fix: convert to standard htpasswd 4-workflow pattern #9

Merged

jcabillot merged 5 commits from fix/workflow-standard into master 2026-06-13 19:48:11 -04:00

Conversation 0 Commits 5 Files Changed 4

+121 -58

cloudix_mcp_server commented 2026-06-13 17:43:31 -04:00

Owner

Copy Link

Copy Source

Convert Gitea Actions workflows to the standard htpasswd 4-workflow pattern used across web/* repos.

Changes

cron.yaml (Nightly Rebuild)

• Keep original schedule: 0 0 * * *
• Add hadolint job (lint Dockerfile, continue-on-error: true)
• Add test job (build ci-image, run tests)
• Convert build-push job: add fetch-depth: 0, get-latest-tag logic, tag with {version}-latest
• Add version comments (# v6, # v4, etc.) on all uses: directives
• Add pull: true on build-push action

main.yaml (Main Release)

• Add hadolint job (continue-on-error: true)
• Add test job
• Add build job (build production image with SHA tag)
• Add tag job: configure git auth with SA_TOKEN_ACTION_PUSH_TAGS, bump version on push to master
• Version comments on all uses: directives

pr.yaml (PR Checks)

• Rename job lint → hadolint, add version comments
• Merge lint + test into single build-test job (matches htpasswd pattern)

tag.yaml (Tag Release)

• Change trigger from branches: [master] to tags: ['*']
• Add full pipeline: hadolint → test → build-push (login + metadata + push to Docker Hub)
• Tags: type=ref,event=tag and type=ref,event=tag,suffix=-latest
• Version comments, pull: true

Key changes from old pattern

• No direct Docker push on push-to-master (only on cron or tag events)
• Uses SA_TOKEN_ACTION_PUSH_TAGS secret for automated tag creation
• All actions pinned with SHA + version comments for Renovate compatibility

Convert Gitea Actions workflows to the standard htpasswd 4-workflow pattern used across web/* repos. ## Changes ### cron.yaml (Nightly Rebuild) - Keep original schedule: `0 0 * * *` - Add `hadolint` job (lint Dockerfile, continue-on-error: true) - Add `test` job (build ci-image, run tests) - Convert `build-push` job: add `fetch-depth: 0`, get-latest-tag logic, tag with `{version}-latest` - Add version comments (`# v6`, `# v4`, etc.) on all `uses:` directives - Add `pull: true` on build-push action ### main.yaml (Main Release) - Add `hadolint` job (continue-on-error: true) - Add `test` job - Add `build` job (build production image with SHA tag) - Add `tag` job: configure git auth with `SA_TOKEN_ACTION_PUSH_TAGS`, bump version on push to master - Version comments on all `uses:` directives ### pr.yaml (PR Checks) - Rename job `lint` → `hadolint`, add version comments - Merge `lint` + `test` into single `build-test` job (matches htpasswd pattern) ### tag.yaml (Tag Release) - Change trigger from `branches: [master]` to `tags: ['*']` - Add full pipeline: hadolint → test → build-push (login + metadata + push to Docker Hub) - Tags: `type=ref,event=tag` and `type=ref,event=tag,suffix=-latest` - Version comments, `pull: true` ## Key changes from old pattern - No direct Docker push on push-to-master (only on cron or tag events) - Uses `SA_TOKEN_ACTION_PUSH_TAGS` secret for automated tag creation - All actions pinned with SHA + version comments for Renovate compatibility

cloudix_mcp_server added 1 commit 2026-06-13 17:43:32 -04:00

fix: convert to standard htpasswd 4-workflow pattern c005407b75

cloudix_mcp_server added 1 commit 2026-06-13 19:19:48 -04:00

fix: correct SHAs in cron.yaml 931ac7e92d

cloudix_mcp_server added 1 commit 2026-06-13 19:19:53 -04:00

fix: correct SHAs in main.yaml 317fd824e9

cloudix_mcp_server added 1 commit 2026-06-13 19:19:56 -04:00

fix: correct SHAs in pr.yaml 5e6d38e93b

cloudix_mcp_server added 1 commit 2026-06-13 19:20:03 -04:00

fix: correct SHAs in tag.yaml 4c25a96786

jcabillot merged commit c5dfef7156 into master 2026-06-13 19:48:11 -04:00

jcabillot deleted branch fix/workflow-standard 2026-06-13 19:48:15 -04:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Assignees

Clear assignees

cloudix_mcp_server fluxcd jcabillot opencodecabilloteu renovate

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: web/dokuwiki#9