95 Commits

Author SHA1 Message Date
CaIon
a5e20269dd security: harden Docker and release CI workflows
- Pin all GitHub Actions to commit SHA to prevent supply chain attacks
- Enable SLSA provenance attestation (mode=max) and SBOM generation
- Add cosign keyless signing for Docker images via GitHub OIDC
- Capture and output image digests to GitHub Job Summary
- Pin Dockerfile base images to digest (bun:1, golang:1.26.1-alpine, debian:bookworm-slim)
- Add SHA256 checksum generation for binary releases (Linux/macOS/Windows)
- Update actions/checkout v3->v4, actions/setup-go v3->v5 in release.yml
2026-03-24 23:56:15 +08:00
CaIon
64f41efc47 chore: remove FUNDING.yml file as it is no longer needed 2026-03-20 16:44:30 +08:00
CaIon
8ed2ea6ec1 chore: exclude nightly tags from Docker image workflow triggers 2026-03-17 18:36:24 +08:00
Seefs
0246b20bf1 chore: refine PR template 2026-03-17 17:34:21 +08:00
CaIon
5e856f0263 feat: remove unnecessary section for screenshots in bug report templates 2026-03-14 15:50:42 +08:00
CaIon
b9f1d01e00 feat: update issue and feature request templates to include documentation links and submission checks 2026-03-14 15:48:50 +08:00
CaIon
163bcb4c01 fix(workflow): enhance tag resolution and error handling in Docker image build 2026-02-04 00:13:47 +08:00
CaIon
46305ebcaa feat(workflow): add manual trigger and tag input for Docker image builds
- Introduce a `workflow_dispatch` event to allow manual triggering of the Docker image build workflow.
- Add an input parameter for specifying the tag name, enhancing flexibility in build processes.
- Update tag resolution logic to prioritize the input tag when provided, ensuring accurate versioning during builds.
2026-02-04 00:09:02 +08:00
Calcium-Ion
d4d395e178 Add link to GitHub Security Advisories for reporting
Updated the reporting method for security issues to include a link to the draft security advisory.
2026-01-26 20:43:12 +08:00
CaIon
e42dc2624a feat: add CODE_OF_CONDUCT and SECURITY.md files for community guidelines and vulnerability reporting 2026-01-26 20:37:50 +08:00
Seefs
de4b52d320 fix: release workflow show version 2025-11-22 20:06:13 +08:00
CaIon
f91522b51e CI: ignore pre-release and alpha tags in electron build workflow 2025-10-15 19:56:07 +08:00
CaIon
85fdcc78ac fix: 修复工作流重复创建release的问题 2025-10-12 15:40:22 +08:00
Seefs
78eb532958 fix: empty version 2025-10-12 14:23:18 +08:00
Seefs
1e6d34f00a ignore ghcr 2025-10-12 12:38:44 +08:00
Seefs
5010f2d004 format: package name -> github.com/QuantumNous/new-api (#2017) 2025-10-11 15:30:09 +08:00
Seefs
bed2863a13 fix env GHCR_REPOSITORY 2025-10-11 14:18:09 +08:00
Seefs
bbc18e8331 feat: matrix ci (#2014) 2025-10-11 14:08:32 +08:00
Seefs
2606d16e4e Alpha CI (#2011) 2025-10-11 13:24:04 +08:00
CaIon
e6129bec57 feat: update Go version in CI configuration and add release workflow for multi-platform builds 2025-10-11 12:44:09 +08:00
CaIon
f56d1ff27e CI 2025-10-06 14:33:48 +08:00
CaIon
b982bd8bd1 feat: implement user preferences management in SettingsLog component for improved customization 2025-10-05 23:11:45 +08:00
CaIon
4675ea5020 fix: update versioning logic in electron-build.yml to correctly handle prerelease formats and modify product name in package.json 2025-10-05 18:20:43 +08:00
CaIon
3c94d1497f chore: update electron-build.yml to add write permissions and enable file overwriting in artifact uploads 2025-10-05 17:50:35 +08:00
CaIon
f46d6972b7 feat: enhance versioning logic in electron-build.yml for semver compliance 2025-10-05 17:31:01 +08:00
Calcium-Ion
7f274f69e9 Merge pull request #1964 from bubblepipe/electron
feat: Add Electron wrapper for desktop app
2025-10-05 17:20:23 +08:00
CaIon
d85f678982 chore: upgrade action-gh-release to v2 in build workflows 2025-10-05 17:19:52 +08:00
CaIon
32f806d562 chore: update build workflows for Electron and Go, including version tagging and dependency management 2025-10-05 17:11:30 +08:00
CaIon
0077957630 chore: remove outdated instructions from pull request template 2025-10-03 21:40:07 +08:00
CaIon
b4c70b008e feat: add English feature request template to GitHub issue tracker for enhanced feature proposal submissions 2025-10-03 14:01:16 +08:00
CaIon
6267ed925e feat: add English bug report template to GitHub issue tracker for improved issue reporting #1960 2025-10-03 13:59:27 +08:00
bubblepipe42
07f858adbb action 2025-10-03 13:55:19 +08:00
CaIon
5f34c4a97d feat: update release configuration to use new-api binaries for consistency 2025-09-27 15:24:40 +08:00
CaIon
f50eb9dde7 feat: rename output binaries to new-api for consistency across platforms 2025-09-27 15:04:06 +08:00
CaIon
fdc3030e47 CI 2025-09-19 14:20:35 +08:00
CaIon
c702abfd7a CI 2025-09-18 13:53:58 +08:00
CaIon
e8afc25c71 chore: remove PR branching strategy workflow file 2025-09-09 23:23:53 +08:00
CaIon
13eb2ec1f1 feat: add pull request template and enforce branching strategy in workflow 2025-07-03 13:33:50 +08:00
CaIon
c7b3b8d0b1 feat: increase Node.js memory limit in macOS release workflow 2025-07-01 13:23:29 +08:00
CaIon
e1039c67f7 chore: update CI workflows 2025-06-08 03:37:17 +08:00
CaIon
e647163969 chore: update CI workflow to use latest Bun version and adjust build environment variables 2025-06-08 03:28:36 +08:00
CaIon
c3a205e792 chore: update Bun version in CI workflow to 1.2.8 2025-06-08 02:57:44 +08:00
CaIon
2e04d28483 chore: update CI workflows to use Bun for package management across all platforms 2025-06-08 02:45:18 +08:00
CaIon
4069b3f789 chore: update CI workflows to support manual triggers and rename Docker image workflow 2025-06-08 02:42:27 +08:00
CaIon
2cb067f485 chore: remove deprecated Docker image workflow for amd64 2025-06-08 02:39:53 +08:00
CaIon
e09931558e chore: update CI workflows to use Bun for package management and build process 2025-06-08 02:34:06 +08:00
CaIon
e7ebfd498d fix: CI 2025-06-08 00:06:53 +08:00
CaIon
eaaee594ef chore: add Docker Buildx setup to workflow
- Integrated Docker Buildx setup step in docker-image-alpha.yml to enhance multi-platform build capabilities.
2025-06-04 01:16:42 +08:00
CaIon
c8ab726655 chore: update docker image workflows
- Added support for multiple platforms (linux/amd64, linux/arm64) in docker-image-alpha.yml.
- Removed outdated docker-image-amd64.yml and docker-image-arm64.yml workflows.
- Deleted linux-release.yml, macos-release.yml, and windows-release.yml as part of workflow cleanup.
2025-06-04 01:12:49 +08:00
creamlike1024
0e642a58e0 update docker-image-alpha.yml 2025-06-03 11:10:09 +08:00