Merge branch 'main' into plugin-settings

Declare plugin settings in the manifest, resolve them from the environment
Update renovate/renovate Docker tag to v44.39.2
2026-08-23 16:23:14 +02:00 · 2026-08-23 13:17:03 +02:00 · 2026-08-23 04:18:02 +00:00 · 2026-08-22 22:16:22 +02:00 · 2026-08-22 21:58:14 +02:00 · 2026-08-22 21:54:19 +02:00
1 changed files with 1 additions and 1 deletions
@@ -21,7 +21,7 @@ jobs:
            -e RENOVATE_PLATFORM=gitea \
            -e RENOVATE_REPOSITORIES=${{ github.repository }} \
            -e RENOVATE_TOKEN \
-            renovate/renovate:44.39.1
+            renovate/renovate:44.39.2
  # After the renovate job, cut ONE tag covering the renovate-bot commits merged to main since the
  # last tag (batch per run). Targets origin/main — the real post-merge tip; the checkout SHA is the
Author	SHA1	Message	Date
lilleman	83c9fa68a9	Merge branch 'main' into plugin-settings Release / retag-image (push) Failing after 4s Details Release / publish-overview (push) Has been skipped Details Mirror / github-mirror (push) Successful in 6s Details	2026-08-23 16:23:14 +02:00
lilleman	fa7cad1d65	Declare plugin settings in the manifest, resolve them from the environment	2026-08-23 13:17:03 +02:00
renovate-bot	3f74bf8832	Update renovate/renovate Docker tag to v44.39.2	2026-08-23 04:18:02 +00:00
lilleman	aff47c8b90	Merge branch 'main' into auto-release-only-when-affected Mirror / github-mirror (push) Successful in 5s Details Release / retag-image (push) Failing after 4s Details Release / publish-overview (push) Has been skipped Details	2026-08-22 22:16:22 +02:00
lilleman	9a1bfcc69d	Follow mailpit to v1.31.0 in the published quick start	2026-08-22 21:58:14 +02:00
lilleman	075cd2f090	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-22 21:54:19 +02:00
lilleman	fd32bea28e	Merge branch 'main' into auto-release-only-when-affected	2026-08-22 21:53:53 +02:00
lilleman	47f4498fff	Use one Docker Hub credential for images and the overview	2026-08-22 14:27:31 +02:00
lilleman	bcff5967ad	Name the scope the overview actually needs	2026-08-22 14:21:14 +02:00
lilleman	cbf55bebae	Give each version mismatch its own remedy, and stop publishing a moving bare-major tag	2026-08-22 12:27:43 +02:00
lilleman	9e0cb26b3e	Refuse a 0.x minor mismatch, and republish the overview from the named release's tree	2026-08-22 12:13:41 +02:00
lilleman	02617a935e	Keep the proven always() guard on the overview job	2026-08-22 12:03:18 +02:00
lilleman	8fd492e544	Scope the sidecar trailer by package so a mixed branch cannot lose it	2026-08-22 12:01:35 +02:00
lilleman	6c5eddf0c9	Accept the README-only gate skip, and say why it is safe	2026-08-22 11:58:28 +02:00
lilleman	f416abf936	Manage the published quick start's pins, and fail closed on every release-tooling edge	2026-08-22 11:45:46 +02:00
lilleman	e44b86f532	Gate the overview's manual trigger on the same contract check as a tag	2026-08-22 11:27:35 +02:00
lilleman	bfcf4ed072	Trim the prose to what is true now	2026-08-22 11:24:16 +02:00
lilleman	a3d9a3df5f	Keep the release at v0.1.0 — nothing consumed the old contract	2026-08-22 11:21:42 +02:00
renovate-bot	5befa2775a	Update renovate/renovate Docker tag to v44.39.1	2026-08-22 04:18:35 +00:00
renovate-bot	d3b227eef8	Update axllent/mailpit Docker tag to v1.31.0	2026-08-22 04:18:30 +00:00
renovate-bot	a96a2b8abd	Update renovate/renovate Docker tag to v44.37.1	2026-08-21 04:18:10 +00:00
