.github/workflows/release.yml runs on Gitea and on the GitHub mirror (release: published only) and pushes selfphoneng-api and selfphoneng-asterisk to that forge's registry: ghcr.io with the job token, the Gitea registry with secrets REGISTRY_USER + REGISTRY_TOKEN (Gitea's job token can't push packages). Tags: the version, plus <major>.<minor> and latest unless it's a pre-release. It stops unless the tag is v + package.json's version, and checks the images before pushing. Run locally with act_runner exec against a throwaway registry: v0.0.1 pushed 0.0.1, 0.0 and latest for both images (VERSION 0.0.1, OCI labels, source archive selfphoneng-0.0.1/); v9.9.9 failed at the version check. Version 0.0.1 in all package.json files, CHANGELOG.md started, release steps in 08 §3.1. Task: none (owner request, 2026-10-20)
42 lines
783 B
Plaintext
42 lines
783 B
Plaintext
# Also what selfphone.tar.gz (the source archive in the api image, 08 §4) holds, and anyone can
|
|
# download that (GET /api/about/source): an allowlist (M11-T8), so a backup, key or override file
|
|
# dropped into the repo folder never ends up in it. Add new top-level source here.
|
|
*
|
|
!.dockerignore
|
|
!.env.example
|
|
!.gitattributes
|
|
!.github
|
|
!.gitignore
|
|
!.prettierignore
|
|
!.prettierrc.json
|
|
!AGENTS.md
|
|
!CHANGELOG.md
|
|
!CLAUDE.md
|
|
!LICENSE
|
|
!README.md
|
|
!apps
|
|
!asterisk
|
|
!deploy
|
|
!docker-compose.yml
|
|
!docs
|
|
!eslint.config.js
|
|
!package.json
|
|
!packages
|
|
!pnpm-lock.yaml
|
|
!pnpm-workspace.yaml
|
|
!scripts
|
|
!tsconfig.base.json
|
|
!vitest.config.ts
|
|
# ...and inside those, nothing built or private.
|
|
**/node_modules
|
|
**/dist
|
|
**/coverage
|
|
**/*.tsbuildinfo
|
|
**/.env
|
|
**/.env.*
|
|
!.env.example
|
|
**/*.pem
|
|
**/*.key
|
|
**/*.log
|
|
**/*.pid
|