Promote to Production: CAR-894 Gitea workflows migration #26

Merged

Savannah Savings merged 32 commits from uat into main 2026-05-24 18:51:40 +00:00

Conversation 0 Commits 32 Files Changed 6

+918 -1072

32 Commits

Author	SHA1	Message	Date
Savannah Savings	3d7b32a2ed	Merge pull request 'chore: promote dev to uat (CAR-1009)' (#25) from dev into uat	2026-05-24 18:48:49 +00:00
Savannah Savings	d442c79f34	{{.PullRequestTitle}}	2026-05-24 18:48:27 +00:00
Barcode Betty	43d3a0d235	ci: remove Docker Hub login, use REGISTRY_TOKEN for Gitea auth ... Fixes CAR-1009. - Remove Docker Hub login step (not needed) - Rename 'Log in to GHCR' → 'Log in to Gitea Container Registry' - Use REGISTRY_TOKEN instead of GITEA_TOKEN for Gitea auth Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-24 18:40:48 +00:00
Savannah Savings	ca84de3e8a	Merge pull request 'fix(ci): push Docker images to git.farh.net registry (CAR-964)' (#18) from barcode-betty/car-964-gitea-registry-v2 into dev	2026-05-24 18:08:53 +00:00
Savannah Savings	03c9f1e4be	Merge pull request 'Delete stale .github/workflows/ci.yml from uat branch' (#22) from cs_betty/app:betty/delete-stale-ci-yml into uat ... chore: remove stale .github/workflows from uat [CAR-934] (#22)	2026-05-23 22:00:17 +00:00
Flea Flicker	1e3fbeeddc	Delete stale .github/workflows/ci.yml from uat branch ... The CI workflow has been migrated to .github/workflows/ directory with proper branch-specific configuration. The legacy ci.yml on uat is stale and no longer needed. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 21:46:25 +00:00
Savannah Savings	d6c3f307f2	Merge pull request 'Promote dev → uat: Disable lighthouse CI job [CAR-938]' (#21) from dev into uat ... Merge PR #21: Promote dev → uat: Disable lighthouse CI job [CAR-938]	2026-05-23 21:27:34 +00:00
Savannah Savings	e9397e5a2e	Merge pull request 'fix: disable lighthouse CI job to unblock PR #11 merge [CAR-938]' (#20) from betty/car-938-disable-lighthouse into dev ... Merge PR #20: fix: disable lighthouse CI job [CAR-938] Remove lighthouse job from .gitea/workflows/ci.yml to unblock dev→uat promotion. QA approved, CTO reviewed.	2026-05-23 21:26:37 +00:00
Barcode Betty	05427e8859	fix: disable lighthouse CI job to unblock PR #11 merge ... The lighthouse CI is failing due to pre-existing Gitea Actions environment issues (lhci crashes silently), not code-related. CTO has decided to disable it temporarily to unblock CAR-934. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 21:03:44 +00:00
Savannah Savings	048c62ed4d	Merge pull request 'Promote dev → uat: CI pipeline fix + cumulative dev changes [CAR-987]' (#10) from dev into uat ... promote: dev → uat — CI pipeline fix + cumulative dev changes [CAR-987] Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 19:36:21 +00:00
Savannah Savings	af50b940c1	Merge pull request 'fix: remove DinD/GHCR split to fix Docker socket and infra 403 [CAR-987]' (#19) from betty/car-987-fix-ci-docker-socket-and-infra-403 into dev ... fix: remove DinD/GHCR split to fix Docker socket and infra 403 [CAR-987] Consolidates build+push into single step (no DinD socket needed). Switches infra checkout to secrets.GITEA_DEPLOY_KEY for cross-repo access. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 19:35:14 +00:00
Checkout Charlie	ddf2b4fda5	fix: change vars.GITEA_DEPLOY_KEY to secrets.GITEA_DEPLOY_KEY per CTO review	2026-05-23 19:22:21 +00:00
Checkout Charlie	84571473a3	fix: remove DinD/GHCR scan split, use single push step ... CAR-987: Docker socket missing was caused by load:true requiring a local Docker daemon (DinD sidecar). Using push:true with registry authentication removes the need for local Docker daemon access. Also removed anchore scan step which required the loaded image. For infra repo access: changed secrets.GITEA_TOKEN to vars.GITEA_DEPLOY_KEY since Gitea Actions auto-token only has repo-scoped permissions and cannot access cross-repo resources like cartsnitch/infra (which is private). Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 19:06:16 +00:00
Flea Flicker	0c02962b98	fix(ci): push Docker images to git.farh.net registry (CAR-964) ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 16:07:50 +00:00
Savannah Savings	43e0fae823	Merge pull request 'fix: resolve npm audit vulnerabilities (CAR-937)' (#11) from betty/car-935-fix-setup-node into dev ... fix: resolve npm audit vulnerabilities (CAR-937) Fixes npm audit high-severity vulnerabilities.	2026-05-22 10:43:17 +00:00
Savannah Savings	a9a7db63b8	fix: improve preview server startup detection in lighthouse CI [CAR-937] ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 20:46:37 +00:00
