dependabot[bot] and xixu-me
c4cf454668
chore(deps): bump node from 22-bookworm-slim to 26-bookworm-slim ( #67 )
...
* chore(deps): bump node from 22-bookworm-slim to 26-bookworm-slim
Bumps node from 22-bookworm-slim to 26-bookworm-slim.
---
updated-dependencies:
- dependency-name: node
dependency-version: 26-bookworm-slim
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix(ci): align Node 26 runtime policy
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me >
2026-05-30 09:41:50 +00:00
dependabot[bot] and xixu-me
e25e773bf3
chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 ( #47 )
...
* chore(deps): bump basic-ftp from 5.2.1 to 5.2.2
Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp ) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases )
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.2.1...v5.2.2 )
---
updated-dependencies:
- dependency-name: basic-ftp
dependency-version: 5.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix: unblock dependency audit for pr 47
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me >
2026-04-11 02:22:16 +00:00
xixu-me
7e9a47c949
fix: pin secure lodash runtime dependency ( #44 )
2026-04-06 17:59:31 +08:00
xixu-me
bc26578f0a
fix(ci): restore post-format build checks
2026-03-31 06:13:15 +08:00
xixu-me
de296d39d8
chore(repo): format codebase and refine docs
2026-03-31 06:08:47 +08:00
xixu-me
60e9e33a71
chore(deps): ignore incompatible runtime majors
2026-03-31 02:07:51 +08:00
xixu-me
6ddf1359ba
chore(deps): absorb safe automation updates
2026-03-31 02:06:29 +08:00
xixu-me
23f819f280
chore(repo): absorb majors and remove stale cloud surface
2026-03-31 02:00:51 +08:00
xixu-me
39174fa55e
ci(security): upgrade artifact upload action
2026-03-31 01:42:22 +08:00
xixu-me
9e24204f63
feat(security): harden dependency governance
2026-03-31 01:36:17 +08:00
xixu-me
4153beb619
fix(runtime): extend standalone service boot budget
2026-03-30 22:34:06 +08:00
xixu-me
ac349eae97
fix(runtime): harden standalone cold starts
2026-03-30 22:19:27 +08:00
xixu-me
0ebdaa421c
ci: manage codeql workflow in repo
2026-03-30 22:02:55 +08:00
xixu-me
271901221b
fix(runtime): stabilize standalone container search
2026-03-30 21:40:36 +08:00
xixu-me
8d94a7d5bb
fix(deps): keep dependabot queue moving
...
Refresh open Dependabot pull requests after successful main-branch CI runs so auto-merge can continue through the queue.
2026-03-30 01:07:32 +08:00
xixu-me
7cba867cd6
fix(deps): stabilize dependabot auto-merge
...
Ignore unsupported major dependency upgrades and update stale Dependabot branches before enabling auto-merge.
2026-03-30 01:03:47 +08:00
xixu-me
0e2bc31b73
fix(ci): separate PR validation from image publishing
...
Validate container builds inside CI for pull requests, and publish images only after CI succeeds on main or when a release tag is pushed.
2026-03-30 00:49:53 +08:00
xixu-me
c0b04320e1
fix(ci): repair github actions runners
...
Use the repository-installed TypeScript compiler in CI tests and restore docker/setup-buildx-action so the container workflow can use the GitHub Actions cache backend.
2026-03-30 00:39:24 +08:00
xixu-me
301854727b
feat(repo): make xread standalone and self-hostable
...
Replace private shared dependencies with local implementations, keep the standalone crawl/search/serp build working, and add CI, GHCR image publishing, Dependabot updates, and green-only auto-merge automation.
2026-03-29 23:44:16 +08:00
dependabot[bot]andxixu-me