64 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Flea Flicker	8c37c764e9	fix(ci): add DinD service to enable image builds (CAR-1042)	2026-05-30 08:56:47 +00:00
Flea Flicker	6f392bbbed	test(ci): trigger CI after DinD fix (CAR-1042)	2026-05-25 23:15:07 +00:00
Barcode Betty	4a63bc1da8	fix(ci): apply CAR-985 and CAR-986 fixes to uat	2026-05-25 22:53:44 +00:00
Savannah Savings	ca423073f1	Merge pull request 'Promote dev to uat (CAR-1034 - auth *.farh.net trustedOrigins fix)' (#27) from dev into uat	2026-05-25 21:28:19 +00:00
Savannah Savings	d066c14d4b	Merge pull request 'Add *.farh.net origins to trustedOrigins (CAR-1034)' (#26) from betty/car-1034-trustedorigins-fix into dev	2026-05-25 21:27:53 +00:00
Barcode Betty	23ab939d2f	Add *.farh.net origins back to trustedOrigins ... Fixes 403 errors on UAT auth endpoints (cartsnitch.uat.farh.net). The previous change removed *.farh.net origins causing Better Auth to reject requests from UAT environment. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-25 09:43:43 +00:00
Savannah Savings	8bf80a9890	fix(ci): use REGISTRY_TOKEN for container registry auth (CAR-973) ... The REGISTRY_TOKEN secret has write:package scope for git.farh.net. This fixes the unauthorized error at docker login. Related: CAR-1023 (REGISTRY_TOKEN setup), CAR-1009 (CI registry token standardization) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-25 00:04:25 +00:00
Savannah Savings	359d108fee	Merge pull request 'ci: use REGISTRY_TOKEN for docker login (CAR-1024)' (#24) from car-1023-use-registry-token into dev	2026-05-24 20:52:35 +00:00
Barcode Betty	f0291e8827	ci: use REGISTRY_TOKEN instead of GITEA_TOKEN for docker login (CAR-1024) ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-24 20:46:48 +00:00
Savannah Savings	a520a65f1b	fix(ci): use GITEA_TOKEN secret for docker login ... The github.token (automatic workflow token) in Gitea Actions doesn't inherit packages:write permission for container registry. Use the GITEA_TOKEN secret instead with direct docker login. Ref: CAR-973, CAR-1009	2026-05-24 20:38:35 +00:00
Savannah Savings	bb8d7f159c	fix(ci): use direct docker login with github.token for registry auth (CAR-973) ... docker/login-action@v3 fails with Gitea's automatic token. Use direct docker login with github.token instead, which has the necessary write:package scope for the container registry. Related: CAR-1009 (CI registry token standardization)	2026-05-24 20:37:22 +00:00
Barcode Betty	a92f578dcf	chore: re-trigger CI after DNS fix (CAR-968)	2026-05-24 20:34:39 +00:00
Savannah Savings	720a5f131c	Merge pull request 'Promote to Production: CAR-894 Gitea workflows migration' (#23) from uat into main v2026.04.22	2026-05-24 18:51:45 +00:00
Savannah Savings	e36eaec97b	Merge pull request 'promote: dev → uat (CAR-992 trustedOrigins fix)' (#19) from dev into uat ... promote: dev → uat (CAR-992 trustedOrigins fix) (#19)	2026-05-23 20:55:58 +00:00
Savannah Savings	9e6dfe1f9c	Merge pull request 'fix: update trustedOrigins to match current domains' (#18) from cs_betty/auth:car992-fix into dev ... fix: update trustedOrigins to match current domains (#18) Refs: CAR-992	2026-05-23 20:55:32 +00:00
Barcode Betty	9ae3161860	fix: update trustedOrigins to match current domains ... Replace stale .farh.net subdomains with correct *.cartsnitch.com domains to fix CORS Origin validation blocking UAT auth (403 on sign-up/sign-in). Refs: CAR-992 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 20:43:31 +00:00
Checkout Charlie	5d2701ef52	chore: re-trigger CI for UAT registry verification (CAR-983)	2026-05-23 18:37:10 +00:00
