dependabot[bot]
235c76456f
ci(deps): bump actions/upload-artifact from 4 to 5 ( #3 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-06 04:12:19 +08:00
rE-Bo0t.bx1
ee08c4d66f
Fix missing newline in dependabot.yml
2025-11-06 04:10:23 +08:00
rE-Bo0t.bx1
b283f9680e
Fix workflow linting issues
...
- Skip workflow file validation in validate.yml (complex format)
- Fix all line length issues in both workflows
- Remove trailing spaces
- Add newline at end of files
- Shorten long labels to fit 80 character limit
2025-11-06 04:07:52 +08:00
rE-Bo0t.bx1
1324722165
fix: correct formatting in release workflow conditions and update image description
2025-11-06 04:01:49 +08:00
rE-Bo0t.bx1
4db06050f5
fix: refactor tag generation to use an array for better maintainability
2025-11-06 03:58:04 +08:00
rE-Bo0t.bx1
792a0ee025
fix: format tag definitions for better readability in release workflow
2025-11-06 03:54:59 +08:00
rE-Bo0t.bx1
f7509eab7a
Release v1.0.3
...
- Fix workflow timeout issues
- Add workflow_run trigger for automatic releases
- Improve line length compliance
- Add support for validated builds
- Update Docker image tagging strategy
2025-11-06 03:48:49 +08:00
rE-Bo0t.bx1
300a26bdd6
Release v1.0.3
...
- Fix workflow timeout issues
- Add workflow_run trigger for automatic releases
- Improve line length compliance
- Add support for validated builds
- Update Docker image tagging strategy
2025-11-06 03:45:38 +08:00
rE-Bo0t.bx1
13b0f1d8c4
fix: ensure workflows continue on error and validate all steps
2025-11-06 03:23:40 +08:00
rE-Bo0t.bx1
35550552f9
fix: remove trailing spaces and add newlines in workflows
2025-11-06 03:00:15 +08:00
rE-Bo0t.bx1
be9312faaa
feat: smart diagnostics + Docker Hub publishing
2025-11-06 02:52:29 +08:00
rE-Bo0t.bx1
05a08e1366
feat: smart diagnostics + Docker Hub publishing
2025-11-06 02:06:46 +08:00
rE-Bo0t.bx1
b8a495523d
fix: clean up cron comment and improve formatting in release workflows
2025-11-06 01:45:09 +08:00
rE-Bo0t.bx1
66bc720ff2
chore(release): v1.0.3 – unified workflows, dual registry publishing, and lint compliance
2025-11-06 01:36:54 +08:00
rE-Bo0t.bx1
297d4fec87
ci(release): rebuild unified release workflow for GHCR + Docker Hub sync
...
- Consolidated CI into one efficient pipeline
- Unified tag handling for GHCR and Docker Hub
- Added weekly + manual release triggers
- Hardened dos2unix normalization pre-build
- Cleaner YAML and quieter logs
2025-11-06 01:06:45 +08:00
rE-Bo0t.bx1
019139056e
fix: rebuild release.yml + Dockerfile normalization for v1.0.3
2025-11-06 00:44:15 +08:00
rE-Bo0t.bx1
64cfc84a8d
feat: smart diagnostics and dual registry publishing
...
- Add smart network diagnostics triggered by bandwidth self-test
- Replace fixed 2-minute delay with log monitoring
- Diagnostics now run when Tor completes self-test (no false failures)
- Add Docker Hub publishing alongside GHCR
- Update release workflow for dual registry support
- Multi-arch builds (amd64, arm64) to both registries
Fixes startup errors: 'Consensus: failed', 'Ports: closed'
2025-11-06 00:11:07 +08:00
rE-Bo0t.bx1
25fd7a09d7
feat(security): enforce localhost-only binding for internal services (v1.0.2)
...
BREAKING CHANGE: Internal services now bind to 127.0.0.1 by default
This release enforces strict port security with a two-tier model:
- Public: 9001 (ORPort), 9030 (DirPort)
- Internal: 9035+ (metrics, health, dashboard) - localhost-only
Changes:
- CHANGELOG.md: Updated version entries, aligned to v1.0.2
- README.md: Updated version references and deployment examples
- SECURITY.md: Enhanced with network architecture and port policy
- relay-status.sh: Added port security validation (v1.0.2)
- integration-check.sh: Added port/version validation phases (v1.0.2)
Security Improvements:
- Prevents unauthorized external access to internal endpoints
- Adds reverse proxy, SSH tunnel, and VPN access guidance
- Includes comprehensive migration guide for existing deployments
- Adds automated security validation in diagnostic tools
Migration Required:
If accessing metrics/health externally, use reverse proxy with auth,
SSH tunneling, or VPN. See SECURITY.md for details.
Version: 1.0.2
2025-11-05 21:28:55 +08:00
rE-Bo0t.bx1
883f6e5ef4
fix: quote YAML values with colons in validate.yml
2025-11-05 21:28:54 +08:00
rE-Bo0t.bx1
95165aae95
feat: v1.1 repository restructuring
...
Reorganize into professional directory structure:
- Add 6 comprehensive documentation files
- Update Dependabot configuration
- Update README for better navigation
- Create docs/, templates/, tools/, .github/ structure
See RESTRUCTURING-SUMMARY.md for complete details.
BREAKING CHANGES: None - fully backward compatible
2025-11-05 21:28:10 +08:00
rE-Bo0t.bx1
6304ce97b7
fix(ci): remove duplicate name key from workflow
2025-11-01 08:17:48 +09:00
rE-Bo0t.bx1
8057249f58
📚 docs(readme): clean up badges and workflow names for better visuals
2025-11-01 08:14:29 +09:00
dependabot[bot]
8763af89f8
chore(deps)(deps): bump actions/checkout from 4 to 5 ( #2 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 07:49:49 +09:00
rE-Bo0t.bx1
34e44f5732
chore(deps): trigger Dependabot recheck
2025-11-01 07:48:30 +09:00
rE-Bo0t.bx1
dd6b4e5cd0
fix(ci): downgrade actions/checkout from v5 to v4 for compatibility
2025-11-01 07:42:46 +09:00
rE-Bo0t.bx1
9f967de239
🐋 refactor: replace onion.container with Dockerfile for improved build process
2025-11-01 07:33:03 +09:00
dependabot[bot]
127d3acda2
chore(deps)(deps): bump actions/checkout from 4 to 5 ( #1 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 07:18:13 +09:00
rE-Bo0t.bx1
b06d2eb68f
🎉 Initial release - Tor Guard Relay v1.0
2025-11-01 07:15:32 +09:00