Haitao Pan
0cf1dd9b04
ci: unify DockerHub retag/push logic across base and service image workflows
2025-12-06 22:50:28 +08:00
Haitao Pan
6a5a593bac
build(ci): unify push_images logic and add global PUSH_IMAGES env
2025-12-06 22:31:46 +08:00
Haitao Pan
7068c7c964
refactor(ci): unify build job names and split security stage for base and service workflows
2025-12-06 22:26:35 +08:00
Haitao Pan
ee7738222d
feat(ci): add Docker Hub namespace support and push steps to base image workflow
2025-12-06 22:11:21 +08:00
Haitao Pan
8dc9a62e76
feat(ci): add Docker Hub namespace support and push workflow
2025-12-06 22:03:02 +08:00
Haitao Pan
33a6dd8d44
deploy: remove init service and drop unused workspace volume bindings
2025-12-06 21:21:40 +08:00
Haitao Pan
325193f07e
deploy: remove compose version and fix init command YAML formatting
2025-12-06 21:04:08 +08:00
Haitao Pan
ed01e3bce3
deploy: switch docker-compose to use GHCR images instead of local builds
2025-12-06 21:00:30 +08:00
Haitao Pan
bc2aec193b
ci: force GHCR images to public; update docker-compose to use postgres-runtime
2025-12-06 20:48:53 +08:00
Haitao Pan
50169300e3
ci(build-service): switch base images to official Node/Golang for consistent builds
...
Replaced legacy GHCR base-image fallbacks with the official upstream images:
- node:22-bookworm (builder)
- node:22-slim (runtime)
- golang:1.25 (Go services)
2025-12-06 20:27:09 +08:00
999a9127d9
Update OpenResty GeoIP base image and patch libraries ( #767 )
2025-12-06 20:19:27 +08:00
1e66b6a3fe
Prefer local manifests for dashboard builds ( #768 )
2025-12-06 20:16:38 +08:00
25e1c13398
Improve dashboard security baseline ( #766 )
2025-12-06 19:58:00 +08:00
Haitao Pan
d191f87954
base(openresty-geoip): ship default GeoLite2 mmdb + geoip.conf bootstrap
2025-12-06 19:55:10 +08:00
0aeaaa3934
chore: bump quic-go dependencies ( #765 )
2025-12-06 19:39:02 +08:00
Haitao Pan
7a7e99f9e9
chore(ci): remove unused Go/Node base images from build matrix
2025-12-06 19:28:53 +08:00
Haitao Pan
1787083d3e
docker(dashboard): upgrade base image packages in both build and runtime stages
2025-12-06 19:19:19 +08:00
Haitao Pan
7e7b21f053
ci(base-images): fix Trivy scan ref (matrix.service → matrix.image)
2025-12-06 19:03:30 +08:00
Haitao Pan
c2e0d18f31
ci(service-images): switch default base images to upstream node/go
2025-12-06 18:59:43 +08:00
69676cdc04
fix: update dashboard glob dependency ( #764 )
2025-12-06 18:54:24 +08:00
Haitao Pan
07e11cc18d
ci(base-images): add Trivy vuln scan for built images
2025-12-06 18:52:18 +08:00
Haitao Pan
4a230bfb0d
base-images: switch go-runtime to golang:1.25 and node-builder to bookworm
2025-12-06 18:36:30 +08:00
e51a2443b6
chore(account): bump quic-go ( #763 )
2025-12-06 18:20:24 +08:00
dependabot[bot]
d4eb45fb85
build(deps): bump golang.org/x/crypto in /rag-server ( #761 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.45.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-06 17:27:10 +08:00
dependabot[bot]
329cdadaea
build(deps): bump github.com/quic-go/quic-go in /rag-server ( #762 )
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.54.0 to 0.54.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.54.0...v0.54.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.54.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-06 17:26:36 +08:00
Haitao Pan
754327b559
ci(build-service-images): switch base images to public upstream defaults
...