lilleman	d545445ea8	Release this as v0.2.0, and give the Hub overview its own job, token and template	2026-08-20 23:32:10 +02:00
lilleman	c35ba3fb4e	Make the plugin contract version the release version, and publish the Docker Hub overview from CI	2026-08-20 23:16:11 +02:00
lilleman	27a8cdc385	Release nothing when no Renovate commit reached the app	2026-08-20 23:02:21 +02:00
lilleman	4b48bc2416	Scope Release-Bump to the surfaces that ship, and drop the inert package.json versions	2026-08-20 22:43:36 +02:00
lilleman	ef96ebd1f4	Rewrap the auto-release paragraph	2026-08-20 22:04:23 +02:00
lilleman	ecf33733a1	Lift the pre-release freeze — releases resume and the plugin contract goes live	2026-08-20 22:02:29 +02:00
lilleman	c16fb2449b	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-20 21:52:27 +02:00
lilleman	d823f830c3	Merge remote-tracking branch 'origin/main' into plugin-storage # Conflicts: # package-lock.json # package.json	2026-08-20 21:47:22 +02:00
renovate-bot	1a1aad90e3	Update dependency lucide-static to v1.33.0 Release-Bump: minor	2026-08-20 04:17:56 +00:00
lilleman	45b3cfc010	Merge remote-tracking branch 'origin/main' into plugin-storage # Conflicts: # package-lock.json # package.json	2026-08-19 20:34:30 +02:00
lilleman	a3cb1f4840	Merge branch 'main' into renovate/renovate-renovate-44.x	2026-08-19 20:29:09 +02:00
renovate-bot	0f40d06f3b	Update renovate/renovate Docker tag to v44.33.2 Release-Bump: minor	2026-08-19 04:18:20 +00:00
renovate-bot	b39defe39d	Update dependency lucide-static to v1.32.0 Release-Bump: minor	2026-08-19 04:18:11 +00:00
lilleman	e0046e5068	Warn rather than refuse on a storage URL mismatch, and scrub the provisioning DSN before discovery	2026-08-19 01:03:40 +02:00
lilleman	5589472e25	Keep role re-assertion within a non-superuser provisioner's rights, and test the second boot	2026-08-19 00:44:49 +02:00
lilleman	e66a8a3e89	Isolate the storage CI stack, prove least-privilege provisioning, drop the secret before discovery	2026-08-19 00:20:17 +02:00
lilleman	060535c8ab	Confine the Postgres driver to bootstrap, bound plugin connections, and gate the storage DDL	2026-08-19 00:08:35 +02:00
lilleman	d2211cf75a	Refuse a throwaway plugin storage secret in bootstrap, before any role is created	2026-08-18 23:24:34 +02:00
lilleman	c7013be2f0	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	9ff8f57509	Todo: note the code-field hint landed, the paste fix did not	2026-08-18 22:07:21 +02:00
lilleman	8f3fc7414a	Hint the code field's digits-only rule, so the browser's refusal isn't bare	2026-08-18 22:07:12 +02:00
lilleman	552cc6bd97	Todo: record the flow-POST proxy findings for the verification-code fix	2026-08-18 22:00:31 +02:00
lilleman	52a3228503	Todo: record the manifest-over-.env decision for plugin config	2026-08-18 21:55:35 +02:00
lilleman	ee7b78b94d	Let Renovate reach the example plugins' manifests	2026-08-18 21:55:35 +02:00
lilleman	65e76b69fd	Refuse a stray package.json or node_modules in config/ by name	2026-08-18 21:55:32 +02:00
lilleman	e00dad8ed7	Merge branch 'main' into plugin-dependencies	2026-08-18 18:33:24 +02:00
lilleman	cb59eee76d	Refuse a node_modules at the plugins/ root, where it outranks the host's	2026-08-18 08:14:21 +02:00
lilleman	82af77356f	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
lilleman	94dc581593	Fail loud on a null package.json and a stray plugins/package.json	2026-08-17 22:50:29 +02:00
lilleman	453058c67b	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00