Promote to Production: CAR-894 Gitea workflows migration #26

Merged
Savannah Savings merged 32 commits from uat into main 2026-05-24 18:51:40 +00:00
Member
No description provided.
Savannah Savings added 32 commits 2026-05-24 18:51:20 +00:00
* ci: add frontend-only CI workflow

* docs: update CLAUDE.md for standalone frontend repo

* fix(register): replace check-your-email success state with inline message (#2)

* fix(register): replace check-your-email success state with inline message

Ports PR #181 intent from cartsnitch/cartsnitch to cartsnitch/app.
Removes registrationComplete, resendLoading, resendMessage state and the
handleResendVerification function. After successful signUp.email, now
sets setError('Account created! Please sign in.') instead of showing
the separate "Check your email" page.

Refs: CAR-822, CAR-818

* fix(e2e): update registration test to match new inline success message

Renames 'can register a new account and see check your email screen' to
'shows success message after registration' and asserts .bg-red-50 contains
'Account created! Please sign in.' instead of checking for a heading.

Updates 'can sign in with credentials' test to first register a fresh account
and assert the success message, then proceed with login.

Refs: CAR-822, PR cartsnitch/cartsnitch#181

---------

Co-authored-by: Chris Farhood <chris@farhood.org>

---------

Co-authored-by: Test User <test@example.com>
Co-authored-by: savannah-savings-cto[bot] <269715008+savannah-savings-cto[bot]@users.noreply.github.com>
Co-authored-by: cartsnitch-engineer[bot] <269717931+cartsnitch-engineer[bot]@users.noreply.github.com>
Co-authored-by: Chris Farhood <chris@farhood.org>
ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)
CI / audit (pull_request) Failing after 11s
CI / test (pull_request) Successful in 14s
CI / lint (pull_request) Successful in 15s
CI / e2e (pull_request) Successful in 37s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m14s
95466ccfef
Co-Authored-By: Paperclip <noreply@paperclip.ing>
chore: move workflows from .github to .gitea
CI / lint (pull_request) Has been cancelled
CI / test (pull_request) Has been cancelled
CI / audit (pull_request) Has been cancelled
CI / e2e (pull_request) Has been cancelled
CI / lighthouse (pull_request) Has been cancelled
CI / build-and-push (pull_request) Has been cancelled
CI / deploy-dev (pull_request) Has been cancelled
CI / deploy-uat (pull_request) Has been cancelled
5076f12486
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)' (#4) from betty/car-869-gitea-actions-app into dev
CI / audit (push) Failing after 11s
CI / test (push) Successful in 13s
CI / lint (push) Successful in 14s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 14s
CI / e2e (push) Successful in 42s
CI / audit (pull_request) Failing after 12s
CI / e2e (pull_request) Successful in 41s
CI / build-and-push (push) Failing after 7s
CI / build-and-push (pull_request) Has been skipped
CI / lighthouse (push) Failing after 1m18s
CI / deploy-uat (push) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / deploy-dev (push) Failing after 27s
CI / lighthouse (pull_request) Failing after 1m16s
23ddc8b8e2
ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)

CTO-approved. QA passed. Mechanical CI migration.

cc @cpfarhood
Merge pull request 'chore: move workflows from .github to .gitea' (#5) from barcode-betty/move-workflows-to-gitea into dev
CI / lint (pull_request) Failing after 4s
CI / test (pull_request) Successful in 11s
CI / audit (pull_request) Failing after 11s
CI / e2e (pull_request) Successful in 46s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m13s
456e938310
chore: move workflows from .github to .gitea (CAR-896)