Savannah Savings	c06f7cf5a1	Merge pull request 'ci: promote dev to uat — Gitea container registry CI changes' (#13) from dev into uat ... ci: promote dev to uat — Gitea container registry CI changes (#13)	2026-05-23 15:26:07 +00:00
Savannah Savings	c1c89e4206	Merge pull request 'ci: switch Docker image push from GHCR to Gitea container registry' (#12) from barcode-betty/car-959-gitea-registry into dev ... ci: switch Docker image push from GHCR to Gitea container registry (#12)	2026-05-23 15:25:44 +00:00
Flea Flicker	6d6c872962	ci: switch Docker image push from GHCR to Gitea container registry ... - REGISTRY: ghcr.io -> git.farh.net - Renamed login step to Gitea Container Registry - kustomize rename form: ghcr.io/cartsnitch/auth=git.farh.net/cartsnitch/auth:TAG - Removed GHA cache-from/cache-to (not guaranteed on Gitea runners) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 15:15:07 +00:00
Savannah Savings	34c5a85d49	Merge pull request 'chore: promote dev to uat (move workflows to .gitea)' (#10) from dev into uat ... chore: promote dev to uat — move workflows to .gitea (#10)	2026-05-21 13:46:13 +00:00
Savannah Savings	ebfefd6970	Merge pull request 'chore: move workflows from .github to .gitea' (#9) from barcode-betty/move-workflows-to-gitea into dev ... chore: move workflows from .github to .gitea (#9) Merge PR: barcode-betty/move-workflows-to-gitea -> dev Reviewed-by: Savannah Savings (CTO) QA-by: Checkout Charlie	2026-05-21 13:45:52 +00:00
Flea Flicker	8bf7c08950	chore: move workflows from .github to .gitea ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 12:33:43 +00:00
Savannah Savings	6b8939fd7f	Merge pull request 'chore: promote Gitea Actions fix to uat (CAR-892)' (#8) from dev into uat ... chore: promote Gitea Actions fix to uat (CAR-892) Dev→UAT promotion. GHCR login fix. cc @cpfarhood	2026-05-21 11:55:50 +00:00
Barcode Betty	f2a2673061	Merge pull request 'fix: use GITEA_TOKEN for GHCR login in Gitea Actions (CAR-892)' (#7) from betty/car-892-gitea-actions-ghcr-auth into dev	2026-05-21 11:33:27 +00:00
Barcode Betty	dad3132fdb	fix: use GITEA_TOKEN for GHCR login in Gitea Actions ... Replace ${{ secrets.GITHUB_TOKEN }} with ${{ secrets.GITEA_TOKEN }} for docker/login-action in Gitea Actions. GITHUB_TOKEN is not available in Gitea Actions and was causing 'authentication required' failures for ghcr.io push, leaving the auth service with a stale image on UAT. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 11:30:57 +00:00
Savannah Savings	934397a073	Merge pull request 'ci: promote Gitea Actions workflow changes to UAT' (#6) from dev into uat ... ci: promote Gitea Actions workflow changes to UAT (#6)	2026-05-21 11:11:55 +00:00
Savannah Savings	80093752ae	Merge pull request 'ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)' (#5) from betty/car-869-gitea-actions-auth into dev ... ci: convert GitHub Actions to Gitea Actions (ubuntu-latest) (#5)	2026-05-21 11:11:20 +00:00
Flea Flicker	791ac3156f	ci: convert GitHub Actions to Gitea Actions (ubuntu-latest) ... - Replace runs-on: runners-cartsnitch with runs-on: ubuntu-latest (3 jobs) - Remove actions/create-github-app-token step from deploy-dev and deploy-uat - Replace token in infra checkout with secrets.GITEA_TOKEN Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 04:01:09 +00:00
coupon-carl-ceo[bot]	8e405d2cdb	chore: promote uat to main — auth repo migration (CAR-722) ... chore: promote uat to main — auth repo migration (CAR-722) v2026.04.21	2026-04-21 02:28:02 +00:00
coupon-carl-ceo[bot]	7e89ab72bd	Merge pull request #3 from cartsnitch/dev ... chore: promote dev to uat — auth repo migration complete	2026-04-21 02:20:16 +00:00
coupon-carl-ceo[bot]	0409730d8c	Merge pull request #1 from cartsnitch/add-ci-grype ... Add CI workflow and Grype CVE ignores	2026-04-21 02:19:55 +00:00
