e75b004ebc
ci: trigger security scan also on security.yml changes
2026-05-16 07:30:34 +00:00
ba5a52c5dc
fix(ci): trivy-action version 0.31.0 → v0.36.0 (correct tag format)
2026-05-16 07:28:31 +00:00
68906b2f28
fix: switch to php:8.2-apache-bookworm, add apt upgrade, Trivy ignore-unfixed
...
- Base image: php:8.2-apache → php:8.2-apache-bookworm (Debian 12)
Reduces OS-level CVEs from ~1200+ to only fixable ones
- Add apt-get upgrade -y before package installs
- Trivy: add ignore-unfixed: true (suppress CVEs with no available fix)
- Pin trivy-action@0.31 .0 instead of @master
- Upgrade codeql-action upload-sarif v3 → v4
2026-05-16 07:23:39 +00:00
da4bd635db
feat: professional repo cleanup + community infrastructure
...
- README: remove Recent Updates section, clean roadmap (pending only),
replace Screenshots with demo link, add 6 new badges (stars, last
commit, contributors, discussions, CI), invite GIF contributions
- CHANGELOG: translate all Italian entries to English, add v1.7.13
(DB fresh-install crash fix)
- database.php: add missing 'undone' column to transactions schema;
wrap ALTER TABLE calls in try/catch to prevent race-condition errors
on concurrent first requests
- Wiki: Android-Kiosk v1.5.0 → v1.6.0, Step 5 rewritten (BLE scan,
no external APK), removed gateway troubleshooting section
- Wiki: Scale-Gateway promoted to deprecated with redirect banner
- Wiki: Home What's New updated to v1.7.12 / v1.7.13
- Wiki: Features.md, kiosk README Italian UI strings translated
- .github: add bug_report.yml, feature_request.yml issue templates,
config.yml (blank issues off, links to FAQ/Discussions/Security),
PULL_REQUEST_TEMPLATE.md with checklist
- .github: FUNDING.yml (Ko-fi), dependabot.yml (monthly action updates)
- .github/workflows/security.yml: Trivy docker + fs scan, SARIF upload
- .github/workflows/build-scale-gateway.yml: disabled (deprecated)
- SECURITY.md: responsible disclosure policy, supported versions, scope
- CODE_OF_CONDUCT.md: Contributor Covenant 2.1
- Settings UI: About section with version display, Report Bug button,
Changelog and GitHub links; reportBugManual() + _loadAboutSection()
- Translations: added 'about' key group (9 keys × 3 languages)
2026-05-16 06:02:18 +00:00
8535f4d4b9
fix: update check ignores non-semver tags + GitHub Actions builds versioned releases
2026-05-06 14:41:36 +00:00
e68d11a7fc
fix(pwa): handle orientation.lock() promise rejection silently
...
screen.orientation.lock() returns a Promise; the old try/catch only
caught synchronous errors, leaving the rejection unhandled and triggering
the auto-reporter (issue #8 ). Added .catch(()=>{}) to suppress it.
Also fixed CI: add sleep+retry around gh release create to avoid 502
race condition after delete.
Closes #8
2026-05-04 15:46:17 +00:00
03f201c651
ci: auto-merge develop → main after all checks pass
...
New job 'auto-merge-to-main' in ci.yml:
- needs: lint-php, lint-js, docker-build, validate-translations
- only runs when github.ref == refs/heads/develop
- uses git merge --no-ff so history is preserved
- push to develop → CI passes → main updated automatically
2026-05-03 18:48:20 +00:00
9e4a8323c3
chore: bump versions + update CHANGELOG/README for v1.6.0
...
Webapp: v1.5.0 → v1.6.0
Kiosk: v1.3.0 → v1.4.0 (versionCode 4→5)
Scale GW: v2.0.0 → v2.1.0 (versionCode 6→7)
CI: build-scale-gateway.yml now also triggers on develop branch
(was main-only, causing APK builds to not run on feature branches)
CHANGELOG: added [1.6.0] entry covering PackageInstaller OTA fixes,
dashboard skeleton, update banners, cooking mode z-index, XOR token
README: updated 'Recent Updates' section with 1.6.0 highlights
2026-05-03 18:00:46 +00:00
97f6681e24
ci: trigger kiosk APK build on develop branch too
2026-04-27 14:49:19 +00:00
1c792a4e4a
ci: add GitHub Actions workflow for kiosk APK build
2026-04-16 14:47:35 +00:00
df9de2d257
ci: fix broken YAML - multiline notes had zero indentation breaking the literal block
2026-04-14 16:42:35 +00:00
fb134128fe
ci: trigger workflow with direct commit on main
2026-04-14 16:39:39 +00:00
0a11214d3d
ci: remove paths filter - run on every push to main to ensure APK is always built
2026-04-14 16:38:07 +00:00
38d8fa7afe
ci: fix workflow - use gradle directly instead of ./gradlew (wrapper jar not in repo)
2026-04-14 16:33:35 +00:00
3fcded1d9b
ci: also trigger workflow on changes to the workflow file itself
2026-04-14 16:31:56 +00:00
9523b68fea
ci: add GitHub Actions workflow to build & release Scale Gateway APK
...
- Add .github/workflows/build-scale-gateway.yml
Triggers on push to main (evershelf-scale-gateway/** path filter)
Builds debug APK with Gradle/JDK 17, renames to evershelf-scale-gateway.apk
Creates/updates 'latest' GitHub Release so the direct download URL resolves
- Bump web app version v1.2.0 -> v1.3.0 (index.html)
- Bump Android versionCode 1->2, versionName 1.0.0->1.3.0 (app/build.gradle.kts)
2026-04-14 16:29:00 +00:00
20f734d54a
rebrand: rename project from Dispensa Manager to EverShelf
...
- Update app name across all files (manifest, index.html, README, docs)
- Update contact email to evershelfproject@gmail.com
- Rename Docker service/container/volume to evershelf
- Rename localStorage keys: dispensa_* → evershelf_*
- Rename SQLite DB reference: dispensa.db → evershelf.db
- Update SSH remote to dadaloop82/EverShelf
- Update Apache conf file name to evershelf.conf
- Update CI workflow Docker image/container names
- Update cron job example path
- Add data/dispensa.db to .gitignore to prevent accidental commit
2026-04-13 10:09:33 +00:00
d13f744aea
feat: v1.1.0 - Docker, i18n, setup wizard, rate limiting, OpenAPI
...
New features:
- Docker support (Dockerfile + docker-compose.yml)
- GitHub Actions CI pipeline (PHP lint, JS lint, Docker build, i18n validation)
- Internationalization system with 3 languages (it, en, de) and 347 translation keys
- First-run setup wizard (4-step configuration)
- File-based API rate limiting (120/15/5 req/min tiers)
- OpenAPI 3.1.0 specification for all 43 API endpoints
- CONTRIBUTING.md with translation and development guide
- Screenshots directory placeholder
Modified:
- README.md: Docker badges, install instructions, translations section
- api/index.php: rate limiting middleware
- assets/js/app.js: i18n system, setup wizard, t() function
- assets/css/style.css: setup wizard styles
- index.html: data-i18n attributes, setup wizard overlay, language settings
- .gitignore: rate_limits exclusion
2026-04-10 06:03:11 +00:00
dadaloop82