22186 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jmiller	bc3bb0f778	Merge pull request 'Release: org-wide governance series (#727) — dev → main' (#733) from dev into main	2026-07-06 07:37:35 +00:00
jmiller	d955bac72b	chore: sync pr-check.yml from Template-Generic [skip ci]	2026-07-06 03:49:59 +00:00
jmiller	afc470f513	chore: sync ci-generic.yml from Template-Generic [skip ci]	2026-07-06 03:49:52 +00:00
jmiller	6505840839	chore: sync auto-release.yml from Template-Generic [skip ci]	2026-07-06 03:49:44 +00:00
jmiller	7d98098a87	Merge pull request 'fix(ci): make Tests an independent job (work around Gitea needs-chain scheduler stall)' (#756) from fix/ci-generic-scheduler into dev	2026-07-06 03:42:40 +00:00
jmiller	28b9d94658	fix(ci): make Tests an independent job to work around Gitea needs-chain scheduler stall ... The Gitea Actions scheduler on the current build does not offer the dependent 2nd job of a needs-chain to runners: the Tests job (needs: lint) reaches 'waiting' but is never claimed even with idle, label-matching runners, then is reaped by ABANDONED_JOB_TIMEOUT. Verified via dispatch on idle runners (run 34933: lint claimed+success, Tests waiting/runner_id 0, never scheduled). Drop 'needs: lint' + the always() gate; guard template repos directly so Tests runs as an independent, schedulable job. Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 22:39:40 -05:00
jmiller	8d8ecf176a	Merge pull request 'fix(tests): repair tests/integration compile errors (upstream API/import drift)' (#755) from fix/integration-tests-compile-wt into dev	2026-07-06 03:14:18 +00:00
jmiller	7203628004	fix(tests): repair tests/integration compile errors from upstream API/import drift ... Two compile errors blocked the whole tests/integration package (prereq for the layered test pipeline, Template-Go#4, and the clean go-compile owed by #733): - api_packages_composer_test.go: composer.PackageMetadataResponse{} (value) used where *PackageMetadataResponse (pointer) is required -> take the address. - oauth_avatar_test.go: 10 stale upstream 'code.gitea.io/gitea/' imports (never updated after the fork module rename) -> 'code.mokoconsulting.tech/MokoConsulting/MokoGitea/'. go vet ./tests/integration/... now exits 0 (compiles clean). Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 22:11:44 -05:00
jmiller	36a824be1d	Merge pull request 'chore(manifest): remove deprecated .mokogitea/manifest.xml parser; mokoplatform→mokocli' (#754) from feature/752-chore-deploy-rebuild-redeploy-for-moko-p into dev	2026-07-06 02:38:10 +00:00
jmiller	fcf33d35df	chore(api): remove /manifest backward-compat alias route (use /metadata) ... The /manifest GET+PUT routes were backward-compat aliases for the canonical /metadata routes. Completing the manifest->metadata migration (#752): drop the alias so /metadata is the single path. Handlers (GetRepoMetadata/UpdateRepoMetadata) are unchanged. The MCP already calls /metadata (mcp-mokogitea-api v1.4.2, gitea_metadata_get/update); the stale gitea_manifest_* tools only exist in older deployed MCP builds and drop out on redeploy. Refs #752 Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 21:07:05 -05:00
jmiller	358606e235	chore(manifest): remove deprecated .mokogitea/manifest.xml parser; mokoplatform->mokocli ... The .mokogitea/manifest.xml file is deprecated - the first-class RepoMetadata DB fields (set via the /manifest API) are the authoritative repository metadata (see issue #752). Remove the legacy XML auto-sync path rather than teaching it the renamed mokocli root element: - delete services/repository/manifest_sync.go (manifestXML parser) - drop the SyncMetadataFromCommit call on default-branch push (push.go) - rebrand remaining mokoplatform->mokocli refs (repo_manifest.go, v347.go comment, locale manifest_desc) The RepoMetadata model, /manifest API, settings UI, and update-feed generation (first-class fields) are unchanged. gofmt-normalized repo_manifest.go struct tags. Refs #752 Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 21:00:28 -05:00
