Compare commits

...

19 Commits

Author SHA1 Message Date
Deploy Debbie ab358f44bb fix(ci): use correct ARC runner label runners-cartsnitch
The correct self-hosted ARC runner label is runners-cartsnitch, not
cartsnitch-runners. All CI jobs were failing because no runners
matched the old label.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 21:25:51 +00:00
chip-overstock[bot] 5b8d132948 Merge pull request #17 from cartsnitch/fix/ci-runner-and-mirrors
fix(ci): correct runner label + revert GHCR mirrors
2026-03-19 21:10:12 +00:00
Deploy Debbie 66565fff5c fix(ci): remove Docker Hub login step
We push to GHCR only per infrastructure policy. The Docker Hub login
step was added in error and would fail since DOCKERHUB_USERNAME/TOKEN
secrets are not configured.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 19:14:46 +00:00
Debbie a65361106c fix(ci): correct runner label to cartsnitch-runners
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 18:57:28 +00:00
Deploy Debbie 66376f6a87 fix(ci): add Docker Hub login to avoid rate limits on base image pulls
Self-hosted ARC runners share an IP — unauthenticated Docker Hub pulls
hit rate limits. Add Docker Hub login before build step.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 18:50:31 +00:00
Deploy Debbie 580864ac69 fix(ci): correct runner label and revert GHCR mirrors to Docker Hub
Fixes runner label (local-ubuntu-latest-cartsnitch → runners-cartsnitch)
and reverts GHCR mirror images to Docker Hub direct per board directive.

Supersedes #16

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 17:59:16 +00:00
Chris Farhood e8a53399c2 Merge pull request #14 from cartsnitch/revert-ghcr-mirrors
Revert GHCR mirror configs to Docker Hub direct pulls
2026-03-18 21:53:46 -04:00
Deploy Debbie b8091e367e Remove Docker Hub auth and debug step
Confirmed secrets are length 0 from CI runners. Docker Hub auth
cannot work until secrets are properly scoped to these repos.

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 01:48:17 +00:00
Deploy Debbie d0c887e29f Debug: check Docker Hub secret accessibility from CI runners
Adding diagnostic step to verify secret length before login attempt.

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 01:45:43 +00:00
Deploy Debbie c81e14b8e7 Re-add Docker Hub auth to test secret accessibility
Board confirms DOCKERHUB_USERNAME/DOCKERHUB_TOKEN exist. Testing
whether they're now accessible from self-hosted runners.

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 01:43:34 +00:00
Debbie (Paperclip Agent) ec81004268 Remove Docker Hub auth (secrets not accessible from CI runners)
DOCKERHUB_USERNAME/DOCKERHUB_TOKEN secrets are not accessible from
the self-hosted runners. Remove credentials blocks and login steps
to avoid template validation failures. Docker Hub pulls will use
anonymous access.

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 00:59:10 +00:00
Debbie (Paperclip Agent) fb6f4a0ed4 Retrigger CI after org secrets provisioned
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 00:55:24 +00:00
Debbie (Paperclip Agent) e6f09a0212 Fix: remove conditional on Docker Hub login
Board confirmed DOCKERHUB_USERNAME/DOCKERHUB_TOKEN secrets exist.
Remove the conditional (which had a YAML parsing issue with unquoted !=).

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-19 00:52:11 +00:00
Debbie (CartSnitch Engineering) 58844b33fe Fix: make Docker Hub auth conditional
Docker Hub login step is now conditional on secret existence
to avoid failures when org secrets are not yet provisioned.

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-18 23:53:50 +00:00
Debbie (CartSnitch Engineering) 0000297e4f Revert GHCR mirror configs to Docker Hub direct pulls
Replace ghcr.io/cartsnitch/mirror/* images with Docker Hub originals,
restore GHCR login guard, and add Docker Hub auth.

Refs: CAR-77

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-18 23:48:43 +00:00
chip-overstock[bot] e572a32021 Merge pull request #11 from cartsnitch/fix/ghcr-mirror-base-images
Switch Dockerfile base images to GHCR mirror
2026-03-18 18:52:27 +00:00
deploy-debbie[bot] 0789de39f0 Switch base images from Docker Hub to GHCR mirror
Avoids Docker Hub 429 rate limits by pulling node:20-alpine and
nginx:stable-alpine from ghcr.io/cartsnitch/mirror/. GHCR login
now runs on all builds (not just main push) to authenticate pulls.

Ref: cartsnitch/infra#7, CAR-55

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-18 18:37:47 +00:00
deploy-debbie[bot] e57baa4468 feat: add Renovate dependency update config
Extends the shared CartSnitch Renovate preset from cartsnitch/.github.
Minor/patch automerge, major requires review, dependency PRs labeled and grouped.

Co-authored-by: Deploy Debbie <debbie@cartsnitch.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-03-18 18:21:31 +00:00
deploy-debbie[bot] e42b7e1a66 fix(ci): remove unnecessary Docker Hub login step
The build-and-push job had an unconditional Docker Hub login step that
was failing because DOCKERHUB_USERNAME and DOCKERHUB_TOKEN secrets are
not provisioned. Since we push images to GHCR (not Docker Hub), this
step is not needed.

Closes cartsnitch/infra#5

Co-authored-by: deploy-debbie[bot] <268472978+deploy-debbie[bot]@users.noreply.github.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-03-18 18:20:31 +00:00
2 changed files with 7 additions and 9 deletions
+3 -9
View File
@@ -20,7 +20,7 @@ env:
jobs:
lint:
runs-on: local-ubuntu-latest-cartsnitch
runs-on: runners-cartsnitch
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
@@ -34,7 +34,7 @@ jobs:
run: npx tsc --noEmit
test:
runs-on: local-ubuntu-latest-cartsnitch
runs-on: runners-cartsnitch
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
@@ -46,17 +46,11 @@ jobs:
run: npx vitest run
build-and-push:
runs-on: local-ubuntu-latest-cartsnitch
runs-on: runners-cartsnitch
needs: [lint, test]
steps:
- uses: actions/checkout@v4
- name: Log in to Docker Hub
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Log in to GHCR
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
uses: docker/login-action@v3
+4
View File
@@ -0,0 +1,4 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["local>cartsnitch/.github:renovate-config"]
}