dependabot[bot]
6bffb98303
chore(deps): bump the github-actions group with 3 updates ( #40 )
...
Bumps the github-actions group with 3 updates: [docker/build-push-action](https://github.com/docker/build-push-action ), [docker/metadata-action](https://github.com/docker/metadata-action ) and [docker/login-action](https://github.com/docker/login-action ).
Updates `docker/build-push-action` from b66d8774c665b789105b440514f0c97e6f19b06f to 502612d46437e573ecd598d11dd0b009741ed5cd
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/b66d8774c665b789105b440514f0c97e6f19b06f...502612d46437e573ecd598d11dd0b009741ed5cd )
Updates `docker/metadata-action` from 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b to 12e32e61d3439d838b9b6d3fda7d2f6a422f893d
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/4378dc6be7f72231dfe78ac7e0364a44f1c9f54b...12e32e61d3439d838b9b6d3fda7d2f6a422f893d )
Updates `docker/login-action` from 5c42dd293b89d96bae168b5b3694e4e72a5b1117 to bb9683dca29f758cbd6ee832740e9f2dbeb21a3e
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/5c42dd293b89d96bae168b5b3694e4e72a5b1117...bb9683dca29f758cbd6ee832740e9f2dbeb21a3e )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 502612d46437e573ecd598d11dd0b009741ed5cd
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: docker/metadata-action
dependency-version: 12e32e61d3439d838b9b6d3fda7d2f6a422f893d
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: docker/login-action
dependency-version: bb9683dca29f758cbd6ee832740e9f2dbeb21a3e
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 06:38:43 +00:00
xixu-me
9e24204f63
feat(security): harden dependency governance
2026-03-31 01:36:17 +08:00
xixu-me
0ebdaa421c
ci: manage codeql workflow in repo
2026-03-30 22:02:55 +08:00
dependabot[bot] and github-actions[bot]
a263f8e34d
chore(deps): bump the github-actions group with 3 updates ( #20 )
...
Updates the requirements on [actions/checkout](https://github.com/actions/checkout ), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) and [docker/build-push-action](https://github.com/docker/build-push-action ) to permit the latest version.
Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4 )
Updates `docker/build-push-action` to b66d8774c665b789105b440514f0c97e6f19b06f
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/commits/b66d8774c665b789105b440514f0c97e6f19b06f )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: docker/build-push-action
dependency-version: b66d8774c665b789105b440514f0c97e6f19b06f
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-03-30 01:13:53 +08:00
xixu-me
0e2bc31b73
fix(ci): separate PR validation from image publishing
...
Validate container builds inside CI for pull requests, and publish images only after CI succeeds on main or when a release tag is pushed.
2026-03-30 00:49:53 +08:00
dependabot[bot]
1d009360be
chore(deps): bump the github-actions group across 1 directory with 6 updates ( #19 )
...
Bumps the github-actions group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `4` | `6` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) | `3` | `4` |
| [docker/metadata-action](https://github.com/docker/metadata-action ) | `9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7` | `4378dc6be7f72231dfe78ac7e0364a44f1c9f54b` |
| [docker/login-action](https://github.com/docker/login-action ) | `65b78e6e13532edd9afa3aa52ac7964289d1a9c1` | `a0d57b8e43b6ef1cca20559d68cec2227e63fccd` |
| [docker/build-push-action](https://github.com/docker/build-push-action ) | `f2a1d5e99d037542a71f64918e516c093c6f3fc4` | `b66d8774c665b789105b440514f0c97e6f19b06f` |
Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v6 )
Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4 )
Updates `docker/metadata-action` from 9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 to 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7...4378dc6be7f72231dfe78ac7e0364a44f1c9f54b )
Updates `docker/login-action` from 65b78e6e13532edd9afa3aa52ac7964289d1a9c1 to a0d57b8e43b6ef1cca20559d68cec2227e63fccd
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/65b78e6e13532edd9afa3aa52ac7964289d1a9c1...a0d57b8e43b6ef1cca20559d68cec2227e63fccd )
Updates `docker/build-push-action` from f2a1d5e99d037542a71f64918e516c093c6f3fc4 to b66d8774c665b789105b440514f0c97e6f19b06f
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/f2a1d5e99d037542a71f64918e516c093c6f3fc4...b66d8774c665b789105b440514f0c97e6f19b06f )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: docker/metadata-action
dependency-version: 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: docker/login-action
dependency-version: a0d57b8e43b6ef1cca20559d68cec2227e63fccd
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: docker/build-push-action
dependency-version: b66d8774c665b789105b440514f0c97e6f19b06f
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-29 16:45:36 +00:00
xixu-me
301854727b
feat(repo): make xread standalone and self-hostable
...
Replace private shared dependencies with local implementations, keep the standalone crawl/search/serp build working, and add CI, GHCR image publishing, Dependabot updates, and green-only auto-merge automation.
2026-03-29 23:44:16 +08:00