jmiller	c74173bb86	ci(deploy-rc): add workflow_dispatch for isolated manual tests ... Lets deploy-rc be run on demand (from a ref carrying current source) to verify the RC pipeline end-to-end without a full rc promotion + pre-release. Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 19:15:55 -05:00
jmiller	b2447da3dd	Merge pull request 'feat(ci): deploy-rc.yml — auto-deploy rc branch to the new RC environment' (#751) from feat/deploy-rc-workflow into dev	2026-07-06 00:03:55 +00:00
jmiller	7be712571c	refactor(ci): tier-scope deploy-rc variables (RC_SSH_*, RC_REGISTRY*, RC_IMAGE) ... Shared DEPLOY_HOST/PORT/USER assumed all tiers live on one host. Scope every deploy variable to the rc tier (mirrors the org's DEV_SSH_* convention) so a repo inheriting this template can host rc/dev/prod on separate machines independently. Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 19:01:38 -05:00
jmiller	6634b049ab	fix(ci): deploy-rc reuses existing DEPLOY_SSH_KEY + MOKOGITEA_TOKEN secrets ... The registry token is the org-wide MOKOGITEA_TOKEN secret (already configured, used by deploy-dev/deploy-mokogitea), not a new DEPLOY_REGISTRY_TOKEN. Reuse the existing secret names so no new secret values are needed; only the non-sensitive tier variables get set per-repo. Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 18:54:27 -05:00
jmiller	5c62cefcd3	refactor(ci): deploy-rc.yml -> root workflows, fully parameterized via repo vars/secrets ... - Moved from custom/ to the root .mokogitea/workflows/ (synced/template-owned area). - All deployment config now comes from repo Actions variables (DEPLOY_HOST/PORT/USER, DEPLOY_REGISTRY/IMAGE, RC_CONTAINER/COMPOSE_PROJECT/COMPOSE_DIR/SOURCE_DIR/TAG_ENV/ HEALTH_URL) and secrets (DEPLOY_SSH_KEY, DEPLOY_REGISTRY_TOKEN) — nothing hardcoded, so it works across Go server repos. Clone URL derived from github.server_url/repository. - To become Template-Go-owned (Template-Go#3). Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 18:37:33 -05:00
jmiller	f2ca569906	feat(ci): deploy-rc.yml — auto-deploy the rc branch to the RC environment ... Adds a custom deploy workflow that builds and deploys the release candidate to rc.git.mokoconsulting.tech (mokogitea-rc container, port 3110, DB mokogitea_rc) on push to the rc branch — the branch promote-rc creates when a PR to main is opened. Mirrors the fixed deploy-dev.yml: env-var image tag (MOKOGITEA_RC_TAG) driving the shared compose file (no sed), rm -f before force-recreate, quoted-heredoc remote expansion, health check + external verify. Gives a real release-candidate environment to validate before prod. Intended to move to Template-Go as the canonical synced source once validated (kept in custom/ for now so it isn't overwritten by workflow sync). Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 18:31:51 -05:00
jmiller	b9301a8f31	Merge pull request 'feat: org branch protection per-user (username/email) allowlists + actions-bot toggle (#727)' (#750) from feature/org-branch-protection-user-allowlists into dev	2026-07-05 22:54:30 +00:00
jmiller	cac06c2ac7	feat: org branch protection per-user allowlists + Actions-bot toggle (#727) ... Extend org-level branch protection to support per-user allowlists (resolved from username OR email) and an "allow Actions bot" toggle, alongside the existing team allowlists, for all five categories (push, merge, force-push, delete, approvals). - models/git/org_protected_branch.go: add WhitelistUserIDs, MergeWhitelistUserIDs, ForcePushAllowlistUserIDs, DeleteAllowlistUserIDs, ApprovalsWhitelistUserIDs ([]int64) plus WhitelistActionsUser, MergeWhitelistActionsUser, ForcePushAllowlistActionsUser, DeleteAllowlistActionsUser (bool); copy all 9 into ProtectedBranch in ToProtectedBranch(). - models/migrations/v1_27/v368.go: migration 367 adds the 9 columns. - modules/structs/org_branch.go: add *Usernames []string and *ActionsUser bool to Create/Edit options and the response, matching