coupon-carl-ceo[bot]	35dc518c53	chore: recreate GHCR package linked to cartsnitch/auth [CAR-732]	2026-04-21 02:15:46 +00:00
coupon-carl-ceo[bot]	745baada90	chore: trigger CI — GHCR package relink [CAR-732]	2026-04-20 14:36:46 +00:00
Barcode Betty	6ac7350d75	Add CI workflow and Grype CVE ignores ... - Add .github/workflows/ci.yml with build/push and deploy-dev/uat jobs - Add .grype.yaml with Python 3.12 CVE ignores Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-19 12:57:52 +00:00
cartsnitch-engineer[bot]	b7b57d91b1	Merge pull request #2 from cartsnitch/main ... feat: add CI workflow for build, push, and deploy	2026-04-19 12:45:21 +00:00
Barcode Betty	bacd92f05d	feat: add CI workflow for build, push, and deploy ... - Build and push Docker image to GHCR on push to main/dev/uat - Generate CalVer tags on main branch - Auto-deploy to dev and uat overlays via infra repo Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-19 12:44:33 +00:00
cartsnitch-ceo[bot]	b71f561a7f	release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS) ... release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS)	2026-04-19 00:24:10 +00:00
cartsnitch-cto[bot]	b5638e7798	Merge pull request #225 from cartsnitch/dev ... Promote dev to UAT: bcrypt cost factor fix	2026-04-19 00:04:07 +00:00
Barcode Betty	c11a02773a	fix: increase bcrypt cost factor from 10 to 12 ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:50:09 +00:00
cartsnitch-ceo[bot]	1660fd338c	chore: promote UAT to production (CAR-662, audit logging middleware) ... chore: promote UAT to production (CAR-662, audit logging middleware)	2026-04-15 04:29:39 +00:00
cartsnitch-ceo[bot]	04f1022823	Merge branch 'main' into uat	2026-04-15 04:17:24 +00:00
cartsnitch-cto[bot]	b15c9cb4d8	Merge pull request #213 from cartsnitch/dev ... Promote to UAT: vite, mock-auth, Redis rate-limit, Redis cache, email verification	2026-04-15 03:33:42 +00:00
Barcode Betty	e433cea908	feat(auth): enable email verification with Resend ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 03:30:44 +00:00
cartsnitch-cto[bot]	90e65a3672	Merge pull request #211 from cartsnitch/dev ... Promote to UAT: bcrypt upgrade + Grype only-fixed filter (CAR-622)	2026-04-15 03:22:50 +00:00
cartsnitch-ceo[bot]	9bfd17b82e	chore: promote uat to production (Grype image vulnerability scanning) ... Merges Grype-based container image vulnerability scanning and Docker CVE remediation to production. - CI workflow: build→scan→push pattern with only-fixed flag for all 4 Docker images - Dockerfile hardening: apt-get/apk upgrade in all build and prod stages - UAT: PASS (Deal Dottie), Security: PASS (Stockboy Steve) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 01:14:35 +00:00
Paperclip	ee175e9b39	fix: upgrade bcrypt and filter unfixed CVEs in Grype scans	2026-04-15 00:51:53 +00:00
cartsnitch-cto[bot]	4f3e4588ea	chore: promote dev to UAT (CAR-616 Docker CVE remediation) (#205) ... chore: promote dev to UAT (CAR-616 Docker CVE remediation)	2026-04-14 23:57:52 +00:00
cartsnitch-cto[bot]	61433acef5	fix: remediate high-severity CVEs in Docker images (#204) ... fix: remediate high-severity CVEs in Docker images	2026-04-14 23:57:40 +00:00
Paperclip	6492f60f15	fix: remediate high-severity CVEs in Docker images ... - Add apk upgrade to frontend Dockerfile (build + prod stages) - Add apk upgrade to auth Dockerfile (build + runtime stages) - Add apt-get upgrade to api Dockerfile (build + prod stages) - Add apt-get upgrade to receiptwitness Dockerfile (build + prod stages) - Run npm audit fix for frontend and auth dependencies Refs: CAR-616 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-14 23:51:42 +00:00