Merge PR #5 to dev. QA verified by Checkout Charlie.
ci: pin setup-node to SHA 49933ea5288caeca8642d1e84afbd3f7d6820020
CI / audit (pull_request) Failing after 42s
CI / e2e (pull_request) Successful in 38s
CI / test (pull_request) Successful in 43s
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m13s
CI / lint (pull_request) Successful in 42s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
1ffc9466fc
Fixes 'Cannot find module .../dist/setup/index.js' error in Gitea Actions runner.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935]' (#9) from betty/car-935-fix-setup-node into dev
CI / audit (push) Failing after 10s
CI / lint (push) Successful in 13s
CI / deploy-uat (push) Has been skipped
CI / test (push) Successful in 12s
CI / e2e (push) Successful in 38s
CI / build-and-push (push) Failing after 9s
CI / deploy-dev (push) Failing after 33s
CI / lighthouse (push) Failing after 1m18s
CI / lint (pull_request) Successful in 14s
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m13s
CI / audit (pull_request) Failing after 4s
CI / test (pull_request) Successful in 13s
CI / e2e (pull_request) Successful in 42s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
9af0e36db0
Merge: ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935]
Merge pull request 'Promote dev → uat: remove stale .github/workflows [CAR-934]' (#8) from dev into uat
CI / build-and-push (push) Failing after 7s
CI / test (push) Successful in 13s
CI / lint (push) Successful in 15s
CI / audit (push) Failing after 11s
CI / deploy-uat (push) Failing after 32s
CI / deploy-dev (push) Has been skipped
CI / lighthouse (push) Failing after 1m18s
CI / e2e (push) Successful in 43s
ddc3a846bc
Promote dev→uat: pin setup-node to SHA [CAR-935]
fix: update better-auth to 1.6.11 to resolve GHSA-wxw3-q3m9-c3jr
CI / audit (pull_request) Failing after 11s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 14s
CI / deploy-uat (pull_request) Has been skipped
CI / e2e (pull_request) Successful in 42s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m15s
a65bb0ef19
Resolves moderate severity OAuth state mismatch vulnerability in better-auth.
Updated package-lock.json to reflect patched transitive dependencies.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
chore: trigger CI re-run after rebase [CAR-937]
CI / lint (pull_request) Successful in 14s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m15s
CI / audit (pull_request) Failing after 11s
CI / test (pull_request) Successful in 12s
CI / e2e (pull_request) Successful in 43s
CI / deploy-dev (pull_request) Has been skipped
f78b9a4cc1
fix: add overrides for remaining audit vulnerabilities [CAR-937]
CI / e2e (pull_request) Successful in 39s
CI / lighthouse (pull_request) Failing after 1m14s
CI / lint (pull_request) Failing after 13s
CI / test (pull_request) Successful in 12s
CI / deploy-uat (pull_request) Has been skipped
CI / audit (pull_request) Successful in 10s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
aed8d58a94
- Add @babel/plugin-transform-modules-systemjs >=7.29.4 for GHSA-fv7c-fp4j-7gwp
- Add fast-uri >=3.1.2 for GHSA-q3j6-qgpj-74h6 and GHSA-v39h-62p7-jpjc
- Raise brace-expansion to >=1.1.15 for GHSA-jxxr-4gwj-5jf2

Co-Authored-By: Paperclip <noreply@paperclip.ing>
chore: trigger CI re-run
CI / audit (pull_request) Successful in 11s
CI / test (pull_request) Successful in 14s
CI / lighthouse (pull_request) Failing after 1m14s
CI / lint (pull_request) Failing after 14s
CI / e2e (pull_request) Successful in 39s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
92edcc716d
fix: use queueMicrotask before setState in VerifyEmail effect [CAR-937]
CI / lint (pull_request) Successful in 12s
CI / e2e (pull_request) Successful in 42s
CI / audit (pull_request) Successful in 11s
CI / test (pull_request) Successful in 13s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m15s
4d5a5545e6
Avoids lint error 'Avoid calling setState() directly within an effect'.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: add sleep before wait-on to ensure preview server is ready [CAR-937]
CI / audit (pull_request) Successful in 12s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 14s
CI / e2e (pull_request) Successful in 41s
CI / build-and-push (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m20s
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
a729b7e21a
Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: increase timeout for preview server in lighthouse CI [CAR-937]
CI / audit (pull_request) Successful in 10s
CI / test (pull_request) Successful in 13s
CI / lint (pull_request) Successful in 14s
CI / e2e (pull_request) Successful in 43s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 1m53s
75700fbb5e
Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: improve preview server startup detection in lighthouse CI [CAR-937]
CI / lint (pull_request) Successful in 13s
CI / test (pull_request) Successful in 14s
CI / audit (pull_request) Successful in 10s
CI / e2e (pull_request) Successful in 39s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 42s
a9a7db63b8
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'fix: resolve npm audit vulnerabilities (CAR-937)' (#11) from betty/car-935-fix-setup-node into dev
CI / lint (push) Successful in 1m2s
CI / test (push) Successful in 1m3s
CI / audit (push) Successful in 1m14s
CI / deploy-dev (pull_request) Has been skipped
CI / lighthouse (push) Failing after 50s
CI / deploy-dev (push) Failing after 38s
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 47s
CI / lint (pull_request) Successful in 14s
CI / test (pull_request) Successful in 13s
CI / audit (pull_request) Successful in 11s
CI / e2e (pull_request) Successful in 41s
CI / build-and-push (pull_request) Has been skipped
CI / build-and-push (push) Failing after 2m4s
CI / e2e (push) Successful in 1m48s
CI / deploy-uat (push) Has been skipped
43e0fae823
fix: resolve npm audit vulnerabilities (CAR-937)