Replaced internal GHCR base images with upstream Node and Go images
(node:22-bookworm, node:22-slim, golang:1.25) to avoid auth failures
and unblock builds on fresh runners. Downstream logic unchanged.
2025-12-06 16:41:38 +08:00
Haitao Pan
47cf30fbdc
dashboard: drop registry override and clean up build steps
2025-12-06 16:25:40 +08:00
2e4a874c97
Fix cloud IaC service detail import ( #760 )
2025-12-06 16:13:52 +08:00
c0b22c314d
Handle client-only rendering for IaC service page ( #759 )
2025-12-06 16:06:59 +08:00
eca08bfd38
Fix unique keys in Cloud IaC catalog ( #758 )
2025-12-06 15:46:04 +08:00
Haitao Pan
3b3d217569
updat dashboard/Dockerfile
2025-12-06 13:22:33 +08:00
8a569b3790
Fix dashboard Docker build dependencies ( #757 )
2025-12-06 11:50:31 +08:00
Haitao Pan
7ac71fc1d5
build(dashboard): bump node base images to 22-bookworm and use yarn for next build
2025-12-06 11:37:36 +08:00
f3313c9c8f
Fix matrix support references in composite actions ( #756 )
2025-12-06 11:29:54 +08:00
f909a2592e
Fix download page type import ( #755 )
2025-12-06 11:21:30 +08:00
967576dfb1
Rebuild docker-compose stack for XControl ( #754 )
2025-12-06 11:11:20 +08:00
f1dc8e3668
Use public Node images for dashboard build ( #753 )
2025-12-06 11:01:37 +08:00
236a5d1a77
Fix account module path ( #751 )
...
* Fix module path for account service
* Restructure account module path
2025-12-06 10:32:31 +08:00
1d08955b07
Fix rag-server module path ( #752 )
...
* Fix rag-server module path
* Align rag-server module imports
2025-12-06 10:27:24 +08:00
Haitao Pan
9e35a09acf
fix(makefile): add idempotent go mod init for account and rag-server
2025-12-06 10:09:06 +08:00
Haitao Pan
5b2bf946f6
fix(go-modules): correct module paths for account and rag-server
...
Split repositories into two standalone Go modules and fixed their
respective Makefile init targets. Updated:
- account: module → `account`
- rag-server: module → `rag-server`
2025-12-06 10:00:34 +08:00
Haitao Pan
3031a59d6b
chore(docker): bump Go base image to 1.25 for account and rag-server
2025-12-05 00:41:45 +08:00
Haitao Pan
42ae5f245f
feat: add go modules for account & rag-server services
2025-12-05 00:38:33 +08:00
Haitao Pan
cffa35b481
fix(rag-server): correct Dockerfile WORKDIR so go.mod is detected during build
2025-12-04 23:44:55 +08:00
Haitao Pan
bfcbc1f735
fix(rag-server): correct Dockerfile WORKDIR so go.mod is detected during build
2025-12-04 23:37:22 +08:00
Haitao Pan
8bb2d3b3ab
fix(docker): install curl in builder image for init-go
2025-12-04 23:25:09 +08:00
Haitao Pan
1cc683eaee
build: ensure Go init runs before binary compilation
2025-12-04 23:20:47 +08:00
Haitao Pan
d0a5a613af
fix(docker): expose GO_VERSION arg in builder stages
...
Builder images install Go SDK and must receive GO_VERSION explicitly.
Adds missing ARG to account and rag-server Dockerfiles.
2025-12-04 23:15:00 +08:00
Haitao Pan
59cfd6c397
build: drop ARG gymnastics; embed Go install in builder stages
2025-12-04 23:11:20 +08:00
Haitao Pan
a6ee35499f
ci(docker): simplify Go builder pipeline and trim runtime images
2025-12-04 22:57:12 +08:00
