Commit Graph
12 Commits
Author SHA1 Message Date
dependabot[bot] 70fdae69e8 chore(deps): bump the github-actions group across 1 directory with 4 updates
Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [docker/build-push-action](https://github.com/docker/build-push-action), [docker/metadata-action](https://github.com/docker/metadata-action) and [docker/login-action](https://github.com/docker/login-action).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

Updates `docker/build-push-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/f9f3042f7e2789586610d6e8b85c8f03e5195baf...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a)

Updates `docker/metadata-action` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302)

Updates `docker/login-action` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-03 15:37:28 +00:00
dependabot[bot]andxixu-me c4cf454668 chore(deps): bump node from 22-bookworm-slim to 26-bookworm-slim (#67)
* chore(deps): bump node from 22-bookworm-slim to 26-bookworm-slim

Bumps node from 22-bookworm-slim to 26-bookworm-slim.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 26-bookworm-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(ci): align Node 26 runtime policy

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
2026-05-30 09:41:50 +00:00
dependabot[bot] 75b7a65b7e chore(deps): bump the github-actions group with 3 updates (#73)
Bumps the github-actions group with 3 updates: [docker/build-push-action](https://github.com/docker/build-push-action), [docker/metadata-action](https://github.com/docker/metadata-action) and [docker/login-action](https://github.com/docker/login-action).


Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...f9f3042f7e2789586610d6e8b85c8f03e5195baf)

Updates `docker/metadata-action` from 4f5b5234679dfa19837d4942067c97d7df43b7b3 to 80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/4f5b5234679dfa19837d4942067c97d7df43b7b3...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9)

Updates `docker/login-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 01:56:26 +00:00
dependabot[bot] 67aefe56c1 chore(deps): bump the github-actions group with 2 updates (#50)
Bumps the github-actions group with 2 updates: [docker/build-push-action](https://github.com/docker/build-push-action) and [docker/metadata-action](https://github.com/docker/metadata-action).


Updates `docker/build-push-action` from 83bfd93ab480705a7b99a2ed02765137f5ab55ba to bcafcacb16a39f128d818304e6c9c0c18556b85f
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/83bfd93ab480705a7b99a2ed02765137f5ab55ba...bcafcacb16a39f128d818304e6c9c0c18556b85f)

Updates `docker/metadata-action` from c3b064c6d7c32446d6bc214ea075f1caad2de35a to a7807070e67ad478bd5f672f499303a151742e53
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/c3b064c6d7c32446d6bc214ea075f1caad2de35a...a7807070e67ad478bd5f672f499303a151742e53)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: bcafcacb16a39f128d818304e6c9c0c18556b85f
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: a7807070e67ad478bd5f672f499303a151742e53
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-13 01:39:42 +00:00
dependabot[bot]andxixu-me f3a29528aa chore(deps): bump the github-actions group with 3 updates (#43)
Bumps the github-actions group with 3 updates: [docker/build-push-action](https://github.com/docker/build-push-action), [docker/metadata-action](https://github.com/docker/metadata-action) and [docker/login-action](https://github.com/docker/login-action).


Updates `docker/build-push-action` from 502612d46437e573ecd598d11dd0b009741ed5cd to 83bfd93ab480705a7b99a2ed02765137f5ab55ba
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/502612d46437e573ecd598d11dd0b009741ed5cd...83bfd93ab480705a7b99a2ed02765137f5ab55ba)

Updates `docker/metadata-action` from 12e32e61d3439d838b9b6d3fda7d2f6a422f893d to c3b064c6d7c32446d6bc214ea075f1caad2de35a
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/12e32e61d3439d838b9b6d3fda7d2f6a422f893d...c3b064c6d7c32446d6bc214ea075f1caad2de35a)

Updates `docker/login-action` from bb9683dca29f758cbd6ee832740e9f2dbeb21a3e to 4907a6ddec9925e35a0a9e82d7399ccc52663121
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/bb9683dca29f758cbd6ee832740e9f2dbeb21a3e...4907a6ddec9925e35a0a9e82d7399ccc52663121)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 83bfd93ab480705a7b99a2ed02765137f5ab55ba
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: c3b064c6d7c32446d6bc214ea075f1caad2de35a
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4907a6ddec9925e35a0a9e82d7399ccc52663121
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xi Xu <i@xi-xu.me>
2026-04-06 10:04:30 +00:00
dependabot[bot] 6bffb98303 chore(deps): bump the github-actions group with 3 updates (#40)
Bumps the github-actions group with 3 updates: [docker/build-push-action](https://github.com/docker/build-push-action), [docker/metadata-action](https://github.com/docker/metadata-action) and [docker/login-action](https://github.com/docker/login-action).


