patch: use mirrors for ci actions

.gitea/workflows/pr.yml

@@ -41,7 +41,7 @@ jobs:
   e2e:
     runs-on: ubuntu-latest
     container:
-      image: mcr.microsoft.com/playwright:v1.59.1-noble
+      image: mcr.microsoft.com/playwright:v1.58.2-noble
     steps:
       - uses: https://git.keligrubb.com/actions/checkout@v6
 
@@ -79,14 +79,7 @@ jobs:
 
       - name: Build (dry run)
         uses: https://git.keligrubb.com/actions/docker-build-push-action@v7
-        env:
-          # Keeps GITHUB_OUTPUT small; Gitea act-runner can choke on multiline
-          # outputs when PR webhook payloads (e.g. Renovate bodies) are huge.
-          DOCKER_BUILD_SUMMARY: "false"
-          DOCKER_BUILD_RECORD_UPLOAD: "false"
         with:
           context: .
           push: false
-          provenance: false
-          sbom: false
           tags: ${{ steps.image.outputs.tag }}

.gitea/workflows/push.yml

@@ -5,25 +5,13 @@ on:
     branches: [main]
 
 jobs:
-  release:
+  release-docker-helm:
     runs-on: ubuntu-latest
     steps:
       - uses: https://git.keligrubb.com/actions/checkout@v6
         with:
           token: ${{ secrets.KESTRELOS_REPO_TOKEN }}
 
-      - name: Get PR description for changelog
-        env:
-          GITEA_REPO_TOKEN: ${{ secrets.KESTRELOS_REPO_TOKEN }}
-        run: |
-          sudo rm -f /etc/apt/sources.list.d/microsoft*.list /etc/apt/sources.list.d/azure*.list 2>/dev/null || true
-          sudo apt-get update -qq && sudo apt-get install -y -qq jq
-          RESP=$(curl -sf -H "Authorization: token $GITEA_REPO_TOKEN" \
-            "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/commits/${{ github.sha }}/pull") || true
-          if [ -n "$RESP" ]; then
-            echo "$RESP" | jq -r '.body // empty' > .ci_pr_body 2>/dev/null || true
-          fi
-
       - name: Release (bump, tag, push, create release)
         env:
           CI_REPO_OWNER: ${{ github.actor }}
@@ -32,19 +20,9 @@ jobs:
           CI_COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
           GITEA_REPO_TOKEN: ${{ secrets.KESTRELOS_REPO_TOKEN }}
         run: |
-          sudo rm -f /etc/apt/sources.list.d/microsoft*.list /etc/apt/sources.list.d/azure*.list 2>/dev/null || true
           sudo apt-get update -qq && sudo apt-get install -y -qq git wget
           ./scripts/release.sh
 
-  publish:
-    needs: release
-    runs-on: ubuntu-latest
-    steps:
-      - uses: https://git.keligrubb.com/actions/checkout@v6
-        with:
-          ref: main
-          token: ${{ secrets.KESTRELOS_REPO_TOKEN }}
-
       - name: Log in to container registry
         uses: https://git.keligrubb.com/actions/docker-login-action@v4
         with:
@@ -62,22 +40,17 @@ jobs:
           load: true
           tags: kestrelos:built
 
-      - name: Push Docker image (version + latest)
+      - name: Push Docker image (all tags from .tags)
         run: |
-          VERSION=$(awk '/"version"/ { match($0, /[0-9]+\.[0-9]+\.[0-9]+/); print substr($0, RSTART, RLENGTH); exit }' package.json)
-          case "$VERSION" in
-            [0-9]*.[0-9]*.[0-9]*) ;;
-            *) echo "error: package.json version must be x.y.z (got: $VERSION)"; exit 1 ;;
-          esac
           REGISTRY="git.keligrubb.com"
           IMAGE="$REGISTRY/${{ github.repository }}"
-          for tag in "$VERSION" latest; do
+          while read -r tag; do
             docker tag kestrelos:built "$IMAGE:$tag"
             docker push "$IMAGE:$tag"
-          done
+          done < .tags
 
       - name: Set up Helm
-        uses: https://git.keligrubb.com/actions/setup-helm@v5
+        uses: https://git.keligrubb.com/actions/setup-helm@v4
 
       - name: Package and push Helm chart
         env:

CHANGELOG.md

@@ -1,116 +1,3 @@
-## [1.1.3] - 2026-04-19
-### Changed
-- update dependency mediasoup-client to v3.18.8 (#30)
-
-This PR contains the following updates:
-
-| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
-|---|---|---|---|
-| [mediasoup-client](https://mediasoup.org) ([source](https://github.com/versatica/mediasoup-client)) | [`3.18.7` → `3.18.8`](https://renovatebot.com/diffs/npm/mediasoup-client/3.18.7/3.18.8) | ![age](https://developer.mend.io/api/mc/badges/age/npm/mediasoup-client/3.18.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mediasoup-client/3.18.7/3.18.8?slim=true) |
-
----
-
-### Release Notes
-
-<details>
-<summary>versatica/mediasoup-client (mediasoup-client)</summary>
-
-### [`v3.18.8`](https://github.com/versatica/mediasoup-client/compare/3.18.7...3.18.8)
-
-[Compare Source](https://github.com/versatica/mediasoup-client/compare/3.18.7...3.18.8)
-
-</details>
-
----
-
- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
-<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEyOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
-
-## [1.1.2] - 2026-04-15
-### Changed
-- Update dependency fast-xml-parser to v5.6.0 (#28)
-
-This PR contains the following updates:
-
-| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
-|---|---|---|---|
-| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | [`5.5.12` → `5.6.0`](https://renovatebot.com/diffs/npm/fast-xml-parser/5.5.12/5.6.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/fast-xml-parser/5.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/fast-xml-parser/5.5.12/5.6.0?slim=true) |
-
----
-
-### Release Notes
-
-<details>
-<summary>NaturalIntelligence/fast-xml-parser (fast-xml-parser)</summary>
-
-### [`v5.6.0`](https://github.com/NaturalIntelligence/fast-xml-parser/releases/tag/v5.6.0): use @&#8203;nodable/entities to replace entities
-
-[Compare Source](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.12...v5.6.0)
-
-- No API change
-- No change in performance for basic usage
-- No typing change
-- No config change
-- new dependency
-- breaking: error messages for entities might have been changed.
--
-
-**Full Changelog**: <https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.12...v5.6.0>
-
-</details>
-
----
-
-### Configuration
-
-📅 **Schedule**: (UTC)
-
-- Branch creation
-  - At any time (no schedule defined)
-- Automerge
-  - At any time (no schedule defined)
-
-🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
-
-♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
-
-🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
-
----
-
- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
-
----
-
-This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
-<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEyMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
-
-## [1.1.1] - 2026-04-15
-### Changed
-- split push release/publish and harden workflows (#27)
-
-### Added
-* Separate release from Docker/Helm publish
-* enrich releases with PRbodies when available
-* tighten release.sh validation and idempotency
-* trim PR docker-build metadata for act-runner stability
-
-## [1.1.0] - 2026-04-15
-### Changed
-- Update all non-major dependencies (#25)
-
-## [1.0.10] - 2026-04-15
-### Changed
-- Remove npm overrides for tar (#26)
-
-## [1.0.9] - 2026-03-24
-### Changed
-- update https://git.keligrubb.com/actions/setup-helm action to v5 (#23)
-
-## [1.0.8] - 2026-03-12
-### Changed
-- fix release file (#22)
-
 ## [1.0.7] - 2026-03-06
 ### Changed
 - chore(deps): update docker/build-push-action action to v7 (#19)

helm/kestrelos/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: kestrelos
 description: KestrelOS TOC for OSINT feeds - map, camera feeds, offline tiles
 type: application
-version: 1.1.3
-appVersion: "1.1.3"
+version: 1.0.7
+appVersion: "1.0.7"

helm/kestrelos/values.yaml

@@ -2,7 +2,7 @@ replicaCount: 1
 
 image:
   repository: git.keligrubb.com/keligrubb/kestrelos
-  tag: 1.1.3
+  tag: 1.0.7
   pullPolicy: IfNotPresent
 
 service:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "kestrelos",
-  "version": "1.1.3",
+  "version": "1.0.7",
   "private": true,
   "type": "module",
   "scripts": {
@@ -45,5 +45,8 @@
     "eslint": "^10.0.0",
     "happy-dom": "^20.6.1",
     "vitest": "^4.0.0"
+  },
+  "overrides": {
+    "tar": "^7.5.7"
   }
 }

