Commit Graph

1400 Commits

Author SHA1 Message Date
Haitao Pan
62ef2432b7 chore(docker-compose): switch images to cloudneutral namespace 2025-12-14 13:58:10 +08:00
4b83e483c8 Add XControl image readiness check workflow (#778) 2025-12-12 16:05:50 +08:00
de55da25e4 Update dashboard lockfile for Yarn 4.12 (#777) 2025-12-12 15:28:15 +08:00
7a83d195ae Fix xcontrol-init build context in workflow (#776) 2025-12-12 15:07:55 +08:00
c55dcb7f64 Adjust xcontrol-init build context (#775) 2025-12-12 14:58:39 +08:00
73882071af Fix xcontrol-init Dockerfile build context (#774) 2025-12-12 14:21:12 +08:00
Haitao Pan
68d83ce601 refactor(xcontrol-init): clean up Dockerfile build context 2025-12-12 13:51:43 +08:00
dependabot[bot]
aadb778252 build(deps): bump next from 16.0.7 to 16.0.9 in /dashboard (#773)
Bumps [next](https://github.com/vercel/next.js) from 16.0.7 to 16.0.9.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.0.7...v16.0.9)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.0.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 13:42:19 +08:00
Haitao Pan
fa8d4b3e73 feat: add Dockerfile for XControl Init service 2025-12-11 16:09:19 +08:00
67c1ca60a3 Revert "Add GCP Terraform config templates (#769)" (#770)
This reverts commit ab413ff7eb.
2025-12-08 18:03:51 +08:00
3ecca06745 Update footer social links (#771) 2025-12-08 17:56:26 +08:00
Haitao Pan
61cd126fe8 chore(ci): update default Docker Hub namespace to "cloudneutral" 2025-12-08 17:18:45 +08:00
ab413ff7eb Add GCP Terraform config templates (#769) 2025-12-08 15:51:08 +08:00
Haitao Pan
9a69d7e6b5 deploy(docker-compose): switch images to Docker Hub namespace 2025-12-06 23:25:37 +08:00
Haitao Pan
1f7c14cbe9 refactor(ci): simplify DockerHub push logic to always publish using 'latest' tag 2025-12-06 23:11:09 +08:00
Haitao Pan
183fe971c4 fix(ci): add fallback to 'latest' when TAG_NAMES is empty in DockerHub push logic 2025-12-06 23:00:57 +08:00
Haitao Pan
56308f75cc ci: unify DockerHub retag/push logic across base and service image workflows 2025-12-06 22:50:28 +08:00
Haitao Pan
ec6f66087c build(ci): unify push_images logic and add global PUSH_IMAGES env 2025-12-06 22:31:46 +08:00
Haitao Pan
605720c265 refactor(ci): unify build job names and split security stage for base and service workflows 2025-12-06 22:26:35 +08:00
Haitao Pan
2e3b372559 feat(ci): add Docker Hub namespace support and push steps to base image workflow 2025-12-06 22:11:21 +08:00
Haitao Pan
e6d5a8d5e3 feat(ci): add Docker Hub namespace support and push workflow 2025-12-06 22:03:02 +08:00
Haitao Pan
c176f3bbcf deploy: remove init service and drop unused workspace volume bindings 2025-12-06 21:21:40 +08:00
Haitao Pan
b38e3199b6 deploy: remove compose version and fix init command YAML formatting 2025-12-06 21:04:08 +08:00
Haitao Pan
209d6edeee deploy: switch docker-compose to use GHCR images instead of local builds 2025-12-06 21:00:30 +08:00
Haitao Pan
7ab9c496b7 ci: force GHCR images to public; update docker-compose to use postgres-runtime 2025-12-06 20:48:53 +08:00
Haitao Pan
ccb367d558 ci(build-service): switch base images to official Node/Golang for consistent builds
Replaced legacy GHCR base-image fallbacks with the official upstream images:
- node:22-bookworm (builder)
- node:22-slim (runtime)
- golang:1.25 (Go services)
2025-12-06 20:27:09 +08:00
81195b3144 Update OpenResty GeoIP base image and patch libraries (#767) 2025-12-06 20:19:27 +08:00
4b09dc8589 Prefer local manifests for dashboard builds (#768) 2025-12-06 20:16:38 +08:00
a5fbe511c5 Improve dashboard security baseline (#766) 2025-12-06 19:58:00 +08:00
Haitao Pan
0612c8e016 base(openresty-geoip): ship default GeoLite2 mmdb + geoip.conf bootstrap 2025-12-06 19:55:10 +08:00
cf1cbc7178 chore: bump quic-go dependencies (#765) 2025-12-06 19:39:02 +08:00
Haitao Pan
89f3c5006a chore(ci): remove unused Go/Node base images from build matrix 2025-12-06 19:28:53 +08:00
Haitao Pan
7a4ac4071a docker(dashboard): upgrade base image packages in both build and runtime stages 2025-12-06 19:19:19 +08:00
Haitao Pan
faa87a7e2b ci(base-images): fix Trivy scan ref (matrix.service → matrix.image) 2025-12-06 19:03:30 +08:00
Haitao Pan
8fb3da7ed0 ci(service-images): switch default base images to upstream node/go 2025-12-06 18:59:43 +08:00
189ecf20a8 fix: update dashboard glob dependency (#764) 2025-12-06 18:54:24 +08:00
Haitao Pan
e4ec3aa1e9 ci(base-images): add Trivy vuln scan for built images 2025-12-06 18:52:18 +08:00
Haitao Pan
bd0b0c4477 base-images: switch go-runtime to golang:1.25 and node-builder to bookworm 2025-12-06 18:36:30 +08:00
a39fe5d778 chore(account): bump quic-go (#763) 2025-12-06 18:20:24 +08:00
dependabot[bot]
3b468d2efc build(deps): bump golang.org/x/crypto in /rag-server (#761)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-06 17:27:10 +08:00
dependabot[bot]
51973b7208 build(deps): bump github.com/quic-go/quic-go in /rag-server (#762)
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.54.0 to 0.54.1.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.54.0...v0.54.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.54.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-06 17:26:36 +08:00
Haitao Pan
365af9f9d8 ci(build-service-images): switch base images to public upstream defaults
Replaced internal GHCR base images with upstream Node and Go images
(node:22-bookworm, node:22-slim, golang:1.25) to avoid auth failures
and unblock builds on fresh runners. Downstream logic unchanged.
2025-12-06 16:41:38 +08:00
Haitao Pan
517e8ca04b dashboard: drop registry override and clean up build steps 2025-12-06 16:25:40 +08:00
fb90057091 Fix cloud IaC service detail import (#760) 2025-12-06 16:13:52 +08:00
055e1d2635 Handle client-only rendering for IaC service page (#759) 2025-12-06 16:06:59 +08:00
5f5e47cb33 Fix unique keys in Cloud IaC catalog (#758) 2025-12-06 15:46:04 +08:00
Haitao Pan
1c1a09df0a updat dashboard/Dockerfile 2025-12-06 13:22:33 +08:00
2a4b63db09 Fix dashboard Docker build dependencies (#757) 2025-12-06 11:50:31 +08:00
Haitao Pan
e96833fc33 build(dashboard): bump node base images to 22-bookworm and use yarn for next build 2025-12-06 11:37:36 +08:00
c6ba42fdca Fix matrix support references in composite actions (#756) 2025-12-06 11:29:54 +08:00