Updates `docker/build-push-action` from b66d8774c665b789105b440514f0c97e6f19b06f to 502612d46437e573ecd598d11dd0b009741ed5cd
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/b66d8774c665b789105b440514f0c97e6f19b06f...502612d46437e573ecd598d11dd0b009741ed5cd)

Updates `docker/metadata-action` from 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b to 12e32e61d3439d838b9b6d3fda7d2f6a422f893d
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/4378dc6be7f72231dfe78ac7e0364a44f1c9f54b...12e32e61d3439d838b9b6d3fda7d2f6a422f893d)

Updates `docker/login-action` from 5c42dd293b89d96bae168b5b3694e4e72a5b1117 to bb9683dca29f758cbd6ee832740e9f2dbeb21a3e
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/5c42dd293b89d96bae168b5b3694e4e72a5b1117...bb9683dca29f758cbd6ee832740e9f2dbeb21a3e)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 502612d46437e573ecd598d11dd0b009741ed5cd
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 12e32e61d3439d838b9b6d3fda7d2f6a422f893d
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: bb9683dca29f758cbd6ee832740e9f2dbeb21a3e
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 06:38:43 +00:00
xixu-me 9e24204f63 feat(security): harden dependency governance 2026-03-31 01:36:17 +08:00
xixu-me 0ebdaa421c ci: manage codeql workflow in repo 2026-03-30 22:02:55 +08:00
dependabot[bot]andgithub-actions[bot] a263f8e34d chore(deps): bump the github-actions group with 3 updates (#20)
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action) to permit the latest version.

Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

Updates `docker/build-push-action` to b66d8774c665b789105b440514f0c97e6f19b06f
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/commits/b66d8774c665b789105b440514f0c97e6f19b06f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: b66d8774c665b789105b440514f0c97e6f19b06f
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-03-30 01:13:53 +08:00
xixu-me 0e2bc31b73 fix(ci): separate PR validation from image publishing
Validate container builds inside CI for pull requests, and publish images only after CI succeeds on main or when a release tag is pushed.
2026-03-30 00:49:53 +08:00
dependabot[bot] 1d009360be chore(deps): bump the github-actions group across 1 directory with 6 updates (#19)
Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7` | `4378dc6be7f72231dfe78ac7e0364a44f1c9f54b` |
| [docker/login-action](https://github.com/docker/login-action) | `65b78e6e13532edd9afa3aa52ac7964289d1a9c1` | `a0d57b8e43b6ef1cca20559d68cec2227e63fccd` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `f2a1d5e99d037542a71f64918e516c093c6f3fc4` | `b66d8774c665b789105b440514f0c97e6f19b06f` |



Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

Updates `docker/metadata-action` from 9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 to 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7...4378dc6be7f72231dfe78ac7e0364a44f1c9f54b)

Updates `docker/login-action` from 65b78e6e13532edd9afa3aa52ac7964289d1a9c1 to a0d57b8e43b6ef1cca20559d68cec2227e63fccd
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/65b78e6e13532edd9afa3aa52ac7964289d1a9c1...a0d57b8e43b6ef1cca20559d68cec2227e63fccd)

Updates `docker/build-push-action` from f2a1d5e99d037542a71f64918e516c093c6f3fc4 to b66d8774c665b789105b440514f0c97e6f19b06f
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/f2a1d5e99d037542a71f64918e516c093c6f3fc4...b66d8774c665b789105b440514f0c97e6f19b06f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/metadata-action
  dependency-version: 4378dc6be7f72231dfe78ac7e0364a44f1c9f54b
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: a0d57b8e43b6ef1cca20559d68cec2227e63fccd
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: b66d8774c665b789105b440514f0c97e6f19b06f
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-29 16:45:36 +00:00
xixu-me 301854727b feat(repo): make xread standalone and self-hostable
Replace private shared dependencies with local implementations, keep the standalone crawl/search/serp build working, and add CI, GHCR image publishing, Dependabot updates, and green-only auto-merge automation.
2026-03-29 23:44:16 +08:00