Merge pull request 'Promote to Production: CAR-1215 react-router audit-gate fix' (#282 ) from uat into main

Promote to Production: CAR-1215 react-router audit-gate fix UAT PASS: Deal Dottie — all 5 regression steps green Security PASS: Stockboy Steve — lockfile-only, 3 high advisories cleared ref: CAR-1215, CAR-1217
Promote to UAT: CAR-1215 react-router audit-gate fix (#280 )
2026-06-04 01:53:08 +00:00 · 2026-06-03 22:14:58 +00:00 · 2026-06-03 21:49:34 +00:00 · 2026-06-03 21:13:44 +00:00 · 2026-05-25 22:47:40 +00:00
1 changed files with 2 additions and 2 deletions
@@ -1,4 +1,4 @@
-FROM node:22-alpine@sha256:8ea2348b068a9544dae7317b4f3aafcdc032df1647bb7d768a05a5cad1a7683f AS builder
+FROM node:22-alpine AS builder
 RUN apk update && apk upgrade --no-cache
 WORKDIR /app
 COPY package.json package-lock.json* ./
@@ -7,7 +7,7 @@ COPY tsconfig.json ./
 COPY src/ src/
 RUN npm run build

-FROM node:22-alpine@sha256:8ea2348b068a9544dae7317b4f3aafcdc032df1647bb7d768a05a5cad1a7683f
+FROM node:22-alpine
 RUN apk update && apk upgrade --no-cache
 WORKDIR /app
 ENV NODE_ENV=production
Author	SHA1	Message	Date
Coupon Carl	a0088acb1a	Merge pull request 'Promote to Production: CAR-1215 react-router audit-gate fix' (#282 ) from uat into main CI / lint (push) Successful in 11s Details CI / audit (push) Successful in 11s Details CI / test (push) Successful in 13s Details CI / e2e (push) Successful in 42s Details CI / build-and-push-receiptwitness (push) Failing after 55s Details CI / build-and-push-auth (push) Failing after 21s Details CI / lighthouse (push) Failing after 1m14s Details CI / build-and-push (push) Successful in 30s Details CI / build-and-push-api (push) Successful in 1m19s Details CI / deploy-dev (push) Failing after 12s Details CI / deploy-uat (push) Failing after 13s Details Promote to Production: CAR-1215 react-router audit-gate fix UAT PASS: Deal Dottie — all 5 regression steps green Security PASS: Stockboy Steve — lockfile-only, 3 high advisories cleared ref: CAR-1215, CAR-1217	2026-06-04 01:53:08 +00:00
Savannah Savings	eff1098289	Promote to UAT: CAR-1215 react-router audit-gate fix (#280 ) CI / audit (push) Successful in 10s Details CI / lint (push) Successful in 11s Details CI / test (push) Successful in 14s Details CI / e2e (push) Successful in 58s Details CI / lighthouse (push) Failing after 1m25s Details CI / build-and-push-api (push) Successful in 1m26s Details CI / build-and-push-auth (push) Successful in 43s Details CI / build-and-push-receiptwitness (push) Successful in 1m59s Details CI / build-and-push (push) Successful in 1m6s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 7s Details CI / build-and-push-api (pull_request) Has been skipped Details CI / build-and-push-auth (pull_request) Has been skipped Details CI / build-and-push (pull_request) Has been skipped Details CI / test (pull_request) Successful in 12s Details CI / build-and-push-receiptwitness (pull_request) Has been skipped Details CI / e2e (pull_request) Successful in 45s Details CI / audit (pull_request) Successful in 10s Details CI / lint (pull_request) Successful in 14s Details CI / deploy-uat (pull_request) Has been skipped Details CI / deploy-dev (pull_request) Has been skipped Details CI / lighthouse (pull_request) Failing after 1m17s Details Promotes CAR-1215 to uat. audit gate green; lighthouse pre-existing red (tracked separately).	2026-06-03 22:14:58 +00:00
Savannah Savings	009aa92777	Merge pull request 'Promote to UAT: deploy-dev/deploy-uat approval-gate success (CAR-1212)' (#277 ) from dev into uat CI / lint (push) Successful in 13s Details CI / test (push) Successful in 13s Details CI / audit (push) Failing after 11s Details CI / e2e (push) Successful in 50s Details CI / lighthouse (push) Failing after 1m19s Details CI / build-and-push-auth (push) Successful in 31s Details CI / build-and-push-api (push) Successful in 1m3s Details CI / build-and-push-receiptwitness (push) Successful in 2m29s Details CI / build-and-push (push) Successful in 1m40s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 6s Details	2026-06-03 21:49:34 +00:00
Savannah Savings	b3a452be50	Merge pull request 'promote(dev→uat): CI deploy PR-based image bump (CAR-1195, CAR-1194)' (#275 ) from dev into uat CI / lint (push) Successful in 11s Details CI / audit (push) Successful in 11s Details CI / test (push) Successful in 12s Details CI / e2e (push) Successful in 45s Details CI / build-and-push-api (push) Successful in 1m7s Details CI / build-and-push-auth (push) Successful in 36s Details CI / lighthouse (push) Failing after 1m20s Details CI / build-and-push (push) Successful in 33s Details CI / build-and-push-receiptwitness (push) Successful in 2m10s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 7s Details	2026-06-03 21:13:44 +00:00
Coupon Carl	80786b9f1f	fix(ci): use CI_GITEA_TOKEN for cross-repo checkout CI / audit (push) Failing after 16s Details CI / e2e (push) Successful in 52s Details CI / lint (push) Successful in 1m14s Details CI / test (push) Successful in 1m16s Details CI / build-and-push (push) Failing after 14s Details CI / build-and-push-api (push) Failing after 17s Details CI / build-and-push-auth (push) Failing after 12s Details CI / lighthouse (push) Failing after 1m5s Details CI / build-and-push-receiptwitness (push) Failing after 3m23s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 10s Details Update deploy-dev and deploy-uat jobs to use CI_GITEA_TOKEN for checking out the cartsnitch/infra repository instead of REGISTRY_TOKEN. CI_GITEA_TOKEN is the org-level Actions secret configured for cross-repo access, while REGISTRY_TOKEN continues to be used for Docker registry login. This resolves CAR-986 by enabling CI to commit image tag updates to the private infra repository. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-25 22:47:40 +00:00