xixu-me/xread
1
0 Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity
31 Commits 1 Branch 0 Tags
39174fa55ea1e7c01c8a5860197ba4165188d9a1
Commit Graph
31 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
xixu-me 39174fa55e ci(security): upgrade artifact upload action 2026-03-31 01:42:22 +08:00
xixu-me 9e24204f63 feat(security): harden dependency governance 2026-03-31 01:36:17 +08:00
xixu-me 4153beb619 fix(runtime): extend standalone service boot budget 2026-03-30 22:34:06 +08:00
dependabot[bot] c5b0b9d84f chore(deps): bump archiver and @types/archiver (#32) 
Bumps [archiver](https://github.com/archiverjs/node-archiver) and [@types/archiver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/archiver). These dependencies needed to be updated together.

Updates `archiver` from 6.0.2 to 7.0.1
- [Release notes](https://github.com/archiverjs/node-archiver/releases)
- [Changelog](https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md)
- [Commits](https://github.com/archiverjs/node-archiver/compare/6.0.2...7.0.1)

Updates `@types/archiver` from 5.3.4 to 7.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/archiver)

---
updated-dependencies:
- dependency-name: archiver
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/archiver"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-30 14:24:12 +00:00
dependabot[bot] a9076d72b9 chore(deps): bump jose from 5.2.4 to 6.2.2 (#30) 
Bumps [jose](https://github.com/panva/jose) from 5.2.4 to 6.2.2.
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v5.2.4...v6.2.2)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-30 14:21:54 +00:00
xixu-me ac349eae97 fix(runtime): harden standalone cold starts 2026-03-30 22:19:27 +08:00
xixu-me 0ebdaa421c ci: manage codeql workflow in repo 2026-03-30 22:02:55 +08:00
xixu-me 271901221b fix(runtime): stabilize standalone container search 2026-03-30 21:40:36 +08:00
dependabot[bot] 1542a67ba3 chore(deps): bump the production-dependencies group with 12 updates (#22) 
Bumps the production-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `0.1.68` | `0.1.97` |
| [@xmldom/xmldom](https://github.com/xmldom/xmldom) | `0.9.3` | `0.9.9` |
| [axios](https://github.com/axios/axios) | `1.13.5` | `1.14.0` |
| [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.10` | `1.11.20` |
| [koa](https://github.com/koajs/koa) | `2.16.0` | `2.16.4` |
| [koa-compress](https://github.com/koajs/compress) | `5.1.1` | `5.2.1` |
| [linkedom](https://github.com/WebReflection/linkedom) | `0.18.4` | `0.18.12` |
| [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.0.2` | `11.2.7` |
| [tiktoken](https://github.com/dqbd/tiktoken) | `1.0.16` | `1.0.22` |
| [turndown](https://github.com/mixmark-io/turndown) | `7.1.3` | `7.2.2` |
| [undici](https://github.com/nodejs/undici) | `7.24.0` | `7.24.6` |


Updates `@napi-rs/canvas` from 0.1.68 to 0.1.97
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Brooooooklyn/canvas/compare/v0.1.68...v0.1.97)

Updates `@xmldom/xmldom` from 0.9.3 to 0.9.9
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xmldom/xmldom/compare/0.9.3...0.9.9)

Updates `axios` from 1.13.5 to 1.14.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.13.5...v1.14.0)

Updates `cors` from 2.8.5 to 2.8.6
- [Release notes](https://github.com/expressjs/cors/releases)
- [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/cors/compare/v2.8.5...v2.8.6)

Updates `dayjs` from 1.11.10 to 1.11.20
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/iamkun/dayjs/compare/v1.11.10...v1.11.20)

Updates `koa` from 2.16.0 to 2.16.4
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](https://github.com/koajs/koa/compare/2.16.0...v2.16.4)

Updates `koa-compress` from 5.1.1 to 5.2.1
- [Release notes](https://github.com/koajs/compress/releases)
- [Changelog](https://github.com/koajs/compress/blob/master/HISTORY.md)
- [Commits](https://github.com/koajs/compress/compare/v5.1.1...5.2.1)

Updates `linkedom` from 0.18.4 to 0.18.12
- [Commits](https://github.com/WebReflection/linkedom/compare/v0.18.4...v0.18.12)