Savannah Savings	75700fbb5e	fix: increase timeout for preview server in lighthouse CI [CAR-937] ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 20:41:58 +00:00
Savannah Savings	a729b7e21a	fix: add sleep before wait-on to ensure preview server is ready [CAR-937] ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 20:37:53 +00:00
Savannah Savings	4d5a5545e6	fix: use queueMicrotask before setState in VerifyEmail effect [CAR-937] ... Avoids lint error 'Avoid calling setState() directly within an effect'. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 20:34:29 +00:00
Savannah Savings	92edcc716d	chore: trigger CI re-run	2026-05-21 20:31:25 +00:00
Savannah Savings	aed8d58a94	fix: add overrides for remaining audit vulnerabilities [CAR-937] ... - Add @babel/plugin-transform-modules-systemjs >=7.29.4 for GHSA-fv7c-fp4j-7gwp - Add fast-uri >=3.1.2 for GHSA-q3j6-qgpj-74h6 and GHSA-v39h-62p7-jpjc - Raise brace-expansion to >=1.1.15 for GHSA-jxxr-4gwj-5jf2 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 20:20:27 +00:00
Savannah Savings	f78b9a4cc1	chore: trigger CI re-run after rebase [CAR-937]	2026-05-21 20:14:24 +00:00
Savannah Savings	a65bb0ef19	fix: update better-auth to 1.6.11 to resolve GHSA-wxw3-q3m9-c3jr ... Resolves moderate severity OAuth state mismatch vulnerability in better-auth. Updated package-lock.json to reflect patched transitive dependencies. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 20:06:22 +00:00
Savannah Savings	ddc3a846bc	Merge pull request 'Promote dev → uat: remove stale .github/workflows [CAR-934]' (#8) from dev into uat ... Promote dev→uat: pin setup-node to SHA [CAR-935]	2026-05-21 19:36:15 +00:00
Savannah Savings	9af0e36db0	Merge pull request 'ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935]' (#9) from betty/car-935-fix-setup-node into dev ... Merge: ci: pin setup-node to SHA to fix Gitea Actions module error [CAR-935]	2026-05-21 19:34:39 +00:00
Savannah Savings	1ffc9466fc	ci: pin setup-node to SHA 49933ea5288caeca8642d1e84afbd3f7d6820020 ... Fixes 'Cannot find module .../dist/setup/index.js' error in Gitea Actions runner. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 19:25:45 +00:00
Savannah Savings	49413c31bf	Merge pull request 'chore: promote workflow migration to UAT (CAR-896)' (#7) from dev into uat	2026-05-21 12:24:45 +00:00
Savannah Savings	456e938310	Merge pull request 'chore: move workflows from .github to .gitea' (#5) from barcode-betty/move-workflows-to-gitea into dev ... chore: move workflows from .github to .gitea (CAR-896) Merge PR #5 to dev. QA verified by Checkout Charlie.	2026-05-21 12:14:16 +00:00
Savannah Savings	23ddc8b8e2	Merge pull request 'ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)' (#4) from betty/car-869-gitea-actions-app into dev ... ci: convert GitHub Actions to Gitea Actions (ubuntu-latest) CTO-approved. QA passed. Mechanical CI migration. cc @cpfarhood	2026-05-21 11:55:47 +00:00
Flea Flicker	5076f12486	chore: move workflows from .github to .gitea ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 11:54:10 +00:00
Flea Flicker	95466ccfef	ci: convert GitHub Actions to Gitea Actions (ubuntu-latest) ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 04:10:33 +00:00
savannah-savings-cto[bot]	67c2d27e74	promote: dev → uat (Register account-created success message) (#3) ... * ci: add frontend-only CI workflow * docs: update CLAUDE.md for standalone frontend repo * fix(register): replace check-your-email success state with inline message (#2) * fix(register): replace check-your-email success state with inline message Ports PR #181 intent from cartsnitch/cartsnitch to cartsnitch/app. Removes registrationComplete, resendLoading, resendMessage state and the handleResendVerification function. After successful signUp.email, now sets setError('Account created! Please sign in.') instead of showing the separate "Check your email" page. Refs: CAR-822, CAR-818 * fix(e2e): update registration test to match new inline success message Renames 'can register a new account and see check your email screen' to 'shows success message after registration' and asserts .bg-red-50 contains 'Account created! Please sign in.' instead of checking for a heading. Updates 'can sign in with credentials' test to first register a fresh account and assert the success message, then proceed with login. Refs: CAR-822, PR cartsnitch/cartsnitch#181 --------- Co-authored-by: Chris Farhood <chris@farhood.org> --------- Co-authored-by: Test User <test@example.com> Co-authored-by: savannah-savings-cto[bot] <269715008+savannah-savings-cto[bot]@users.noreply.github.com> Co-authored-by: cartsnitch-engineer[bot] <269717931+cartsnitch-engineer[bot]@users.noreply.github.com> Co-authored-by: Chris Farhood <chris@farhood.org>	2026-05-04 19:08:27 +00:00