243 Commits

Include renames

Author	SHA1	Message	Date
openhands	d9ef7f8360	chore(ci): remove Renovate ... Dependency updates are handled manually, so the scheduled Renovate job only cost a daily privileged Docker run on the deploy host. The empty cache directory it maintained is gone too, and the operations note now records that updates are manual instead of describing bot behaviour.	2026-09-27 19:15:31 +02:00
openhands	761bfb2940	ci: run unit, integration and UI tests as parallel jobs ... Split the heavy test suites out of the check job so coverage, MariaDB/Redis integration and Playwright UI tests run concurrently on the host runner (capacity raised to 4) instead of back-to-back (~2min wall-time saving). Deploy and preflight now gate on all three test jobs.	2026-09-22 21:18:49 +02:00
openhands	292268f418	ci: reuse host-playwright browser cache instead of re-downloading chromium ... Point PLAYWRIGHT_BROWSERS_PATH at the persistent /opt/ms-playwright dir on the host runner so 'playwright install chromium' is an instant no-op after the first run (was ~100s CDN download per job).	2026-09-22 21:10:15 +02:00
openhands	b2777634f7	ci: run all workflows on the self-hosted host runner ... - Switch test-runner and renovate workflows from ubuntu-latest to self-hosted now that a native host runner is running as a systemd service - Replace remaining hardcoded color utilities in the homepage with theme tokens and inline rgba styles to satisfy the no-hardcoded-colors contract - Restore dual UserAvatarThumbnail usage on the homepage (hero avatar stack plus community grid) to satisfy the public avatar presentation contract	2026-09-22 20:59:02 +02:00
openhands	898204ce83	test-workflow for runner v3.5.0	2026-09-21 21:32:50 +02:00
Simo	fff284aaa0	ci: remove container publication workflows	2026-09-14 21:28:21 +02:00
Simo	33a760ab6b	ci: verify isolated Docker news journeys before merging to main	2026-09-13 21:05:02 +02:00
Simo	7867bf6b72	test(news): gate deployment on an isolated real browser publication journey	2026-09-13 20:27:04 +02:00
Simo	422be3ce2d	test(ci): gate deployments on MariaDB and Redis integration checks	2026-09-13 17:47:58 +02:00
Simo	a45d792563	ci: enforce reviewed Linux visual regression baselines	2026-09-11 09:09:05 +02:00
Simo	88790d1a0d	feat(cms): recover drafts and failed imports with verified UI workflows	2026-09-11 08:58:10 +02:00
Simo	cc714b427a	ci: report per-route JavaScript budgets from Docker build	2026-09-11 08:41:31 +02:00
Simo	867113d5d4	fix(ci): publish container under token account namespace	2026-09-09 19:53:16 +02:00
Simo	b3a6531d7b	Merge branch 'main' of https://gitlab.epicnabbo.nl/remco/EpicNext-Cms	2026-09-09 18:29:06 +02:00
openhands	8a911f2cf6	perf: cap CI test workers at 4 to protect shared production host	2026-09-08 18:34:08 +02:00
openhands	5a79090942	perf: use all 6 cores for CI test run ... Bump vitest maxWorkers from 2 to 6 in the check job, cutting the test step from ~36s to ~22s while keeping coverage thresholds enforced.	2026-09-08 18:31:40 +02:00
openhands	54b7c67878	perf: speed up local test runs by moving coverage to optional script ... Run vitest without coverage by default (pnpm test) and add pnpm test:coverage which enforces the coverage thresholds. CI keeps using the coverage run so thresholds are still enforced on every push.	2026-09-08 18:12:34 +02:00
openhands	ecadef904d	chore: remove knip, husky and lint-staged ... Drop the unused knip dead-code check and the husky+lint-staged pre-commit hook pipeline. All checks remain covered by the CI workflow (lint, typecheck, i18n, tests).	2026-09-08 16:56:55 +02:00
