Djeex/socat-proxy
1
1
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 4 Activity
33 Commits 1 Branch 4 Tags
ada76ac00d7faeb5e8e4b2cf1f98ed689a4ef81a
Commit Graph
8 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Djeex ada76ac00d Simplify release changelog: commits as description (link), drop divider lines 2026-08-26 13:54:24 +02:00
Djeex c94da17686 Link each commit in the release changelog to its own commit page
CI / build-and-scan (pull_request) Successful in 2m11s
Details 
COMMIT_LIST only rendered the bare subject line per commit, with no
way to jump to that specific commit — only the triggering commit
(Source:) had a link. Each line now reads
"- [<short-sha>](<repo>/commit/<sha>) <subject>", matching the same
link style already used for Source.
 2026-08-23 23:22:44 +02:00
Djeex 4903484aa4 Release notes: list commits instead of changed files 2026-08-23 23:22:44 +02:00
Djeex fff6e49350 Run as non-root by default via PUID/PGID
CI / build-and-scan (pull_request) Successful in 1m7s
Details
2026-08-23 15:10:17 +02:00
DjeexandClaude Sonnet 5 373dbfce2e Add Renovate config
CI / build-and-scan (pull_request) Failing after 40s
Details 
Same policy as adguard-cidre: patch-level Dockerfile bumps automerge,
minor/major get a labeled PR, vulnerability alerts labeled bug. No
pip_requirements rule — this repo has no Python dependencies to manage.

Still needed on the Gitea/Renovate side (manual, not done here):
uncomment socat-proxy in the shared ~/renovate/config.js repositories
array on stockeex, and create the bot/major/minor/bug labels in this
repo's Issues → Labels (Renovate silently drops labels that don't
already exist).

Co-Authored-By: Claude Sonnet 5 <[email protected]>
 2026-08-23 00:02:11 +02:00
DjeexandClaude Sonnet 5 d75172dd62 Add Gitea Actions CI workflow
CI / build-and-scan (pull_request) Failing after 1m19s
Details 
Adapted from adguard-cidre's pipeline: build, syntax smoke-test, bats
unit tests, shellcheck lint, Trivy critical/high scans, then on push to
main a versioned publish (VERSION auto-bump, :latest/:X.Y/:X.Y.Z tags
retagged from the already-scanned image, and a categorized Gitea
Release). Requires the REGISTRY_TOKEN and CI_PUSH_TOKEN repo secrets
and branch protection on main (not yet configured on the Gitea side).

Co-Authored-By: Claude Sonnet 5 <[email protected]>
 2026-08-22 23:50:47 +02:00
DjeexandClaude Sonnet 5 b825dec8be Multi-stage Dockerfile: pin base image, add test/lint stages 
Pin alpine:latest to the full patch-level tag alpine:3.22.1 so Renovate
can classify patch/minor/major bumps on it. Add a `test` stage (bats)
and a `lint` stage (shellcheck, severity=error) that build from `base`
before ENTRYPOINT is set, so CI can run them without an --entrypoint
override. A trailing `FROM base` keeps the lean prod image as the
default `docker build .` target despite the extra stages.

Co-Authored-By: Claude Sonnet 5 <[email protected]>
 2026-08-22 23:50:40 +02:00
DjeexandClaude Sonnet 5 f6b27fe51c Add bats test suite for entrypoint.sh 
Covers env-var validation, socket path preparation, target connectivity
messaging, DEBUG_LEVEL to socat-flag mapping, and graceful shutdown vs.
crash detection — run against the real socat/nc binaries rather than
mocks, since UNIX-LISTEN binds without needing the TCP target reachable.

Co-Authored-By: Claude Sonnet 5 <[email protected]>
 2026-08-22 23:50:32 +02:00