Fixes npm audit high-severity vulnerabilities.
fix(ci): push Docker images to git.farh.net registry (CAR-964)
CI / e2e (pull_request) Failing after 1m40s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / lint (pull_request) Failing after 1m24s
CI / test (pull_request) Failing after 1m42s
CI / audit (pull_request) Failing after 1m38s
CI / lighthouse (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
0c02962b98
Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: remove DinD/GHCR scan split, use single push step
CI / audit (pull_request) Successful in 35s
CI / lint (pull_request) Successful in 43s
CI / test (pull_request) Successful in 42s
CI / deploy-dev (pull_request) Has been skipped
CI / e2e (pull_request) Successful in 1m3s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 45s
84571473a3
CAR-987: Docker socket missing was caused by load:true requiring
a local Docker daemon (DinD sidecar). Using push:true with registry
authentication removes the need for local Docker daemon access.
Also removed anchore scan step which required the loaded image.

For infra repo access: changed secrets.GITEA_TOKEN to
vars.GITEA_DEPLOY_KEY since Gitea Actions auto-token only has
repo-scoped permissions and cannot access cross-repo resources
like cartsnitch/infra (which is private).

Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: change vars.GITEA_DEPLOY_KEY to secrets.GITEA_DEPLOY_KEY per CTO review
CI / e2e (pull_request) Successful in 37s
CI / audit (pull_request) Successful in 10s
CI / test (pull_request) Successful in 15s
CI / lint (pull_request) Successful in 15s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / lighthouse (pull_request) Failing after 45s
ddf2b4fda5
Merge pull request 'fix: remove DinD/GHCR split to fix Docker socket and infra 403 [CAR-987]' (#19) from betty/car-987-fix-ci-docker-socket-and-infra-403 into dev
CI / lint (push) Successful in 13s
CI / audit (push) Successful in 12s
CI / audit (pull_request) Successful in 12s
CI / deploy-uat (pull_request) Has been skipped
CI / test (pull_request) Successful in 11s
CI / e2e (pull_request) Failing after 3s
CI / build-and-push (push) Failing after 8s
CI / lighthouse (push) Failing after 45s
CI / lighthouse (pull_request) Failing after 43s
CI / test (push) Successful in 11s
CI / lint (pull_request) Successful in 12s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / e2e (push) Successful in 43s
CI / deploy-uat (push) Has been skipped
CI / deploy-dev (push) Failing after 2s
af50b940c1
fix: remove DinD/GHCR split to fix Docker socket and infra 403 [CAR-987]

Consolidates build+push into single step (no DinD socket needed).
Switches infra checkout to secrets.GITEA_DEPLOY_KEY for cross-repo access.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'Promote dev → uat: CI pipeline fix + cumulative dev changes [CAR-987]' (#10) from dev into uat
CI / test (push) Successful in 14s
CI / build-and-push (push) Failing after 9s
CI / lighthouse (push) Failing after 42s
CI / deploy-uat (push) Failing after 3s
CI / e2e (push) Successful in 40s
CI / deploy-dev (push) Has been skipped
CI / audit (push) Successful in 11s
CI / lint (push) Successful in 15s
048c62ed4d
promote: dev → uat — CI pipeline fix + cumulative dev changes [CAR-987]

Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: disable lighthouse CI job to unblock PR #11 merge
CI / lint (pull_request) Successful in 12s
CI / audit (pull_request) Successful in 12s
CI / test (pull_request) Successful in 12s
CI / build-and-push (pull_request) Has been skipped
CI / e2e (pull_request) Successful in 42s
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
05427e8859
The lighthouse CI is failing due to pre-existing Gitea Actions environment
issues (lhci crashes silently), not code-related. CTO has decided to disable
it temporarily to unblock CAR-934.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'fix: disable lighthouse CI job to unblock PR #11 merge [CAR-938]' (#20) from betty/car-938-disable-lighthouse into dev
CI / test (push) Successful in 42s
CI / lint (pull_request) Successful in 12s
CI / audit (push) Successful in 42s
CI / test (pull_request) Successful in 21s
CI / deploy-dev (push) Failing after 2s
CI / audit (pull_request) Successful in 9s
CI / lint (push) Successful in 1m23s
CI / e2e (push) Successful in 45s
CI / e2e (pull_request) Successful in 44s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
CI / build-and-push (push) Failing after 3m10s
CI / deploy-uat (push) Has been skipped
e9397e5a2e
Merge PR #20: fix: disable lighthouse CI job [CAR-938]

