:33 +08:00
0f14da2623 Extract base image preparation script (#748) 2025-12-04 19:48:46 +08:00
dependabot[bot]
e557cc9070 build(deps): bump golang.org/x/crypto in /light-idp/idp-server (#677)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.36.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.36.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 19:47:12 +08:00
dependabot[bot]
d77bd83cf0 chore(deps): bump next from 16.0.1 to 16.0.7 in /dashboard (#736)
Bumps [next](https://github.com/vercel/next.js) from 16.0.1 to 16.0.7.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.0.1...v16.0.7)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.0.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 19:45:50 +08:00
2d9294f002 Update service build workflow inputs (#747) 2025-12-04 16:14:19 +08:00
Haitao Pan
060a089f55 chore: workflow tweaks + go-runtime rename + Dockerfile fixes 2025-12-04 15:07:23 +08:00
Haitao Pan
a0c9e328ef merged: go-runtime.Dockerfile & go-builder.Dockerfile -> go-base.Dockerfile 2025-12-04 14:52:33 +08:00
692a990098 Use default registry for base image workflow (#746) 2025-12-04 14:39:51 +08:00
82cc98ff07 Update Go base images to Ubuntu 24.04 (#745) 2025-12-04 14:31:24 +08:00
Haitao Pan
affeb3fbb9 reverted: build-base-images.yml 2025-12-04 14:17:03 +08:00
Haitao Pan
859a2a4902 ci(build-base-images): correct workflow name to 'Build Base Images' 2025-12-04 14:09:13 +08:00
Haitao Pan
1fdd130b7d ci(build-service-images): remove illegal GITHUB_TOKEN declaration 2025-12-04 14:07:41 +08:00
Haitao Pan
3cf600c13d ci: rewrite base-image workflow into service-image builder 2025-12-04 14:04:39 +08:00
b8b5c18511 Fix build-service workflow secrets declaration (#744) 2025-12-04 13:53:38 +08:00
7b71201841 Fix workflow syntax issues (#743) 2025-12-04 13:43:43 +08:00
0d45148d5d Fix workflow secrets inheritance usage (#742) 2025-12-04 13:39:04 +08:00
b18ba8162d Fix pipeline workflow syntax (#741) 2025-12-04 13:33:36 +08:00
Haitao Pan
48eb1b79df ci: replace composite actions with reusable workflows and extract scripts 2025-12-04 13:20:52 +08:00
Haitao Pan
364857c691 ci(build): move image build steps out of build action into main pipeline 2025-12-04 11:59:36 +08:00
Haitao Pan
2eadd6d310 ci(pipeline): split CI and CD stages; remove env from CI jobs
CI jobs no longer carry environment vars and depend only on branches.
Deploy remains environment-aware and runs only on workflow_dispatch.
2025-12-04 11:34:29 +08:00
e48b05806e Refine GitHub actions matrix support (#740) 2025-12-04 11:34:10 +08:00
a76acab06d Fix workflow environment handling (#739) 2025-12-04 11:10:25 +08:00
92634d2518 Reorganize build image workflows (#738) 2025-12-04 11:04:59 +08:00
Haitao Pan
0259f56cc3 ci(pipeline): refactor GitHub Actions to simplify matrix and unify environment control 2025-12-04 11:03:31 +08:00
Haitao Pan
3acd9512e5 ci(pipeline): replace YAML anchors with global matrix env vars
GitHub Actions does not support YAML anchors (`x-matrix`), so the
pipeline has been updated to use JSON-based global matrix variables
(MATRIX_PLATFORM / MATRIX_SERVICE / MATRIX_ENVIRONMENT) and
fromJson() inside each job's strategy.

No logic changed: the 5-stage pipeline (code-quality → build → test
→ security → deploy) keeps the same matrix behaviour with a single
source of truth.
2025-12-04 10:54:50 +08:00
8ee35d1765 Refactor CI pipeline with matrix stages (#737) 2025-12-04 10:40:18 +08:00
Haitao Pan
e7847fa690 update workflows/build-and-release.yml 2025-12-03 23:00:30 +08:00
4971fd45fd Merge pull request #735 from cloud-neutral-toolkit/codex/update-build-service-images.yml-inputs 2025-12-03 20:53:19 +08:00
fd1cfc5238 chore: wire service builds to base image digests 2025-12-03 19:01:01 +08:00
Haitao Pan
33958d6da8 ci: replace metadata-action with reusable auto-tag action 2025-12-03 18:36:13 +08:00
Haitao Pan
3fb57b094c ci: versioned build for pg + jieba + pgmq + vector extensions
- ARG PG_JIEBA_VERSION=v2.0.1
- ARG PG_VECTOR_VERSION=v0.8.1
- ARG PGMQ_VERSION=v1.8.0
2025-12-03 18:17:00 +08:00
Haitao Pan
3bacad3e36 ci: update GHCR org to cloud-neutral-toolkit 2025-12-03 17:59:29 +08:00
Haitao Pan
b59c8f1f2c feat(postgres-runtime): add pgmq support and clean up pg_cache remnants
- remove unused pg_cache build steps
- add pgmq (Postgres message queue) build and installation
- ensure pg_jieba build installs correctly via cmake
- update runtime description to reflect pgmq inclusion
- standardize build-stage layout and file copy structure
2025-12-03 17:44:22 +08:00
Haitao Pan
bfc69490fd fix(pg-base-image): fully stabilize pg_jieba build by adding cppjieba include path patch 2025-12-03 17:12:20 +08:00
99a8fe2745 Ensure pg_jieba clones submodules (#734) 2025-12-03 17:06:05 +08:00
Haitao Pan
f35e853dee feat(postgres-runtime): switch to ubuntu 24.04 base and rebuild extensions
Includes pgdg repo, pg_jieba, pg_cache, and pgvector via apt.
2025-12-03 16:58:26 +08:00
Haitao Pan
8de3d27c7e postgres-runtime: build pg_jieba / pg_cache extensions and update pgvector setup
Refined the Dockerfile for Postgres 16 runtime image:
- Add cmake + build toolchain for pg_jieba / pg_cache
- Fix include paths for PG_MAJOR=16
- Ensure all extensions are precompiled into the base image
2025-12-03 16:47:05 +08:00
Haitao Pan
e4bf655e94 rename postgres-extensions.Dockerfile -> postgres-runtime-wth-extensions.Dockerfile 2025-12-03 16:08:52 +08:00
8f74d84225 Fix base image workflow inputs and runtime build (#733) 2025-12-03 15:55:36 +08:00