release v1.0.7 [skip ci]

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` |

---

### Release Notes

<details>
<summary>docker/build-push-action (docker/build-push-action)</summary>

### [`v7`](https://github.com/docker/build-push-action/compare/v6...v7)

[Compare Source](https://github.com/docker/build-push-action/compare/v6...v7)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41Ni4xIiwidXBkYXRlZEluVmVyIjoiNDMuNTYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: #19
Reviewed-by: Keli Grubb <keligrubb324@gmail.com>
Co-authored-by: Renovate Bot <renovate@keligrubb.com>
Co-committed-by: Renovate Bot <renovate@keligrubb.com>

.gitea/workflows/pr.yml

@@ -4,7 +4,7 @@ on:
   pull_request:
 
 jobs:
-  install:
+  lint:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
@@ -18,35 +18,11 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Upload node_modules
-        uses: actions/upload-artifact@v7
-        with:
-          name: node-modules
-          path: node_modules/
-
-  lint:
-    runs-on: ubuntu-latest
-    needs: install
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: "24"
-          cache: "npm"
-
-      - name: Restore node_modules
-        uses: actions/download-artifact@v8
-        with:
-          name: node-modules
-
       - name: Run lint
         run: npm run lint
 
   test:
     runs-on: ubuntu-latest
-    needs: install
     steps:
       - uses: actions/checkout@v6
 
@@ -56,17 +32,16 @@ jobs:
           node-version: "24"
           cache: "npm"
 
-      - name: Restore node_modules
+      - name: Install dependencies
-        uses: actions/download-artifact@v8
+        run: npm ci
-        with:
-          name: node-modules
 
       - name: Run tests
         run: npm run test
 
   e2e:
     runs-on: ubuntu-latest
-    needs: install
+    container:
+      image: mcr.microsoft.com/playwright:v1.58.2-noble
     steps:
       - uses: actions/checkout@v6
 
@@ -76,13 +51,8 @@ jobs:
           node-version: "24"
           cache: "npm"
 
-      - name: Restore node_modules
+      - name: Install dependencies
-        uses: actions/download-artifact@v8
+        run: npm ci
-        with:
-          name: node-modules
-
-      - name: Install Playwright browsers
-        run: npx playwright install --with-deps chromium
 
       - name: Generate dev cert
         run: ./scripts/gen-dev-cert.sh
@@ -97,12 +67,19 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
+      - name: Set Docker image tag
+        id: image
+        run: |
+          REGISTRY="${GITHUB_SERVER_URL#https://}"
+          REGISTRY="${REGISTRY#http://}"
+          echo "tag=${REGISTRY}/${{ github.repository }}:latest" >> $GITHUB_OUTPUT
+
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build (dry run)
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: false
-          tags: ${{ github.server_url }}/${{ github.repository }}:latest
+          tags: ${{ steps.image.outputs.tag }}

.gitea/workflows/push.yml

@@ -10,7 +10,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
         with:
-          token: ${{ secrets.GITEA_REPO_TOKEN }}
+          token: ${{ secrets.KESTRELOS_REPO_TOKEN }}
 
       - name: Release (bump, tag, push, create release)
         env:
@@ -18,21 +18,23 @@ jobs:
           CI_REPO_NAME: ${{ github.event.repository.name }}
           CI_FORGE_URL: ${{ github.server_url }}
           CI_COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
-          GITEA_REPO_TOKEN: ${{ secrets.GITEA_REPO_TOKEN }}
+          GITEA_REPO_TOKEN: ${{ secrets.KESTRELOS_REPO_TOKEN }}
         run: |
           sudo apt-get update -qq && sudo apt-get install -y -qq git wget
           ./scripts/release.sh
 
       - name: Log in to container registry
-        run: |
+        uses: docker/login-action@v4
-          REGISTRY="${GITHUB_SERVER_URL#https://}"
+        with:
-          echo "${{ secrets.GITEA_REGISTRY_TOKEN }}" | docker login "$REGISTRY" -u "${{ github.actor }}" --password-stdin
+          registry: git.keligrubb.com
+          username: ${{ github.actor }}
+          password: ${{ secrets.KESTRELOS_REPO_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           load: true
@@ -40,20 +42,22 @@ jobs:
 
       - name: Push Docker image (all tags from .tags)
         run: |
-          REGISTRY="${GITHUB_SERVER_URL#https://}"
+          REGISTRY="git.keligrubb.com"
           IMAGE="$REGISTRY/${{ github.repository }}"
           while read -r tag; do
             docker tag kestrelos:built "$IMAGE:$tag"
             docker push "$IMAGE:$tag"
           done < .tags
 
+      - name: Set up Helm
+        uses: azure/setup-helm@v4
+
       - name: Package and push Helm chart
         env:
-          GITEA_REGISTRY_TOKEN: ${{ secrets.GITEA_REGISTRY_TOKEN }}
+          GITEA_REPO_TOKEN: ${{ secrets.KESTRELOS_REPO_TOKEN }}
         run: |
-          curl -sSfL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
           helm package helm/kestrelos
           for f in kestrelos-*.tgz; do
-            curl -sf -u "${{ github.actor }}:$GITEA_REGISTRY_TOKEN" -X POST --upload-file "$f" \
+            curl -sf -u "${{ github.actor }}:$GITEA_REPO_TOKEN" -X POST --upload-file "$f" \
               "${{ github.server_url }}/api/packages/${{ github.actor }}/helm/api/charts"
           done

CHANGELOG.md

@@ -1,3 +1,19 @@
+## [1.0.7] - 2026-03-06
+### Changed
+- chore(deps): update docker/build-push-action action to v7 (#19)
+
+## [1.0.6] - 2026-03-05
+### Changed
+- fix docker login during push stage (#18)
+
+## [1.0.5] - 2026-03-05
+### Changed
+- fix deploy pipeline stages for token registry uploads (#17)
+
+## [1.0.4] - 2026-03-04
+### Changed
+- fix deploy pipeline (#15)
+
 ## [1.0.3] - 2026-02-23
 ### Changed
 - fix(deps): update dependency vue-router to v5 (#12)

helm/kestrelos/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: kestrelos
 description: KestrelOS TOC for OSINT feeds - map, camera feeds, offline tiles
 type: application
-version: 1.0.3
+version: 1.0.7
-appVersion: "1.0.3"
+appVersion: "1.0.7"

helm/kestrelos/values.yaml

@@ -2,7 +2,7 @@ replicaCount: 1
 
 image:
   repository: git.keligrubb.com/keligrubb/kestrelos
-  tag: 1.0.3
+  tag: 1.0.7
   pullPolicy: IfNotPresent
 
 service:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "kestrelos",
-  "version": "1.0.3",
+  "version": "1.0.7",
   "private": true,
   "type": "module",
   "scripts": {