Remove lighthouse job from .gitea/workflows/ci.yml to unblock dev→uat promotion.
QA approved, CTO reviewed.
Merge pull request 'Promote dev → uat: Disable lighthouse CI job [CAR-938]' (#21) from dev into uat
CI / test (push) Successful in 20s
CI / e2e (push) Successful in 39s
CI / audit (push) Successful in 9s
CI / lint (push) Successful in 23s
CI / deploy-dev (push) Has been skipped
CI / build-and-push (push) Failing after 1m52s
CI / deploy-uat (push) Failing after 11s
d6c3f307f2
Merge PR #21: Promote dev → uat: Disable lighthouse CI job [CAR-938]
Delete stale .github/workflows/ci.yml from uat branch
CI / lint (pull_request) Has been cancelled
CI / test (pull_request) Has been cancelled
CI / audit (pull_request) Has been cancelled
CI / e2e (pull_request) Has been cancelled
CI / build-and-push (pull_request) Has been cancelled
CI / deploy-dev (pull_request) Has been cancelled
CI / deploy-uat (pull_request) Has been cancelled
1e3fbeeddc
The CI workflow has been migrated to .github/workflows/ directory with proper
branch-specific configuration. The legacy ci.yml on uat is stale and no
longer needed.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'Delete stale .github/workflows/ci.yml from uat branch' (#22) from cs_betty/app:betty/delete-stale-ci-yml into uat
CI / e2e (push) Successful in 37s
CI / build-and-push (push) Has been skipped
CI / deploy-dev (push) Has been skipped
CI / audit (push) Successful in 11s
CI / lint (push) Successful in 14s
CI / deploy-uat (push) Failing after 2s
CI / test (push) Failing after 1s
03c9f1e4be
chore: remove stale .github/workflows from uat [CAR-934] (#22)
Merge pull request 'fix(ci): push Docker images to git.farh.net registry (CAR-964)' (#18) from barcode-betty/car-964-gitea-registry-v2 into dev
CI / audit (push) Successful in 10s
CI / test (push) Successful in 23s
CI / lint (push) Successful in 25s
CI / e2e (push) Successful in 40s
CI / build-and-push (push) Failing after 12s
CI / deploy-uat (push) Has been skipped
CI / deploy-dev (push) Failing after 2s
ca84de3e8a
ci: remove Docker Hub login, use REGISTRY_TOKEN for Gitea auth
CI / audit (pull_request) Successful in 17s
CI / test (pull_request) Successful in 12s
CI / lint (pull_request) Successful in 13s
CI / e2e (pull_request) Successful in 38s
CI / build-and-push (pull_request) Has been skipped
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
43d3a0d235
Fixes CAR-1009.

- Remove Docker Hub login step (not needed)
- Rename 'Log in to GHCR' → 'Log in to Gitea Container Registry'
- Use REGISTRY_TOKEN instead of GITEA_TOKEN for Gitea auth

Co-Authored-By: Paperclip <noreply@paperclip.ing>
{{.PullRequestTitle}}
CI / deploy-dev (push) Failing after 2s
CI / audit (push) Successful in 10s
CI / lint (push) Successful in 25s
CI / test (push) Successful in 23s
CI / e2e (push) Successful in 39s
CI / build-and-push (push) Failing after 6s
CI / deploy-uat (push) Has been skipped
CI / build-and-push (pull_request) Has been skipped
CI / test (pull_request) Failing after 3s
CI / audit (pull_request) Successful in 19s
CI / lint (pull_request) Successful in 23s
CI / e2e (pull_request) Successful in 37s
CI / deploy-dev (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
d442c79f34
Merge pull request 'chore: promote dev to uat (CAR-1009)' (#25) from dev into uat
CI / lint (push) Successful in 23s
CI / test (push) Successful in 13s
CI / audit (push) Successful in 10s
CI / e2e (push) Successful in 1m2s
CI / build-and-push (push) Failing after 6s
CI / deploy-dev (push) Has been skipped
CI / deploy-uat (push) Failing after 2s
CI / lint (pull_request) Successful in 12s
CI / audit (pull_request) Successful in 36s
CI / test (pull_request) Successful in 37s
CI / e2e (pull_request) Successful in 55s
CI / deploy-dev (pull_request) Has been skipped
CI / build-and-push (pull_request) Has been skipped
CI / deploy-uat (pull_request) Has been skipped
3d7b32a2ed
Savannah Savings merged commit 1fc51f1603 into main 2026-05-24 18:51:40 +00:00
Sign in to join this conversation.