Updates `lru-cache` from 11.0.2 to 11.2.7
- [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-lru-cache/compare/v11.0.2...v11.2.7)

Updates `tiktoken` from 1.0.16 to 1.0.22
- [Release notes](https://github.com/dqbd/tiktoken/releases)
- [Changelog](https://github.com/dqbd/tiktoken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/dqbd/tiktoken/compare/tiktoken@1.0.16...tiktoken@1.0.22)

Updates `turndown` from 7.1.3 to 7.2.2
- [Release notes](https://github.com/mixmark-io/turndown/releases)
- [Commits](https://github.com/mixmark-io/turndown/compare/v7.1.3...v7.2.2)

Updates `undici` from 7.24.0 to 7.24.6
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.24.0...v7.24.6)

---
updated-dependencies:
- dependency-name: "@napi-rs/canvas"
  dependency-version: 0.1.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.9.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cors
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dayjs
  dependency-version: 1.11.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: koa
  dependency-version: 2.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: koa-compress
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: linkedom
  dependency-version: 0.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lru-cache
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tiktoken
  dependency-version: 1.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: turndown
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: undici
  dependency-version: 7.24.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-30 01:15:59 +00:00
dependabot[bot]xixu-megithub-actions[bot]
 		3adc9b2940 chore(deps): bump axios from 1.7.7 to 1.13.5 (#2) 
Bumps [axios](https://github.com/axios/axios) from 1.7.7 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.7.7...v1.13.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:17:09 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		7aba192c7b chore(deps): bump jws (#5) 
Bumps  and [jws](https://github.com/brianloveswords/node-jws). These dependencies needed to be updated together.

Updates `jws` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/brianloveswords/node-jws/releases)
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianloveswords/node-jws/compare/v4.0.0...v4.0.1)

Updates `jws` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/brianloveswords/node-jws/releases)
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianloveswords/node-jws/compare/v4.0.0...v4.0.1)

---
updated-dependencies:
- dependency-name: jws
  dependency-version: 4.0.1
  dependency-type: indirect
- dependency-name: jws
  dependency-version: 3.2.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:15:39 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		2a2f02d35b chore(deps): bump lodash from 4.17.21 to 4.17.23 (#6) 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:15:36 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		4085bbb4dd chore(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#8) 
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.1 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:15:31 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		4288697f76 chore(deps): bump basic-ftp from 5.0.5 to 5.2.0 (#10) 
Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp) from 5.0.5 to 5.2.0.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases)
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.0.5...v5.2.0)

---
updated-dependencies:
- dependency-name: basic-ftp
  dependency-version: 5.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:15:28 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		a6c181c546 chore(deps): bump brace-expansion from 1.1.11 to 1.1.13 (#11) 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:14:41 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		e2a5cd4df0 chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#12) 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:14:37 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		090a0cad5a chore(deps): bump tar-fs (#13) 
Bumps  and [tar-fs](https://github.com/mafintosh/tar-fs). These dependencies needed to be updated together.

Updates `tar-fs` from 2.1.1 to 2.1.4
- [Commits](https://github.com/mafintosh/tar-fs/compare/v2.1.1...v2.1.4)

Updates `tar-fs` from 3.0.6 to 3.1.2
- [Commits](https://github.com/mafintosh/tar-fs/compare/v2.1.1...v2.1.4)

---
updated-dependencies:
- dependency-name: tar-fs
  dependency-version: 2.1.4
  dependency-type: indirect
- dependency-name: tar-fs
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:14:34 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		35ecd69a82 chore(deps): bump form-data (#14) 
Bumps  and [form-data](https://github.com/form-data/form-data). These dependencies needed to be updated together.

Updates `form-data` from 2.5.1 to 2.5.5
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v2.5.1...v2.5.5)

Updates `form-data` from 4.0.0 to 4.0.5
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v2.5.1...v2.5.5)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 2.5.5
  dependency-type: indirect
- dependency-name: form-data
  dependency-version: 4.0.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:14:26 +08:00
dependabot[bot]xixu-megithub-actions[bot]
 		daba0c280f chore(deps): bump node-forge from 1.3.1 to 1.4.0 (#15) 
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:14:22 +08:00
dependabot[bot]andgithub-actions[bot] a263f8e34d chore(deps): bump the github-actions group with 3 updates (#20) 
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action) to permit the latest version.

Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

Updates `docker/build-push-action` to b66d8774c665b789105b440514f0c97e6f19b06f
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/commits/b66d8774c665b789105b440514f0c97e6f19b06f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: b66d8774c665b789105b440514f0c97e6f19b06f
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-03-30 01:13:53 +08:00
xixu-me 8d94a7d5bb fix(deps): keep dependabot queue moving 
Refresh open Dependabot pull requests after successful main-branch CI runs so auto-merge can continue through the queue.
 2026-03-30 01:07:32 +08:00
dependabot[bot]andxixu-me 536e658d24 chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 (#16) 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
 2026-03-29 17:05:29 +00:00
xixu-me 7cba867cd6 fix(deps): stabilize dependabot auto-merge 
Ignore unsupported major dependency upgrades and update stale Dependabot branches before enabling auto-merge.
 2026-03-30 01:03:47 +08:00
dependabot[bot]andxixu-me b51596e8d6 chore(deps): bump undici from 7.8.0 to 7.24.0 (#17) 
Bumps [undici](https://github.com/nodejs/undici) from 7.8.0 to 7.24.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.8.0...v7.24.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.24.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
 2026-03-29 17:00:20 +00:00
xixu-me 0e2bc31b73 fix(ci): separate PR validation from image publishing 
Validate container builds inside CI for pull requests, and publish images only after CI succeeds on main or when a release tag is pushed.
 2026-03-30 00:49:53 +08:00
dependabot[bot] 1d009360be chore(deps): bump the github-actions group across 1 directory with 6 updates (#19) 
Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7` | `4378dc6be7f72231dfe78ac7e0364a44f1c9f54b` |
| [docker/login-action](https://github.com/docker/login-action) | `65b78e6e13532edd9afa3aa52ac7964289d1a9c1` | `a0d57b8e43b6ef1cca20559d68cec2227e63fccd` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `f2a1d5e99d037542a71f64918e516c093c6f3fc4` | `b66d8774c665b789105b440514f0c97e6f19b06f` |



Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

Updates `docker/metadata-action` from 9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 to 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7...4378dc6be7f72231dfe78ac7e0364a44f1c9f54b)

Updates `docker/login-action` from 65b78e6e13532edd9afa3aa52ac7964289d1a9c1 to a0d57b8e43b6ef1cca20559d68cec2227e63fccd
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/65b78e6e13532edd9afa3aa52ac7964289d1a9c1...a0d57b8e43b6ef1cca20559d68cec2227e63fccd)

Updates `docker/build-push-action` from f2a1d5e99d037542a71f64918e516c093c6f3fc4 to b66d8774c665b789105b440514f0c97e6f19b06f
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/f2a1d5e99d037542a71f64918e516c093c6f3fc4...b66d8774c665b789105b440514f0c97e6f19b06f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: a0d57b8e43b6ef1cca20559d68cec2227e63fccd
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: b66d8774c665b789105b440514f0c97e6f19b06f
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-29 16:45:36 +00:00
xixu-me 9e9c1f238e fix(ci): prepare licensed assets for image builds 
Generate the licensed GeoLite asset before docker/build-push-action runs so the Dockerfile can copy the licensed directory in GitHub Actions.
 2026-03-30 00:43:04 +08:00
xixu-me c0b04320e1 fix(ci): repair github actions runners 
Use the repository-installed TypeScript compiler in CI tests and restore docker/setup-buildx-action so the container workflow can use the GitHub Actions cache backend.
 2026-03-30 00:39:24 +08:00
xixu-me fb86cab3f3 chore(vscode): remove stale private dev config 
Drop the unused thinapps-shared submodule entry and simplify VS Code launch profiles to the standalone crawl, search, and serp entrypoints used by the open-source version.
 2026-03-30 00:23:09 +08:00
xixu-me 301854727b feat(repo): make xread standalone and self-hostable 
Replace private shared dependencies with local implementations, keep the standalone crawl/search/serp build working, and add CI, GHCR image publishing, Dependabot updates, and green-only auto-merge automation.
 2026-03-29 23:44:16 +08:00
xixu-me ec8f135392 Initial commit 2026-03-29 21:39:05 +08:00