scripts/release.sh

@@ -19,19 +19,15 @@ echo "$msg" | grep -Eqi '(^|[[:space:]])[a-zA-Z]+(\([^)]*\))?!:' && bump=major
 # Explicit bump prefixes still supported (but never downgrade a major bump)
 echo "$msg" | grep -qi minor: && [ "$bump" != "major" ] && bump=minor
 echo "$msg" | grep -qi major: && bump=major
-cur=$(awk '/"version"/ { match($0, /[0-9]+\.[0-9]+\.[0-9]+/); print substr($0, RSTART, RLENGTH); exit }' package.json)
+cur=$(cat VERSION | tr -d '\n')
 case "$cur" in
-  [0-9]*.[0-9]*.[0-9]*) ;;
-  *) echo "error: package.json version must be x.y.z (got: $cur)"; exit 1 ;;
+	[0-9]*.[0-9]*.[0-9]*) ;;
+	*) echo "error: VERSION must be x.y.z (got: $cur)"; exit 1 ;;
 esac
 major=$(echo "$cur" | cut -d. -f1); minor=$(echo "$cur" | cut -d. -f2); patch=$(echo "$cur" | cut -d. -f3)
 case "$bump" in major) major=$((major+1)); minor=0; patch=0 ;; minor) minor=$((minor+1)); patch=0 ;; patch) patch=$((patch+1)) ;; esac
 newVersion="$major.$minor.$patch"
-
-url="https://${CI_REPO_OWNER}:${GITEA_REPO_TOKEN}@${CI_FORGE_URL#https://}/${CI_REPO_OWNER}/${CI_REPO_NAME}.git"
-if [ -n "$(git ls-remote "$url" "refs/tags/v$newVersion" 2>/dev/null)" ]; then
-  exit 0
-fi
+[ -z "$cur" ] && { echo "error: could not read version from VERSION"; exit 1; }
 
 # changelog entry (strip explicit bump prefixes & any conventional-commit type(scope):); optional PR description enriches it
 changelogEntry=$(
@@ -50,9 +46,9 @@ else
 fi
 
 # bump files
-awk -v v="$newVersion" '/"version"/ { sub(/[0-9]+\.[0-9]+\.[0-9]+/, v) } { print }' package.json > package.json.tmp && mv package.json.tmp package.json
-awk -v v="$newVersion" '/^version:/ { $0 = "version: " v }; /^appVersion:/ { $0 = "appVersion: \"" v "\"" }; { print }' helm/kestrelos/Chart.yaml > helm/kestrelos/Chart.yaml.tmp && mv helm/kestrelos/Chart.yaml.tmp helm/kestrelos/Chart.yaml
-awk -v v="$newVersion" '/^  tag:/ { $0 = "  tag: " v }; { print }' helm/kestrelos/values.yaml > helm/kestrelos/values.yaml.tmp && mv helm/kestrelos/values.yaml.tmp helm/kestrelos/values.yaml
+echo "$newVersion" > VERSION
+awk -v v="$newVersion" '/^version:/ { $0 = "version: " v }; /^appVersion:/ { $0 = "appVersion: \"" v "\"" }; { print }' helm/jasper/Chart.yaml > helm/jasper/Chart.yaml.tmp && mv helm/jasper/Chart.yaml.tmp helm/jasper/Chart.yaml
+awk -v v="$newVersion" '/^  tag:/ { $0 = "  tag: " v }; { print }' helm/jasper/values.yaml > helm/jasper/values.yaml.tmp && mv helm/jasper/values.yaml.tmp helm/jasper/values.yaml
 
 # changelog
 new="## [$newVersion] - $(date +%Y-%m-%d)
@@ -65,8 +61,9 @@ $changelogFull
 
 # git
 git config user.email "ci@kestrelos" && git config user.name "CI"
-git add package.json helm/kestrelos/Chart.yaml helm/kestrelos/values.yaml CHANGELOG.md
+git add VERSION helm/jasper/Chart.yaml helm/jasper/values.yaml CHANGELOG.md
 git commit -m "release v$newVersion [skip ci]"
+url="https://${CI_REPO_OWNER}:${GITEA_REPO_TOKEN}@${CI_FORGE_URL#https://}/${CI_REPO_OWNER}/${CI_REPO_NAME}.git"
 git tag "v$newVersion"
 # artifact for docker (tag list)
 printf '%s\n%s\n' "$newVersion" "latest" > .tags