Simo	f1571a1a62	ci: publish portable containers after successful main deployment	2026-09-07 23:02:18 +02:00
Simo	c4496e710b	feat(docker): prepare portable images with runtime hotel configuration	2026-09-07 22:37:53 +02:00
Simo	ef94646d60	fix(i18n): persist CMS translations and validate message catalogs	2026-09-06 17:55:11 +02:00
Simo	7c1f109a9d	ci: serialize deployments and restore previous release on smoke failure	2026-09-06 11:48:20 +02:00
Simo	2840ef5d9d	perf(docker): reuse dependency layers and preserve build caches	2026-09-06 11:01:31 +02:00
openhands	226d280c22	ci: prune docker cache after CI runs	2026-09-05 20:13:13 +02:00
Simo	816e3875c2	feat(admin): add production error center and refresh CMS dependencies	2026-09-05 19:53:09 +02:00
openhands	4007b01da9	ci: run e2e smoke against deployed app and ignore playwright artifacts ... - Add e2e job (needs deploy, main/master only) that installs the Playwright browser and smoke-tests the live container on :3002 - Keep deploy-job contract slice from bleeding into the e2e job - Cover the e2e job in the CI workflow contract test - Ignore Playwright output dirs (test-results, playwright-report, blob-report)	2026-09-04 13:32:51 +02:00
openhands	399c047515	fix: harden admin actions, search, sanitization and repo hygiene ... - Split approve/dismiss application workflows with distinct audit logs, rate-limited guards and real error logging - Validate article status/date/id input and stop resetting publishedAt on every update - Validate guild updates (state, forum enums, non-empty name) behind rate-limited guard - Fix scheduled-article publishing (ignore NULL dates, set updatedAt, type-safe predicates) - Harden admin search API (LIKE escaping, query cap, per-user rate limit, round-robin result cap) and fix search dialog abort/res.ok/loading races - Lock down HTML sanitizer to an allowlist profile and add XSS tests - Improve mobile nav accessibility (unique id, dialog role, focus management, scroll lock, outside close) - Log swallowed server errors instead of silent catch blocks - Remove dead eslint config, drop unused dompurify deps, restore knip CI step, add Playwright config with smoke spec	2026-09-04 13:04:08 +02:00
openhands	61769e355b	fix(ci): draai DB-migraties in deploy voor het vervangen van de container ... Zonder dit loopt nieuwe code tegen een oud schema aan zodra een push migraties bevat. Idempotent (toegepaste migraties worden overgeslagen), draait op de host met de productie-.env, vóór de container-replace.	2026-09-04 12:34:49 +02:00
openhands	3fdcf028e8	fix(ci): geef runtime-env door via -e i.p.v. --env-file ... docker run --env-file behoudt letterlijke quotes (bewezen test), waardoor DATABASE_URL ongeldig was en de container crashte. Nu wordt .env gesourced en elke sleutel met -e doorgegeven: exact dezelfde waarden als bij de build. Contract-test verbiedt --env-file.	2026-09-04 12:29:06 +02:00
openhands	10da44ee56	fix(ci): bouw met productie-.env, deploy met env+volumes en rollback ... - Deploy kopieert de productie-.env van de host in de build-context: Next.js bakt NEXT_PUBLIC_* in en valideert DATABASE_URL/HOTEL_NAME (SKIP_ENV_VALIDATION is verboden voor productie, zie src/env.ts). - Dockerfile builder installeert git (next.config.ts deploymentId). - Deploy-container krijgt --env-file + dezelfde volumes als compose, stopt ook de oude compose-container (poort 3002) en rolt terug via compose bij een falende health check.	2026-09-04 12:22:02 +02:00