repo-level json names. - routers/api/v1/org/branch_protection.go: resolveUserIDs (username then email, dedupe, 422 on unknown); wire into Create + Edit and toAPIOrgBranchProtection. - models/git/protected_branch_merge.go: add mergeAllowFlag and merge the four Actions-user flags most-restrictively (org can now express them); deploy-key flags stay repo-only pass-through. - models/git/protected_branch_merge_test.go: mergeAllowFlag truth table, user-ID intersection, deploy-key pass-through. - regenerate swagger v1 + openapi3 specs. Claude-Session: https://claude.ai/code/session_01Wsno14cxE49MstXFs9G5KT	2026-07-05 17:48:47 -05:00
jmiller	6c0c2c3f1f	Merge pull request 'chore(sync): cascade main -> dev' (#748) from main into dev	2026-07-05 22:03:31 +00:00
jmiller	4db6f03efd	Merge fix/rebrand-wiki-docs: normalize in-repo wiki branding	2026-07-05 22:01:50 +00:00
jmiller	bdac121b70	docs(wiki): normalize in-repo wiki branding (MokoGitea/mokocli/MokoStandards->org wiki/MokoSuite)	2026-07-05 22:01:47 +00:00
jmiller	80a4c68063	chore: sync workflow-sync-trigger.yml from Template-Generic [skip ci]	2026-07-05 21:46:31 +00:00
jmiller	5c0bf5f214	chore: sync version-set.yml from Template-Generic [skip ci]	2026-07-05 21:46:18 +00:00
jmiller	e2f8d5ce9b	chore: sync repo-health.yml from Template-Generic [skip ci]	2026-07-05 21:46:08 +00:00
jmiller	1d5427f2c2	chore: sync rc-revert.yml from Template-Generic [skip ci]	2026-07-05 21:45:58 +00:00
jmiller	9d949b6294	chore: sync pre-release.yml from Template-Generic [skip ci]	2026-07-05 21:45:45 +00:00
jmiller	515e8fcdea	chore: sync pr-check.yml from Template-Generic [skip ci]	2026-07-05 21:45:34 +00:00
jmiller	519966015b	chore: sync notify.yml from Template-Generic [skip ci]	2026-07-05 21:45:24 +00:00
jmiller	2677caafd6	chore: sync issue-branch.yml from Template-Generic [skip ci]	2026-07-05 21:45:14 +00:00
jmiller	66148f76fa	chore: sync gitleaks.yml from Template-Generic [skip ci]	2026-07-05 21:45:05 +00:00
jmiller	7a4be6ab63	chore: sync cleanup.yml from Template-Generic [skip ci]	2026-07-05 21:44:56 +00:00
jmiller	c26ceaea87	chore: sync ci-issue-reporter.yml from Template-Generic [skip ci]	2026-07-05 21:44:50 +00:00
jmiller	8ba2dbf3e3	chore: sync cascade-dev.yml from Template-Generic [skip ci]	2026-07-05 21:42:28 +00:00
jmiller	44b25099ac	chore: sync branch-cleanup.yml from Template-Generic [skip ci]	2026-07-05 21:42:21 +00:00
jmiller	838d1f0d28	chore: sync auto-release.yml from Template-Generic [skip ci]	2026-07-05 21:42:15 +00:00
jmiller	6e0db30b3e	chore: sync auto-bump.yml from Template-Generic [skip ci]	2026-07-05 21:42:09 +00:00
jmiller	e2343c8fb4	chore: sync workflow-sync-trigger.yml from Template-Generic [skip ci]	2026-07-05 21:09:03 +00:00
jmiller	8e045c60fc	chore: sync pr-check.yml from Template-Generic [skip ci]	2026-07-05 21:08:49 +00:00
jmiller	d3a0c7534b	chore: sync version-set.yml from Template-Generic [skip ci]	2026-07-05 20:43:30 +00:00
jmiller	7f0da28988	chore: sync sync-on-merge.yml from Template-Generic [skip ci]	2026-07-05 20:43:14 +00:00
jmiller	6cd1d10617	chore: sync repo-health.yml from Template-Generic [skip ci]	2026-07-05 20:42:59 +00:00
jmiller	5c8056f15e	chore: sync rc-revert.yml from Template-Generic [skip ci]	2026-07-05 20:42:42 +00:00
jmiller	ffaa3662e6	chore: sync pre-release.yml from Template-Generic [skip ci]	2026-07-05 20:42:24 +00:00
jmiller	1c462f9d49	chore: sync pr-check.yml from Template-Generic [skip ci]	2026-07-05 20:42:05 +00:00
jmiller	8fbf97ac7e	chore: sync gitleaks.yml from Template-Generic [skip ci]	2026-07-05 20:41:46 +00:00
jmiller	b3448f4d62	chore: sync ci-issue-reporter.yml from Template-Generic [skip ci]	2026-07-05 20:41:21 +00:00
jmiller	f72300a03f	chore: sync cascade-dev.yml from Template-Generic [skip ci]	2026-07-05 20:40:53 +00:00
jmiller	08a43ec718	chore: sync branch-cleanup.yml from Template-Generic [skip ci]	2026-07-05 20:40:04 +00:00
jmiller	bf2b299f87	chore: sync auto-release.yml from Template-Generic [skip ci]	2026-07-05 20:39:44 +00:00