openhands	43ecdaee19	fix(ci): docker build met --network=host tegen hangende registry-stappen ... De host heeft Docker iptables uitgeschakeld, dus build-containers op bridge hebben geen outbound internet; 'npm install -g pnpm' in de builder-stage hing daardoor. Met --network=host krijgt de build wel registry-toegang. Contract-test vergrendelt de flag.	2026-09-04 12:16:26 +02:00
openhands	cdb0fef6c9	fix(ci): remove invalid --jobs flag from pnpm install ... pnpm 11 has no --jobs option for install; the stray positional '1' flipped the command into 'add' mode, which then rejected both --frozen-lockfile and --jobs ('Unknown options', 'pnpm help add'). Reproduced locally, fixed, verified install succeeds. Add contract regression test.	2026-09-04 12:11:35 +02:00
openhands	4139aa79ff	fix(ci): draai alle jobs op self-hosted voor 100% betrouwbaarheid ... Root cause: de job-container (docker mode) heeft GEEN outbound internet naar GitHub, waardoor actions/checkout@v4 faalde met 'Unable to clone ... i/o timeout'. Oplossing: zowel check als deploy draaien nu op self-hosted (host) waar Node 26.8.1 + pnpm 11.25.0 geïnstalleerd zijn en internet beschikbaar is. Dit is de enige betrouwbare setup in deze omgeving. Runner is tevens hernoemd naar 'Epic runner'.	2026-09-04 11:35:22 +02:00
openhands	3c0acc3fcf	refactor(ci): volledig opnieuw geschreven CI workflow ... - Check job: lint, typecheck, test in node:26 container - Deploy job: Docker build + deploy + health check op host - Corepack pnpm installatie - BuildKit caching - Contract tests herschreven (18 tests)	2026-09-04 11:26:25 +02:00
openhands	a52cbead8a	perf(ci): snellere workflow + Epic runner naam ... - Runner hernoemd naar 'Epic runner' - Env variabelen als global env (niet per step) - fetch-depth: 1 voor snellere checkout - Knip verwijderd (traag, niet kritiek) - Docker BuildKit caching - Health check opgeschoond	2026-09-04 11:22:28 +02:00
openhands	e97a9f3119	fix(ci): update runner labels en workflow voor self-hosted Docker setup ... - Check job: node:26-bookworm-slim image + corepack pnpm - Deploy job: self-hosted host mode voor Docker CLI toegang - Health check na deploy (30 pogingen) - Runner labels bijgewerkt in docker-compose	2026-09-04 11:12:49 +02:00
openhands	f0efb6b169	Fix: CI bestand hernoemd naar .yaml voor contract tests	2026-09-03 17:26:21 +02:00
openhands	c992bed970	Fix: dubbele CI bestanden opgeruimd en contract test gefixt	2026-09-03 17:25:40 +02:00
openhands	c1b0c40725	perf: voeg CPU en RAM limieten toe tegen server lag	2026-09-03 17:10:08 +02:00
openhands	15a0007fa7	fix: switch naar host executor	2026-09-03 17:09:02 +02:00
openhands	4ce5f8ae56	fix: wijzig test databases naar host gateway	2026-09-03 17:07:16 +02:00
openhands	4852847e0f	fix: forceer HTTPS checkout actie	2026-09-03 17:05:08 +02:00
openhands	3bf9765917	fix: gebruik officiële checkout actie ipv lokaal pad	2026-09-03 17:04:28 +02:00
openhands	fcf3d62197	fix: corrigeer git remote paden voor docker runner	2026-09-03 16:41:37 +02:00
openhands	7f1482cd1e	fix: forceer bash installatie in alpine runner container	2026-09-03 16:39:02 +02:00
openhands	2a7702cade	fix: verander Gitea runner van shell naar ubuntu-latest	2026-09-03 16:13:49 +02:00
Simo	e3a4726648	ci: register permission diagnostics command	2026-08-31 21:15:14 +02:00
Simo	75b85dcdd9	ci: probe permission page database reads	2026-08-31 21:13:03 +02:00
Simo	a11575bae3	ci: add manual runtime diagnostics	2026-08-31 21:09:06 +02:00
Simo	6ed1b03e24	chore: align Node 26.7.0 toolchain	2026-08-24 19:12:11 +02:00