Commit graph

2012 commits

Author SHA1 Message Date
RocketQuack
0281722f75 feat(ci): split core image workflows and publish base images to ghcr 2026-04-21 19:05:00 +02:00
ews-pgasser
960a3732ce chore: bump redis from 6.2 to 8.6-alpine 2026-04-21 09:05:34 +02:00
RocketQuack
28dbfd57ba
Merge pull request #1879 from ews-pgasser/fix/remove-nested-sites-assets-volume
Fix/remove nested sites assets volume
2026-04-20 17:50:17 +02:00
ews-pgasser
17670ec04c docs: move sites/assets volume upgrade note to migration docs 2026-04-20 17:23:46 +02:00
ews-pgasser
63f5169610 fix: removed sites/assets volume from custom & production Containerfile too 2026-04-20 16:30:58 +02:00
ews-pgasser
0cddb6f35b docs: document volume migration notes for sites/assets change 2026-04-20 15:51:19 +02:00
ews-pgasser
9ae6989269 fix: remove nested sites assets volume 2026-04-20 15:34:55 +02:00
Daniel Radl
d899df9d8a
Merge pull request #1876 from jslocomotor/fix/upgrade-mariadb-11-8
chore(compose): use MariaDB 11.8 and remove obsolete 10.6 workaround
2026-04-20 12:25:06 +02:00
jslocomotor
9cecbc7b2d chore(compose): use MariaDB 11.8 and remove obsolete MariaDB 10.6 workaround 2026-04-18 21:18:22 +02:00
Daniel Radl
a1737ea62d
Merge pull request #1861 from OmarElaraby26/fix/apps-json-token-leak
fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret
2026-04-15 14:25:35 +02:00
RocketQuack
d33890a905
Merge pull request #1873 from AMR-Mannesmann/chore(vscode)/show-git-folder
chore(vscode): show git folder
2026-04-15 14:14:07 +02:00
RocketQuack
4e5f84fa29 chore: remove comments about why BuildKit is being used to parse apps.json 2026-04-15 13:52:31 +02:00
Daniel Radl
1fe7523bfb
chore(vscode): show git folder 2026-04-15 12:44:03 +02:00
github-actions
616ffd4177 chore: Update example.env 2026-04-14 18:46:14 +00:00
RocketQuack
159eb8231f
Merge pull request #1872 from Rocket-Quack/fix/docs-pipeline-1
ci(docs): switch pages workflow to corepack-managed pnpm
2026-04-14 14:09:40 +02:00
RocketQuack
adc72561a1 ci(docs): remove setup-node pnpm cache for corepack flow 2026-04-14 14:04:05 +02:00
RocketQuack
1d95762815 ci(docs): switch pages workflow to corepack-managed pnpm 2026-04-14 14:02:04 +02:00
RocketQuack
0feb49d00a ci(docs): add lockfile debug output for pages workflow 2026-04-14 13:55:29 +02:00
RocketQuack
169d5be00c ci(docs): pin pnpm version for pages build 2026-04-14 13:49:21 +02:00
RocketQuack
f55133966b
Merge pull request #1869 from frappe/dependabot/github_actions/pnpm/action-setup-6
chore(deps): bump pnpm/action-setup from 5 to 6
2026-04-14 11:46:31 +02:00
Daniel Radl
8d70f37c68
Merge pull request #1870 from frappe/dependabot/github_actions/actions/upload-pages-artifact-5
chore(deps): bump actions/upload-pages-artifact from 4 to 5
2026-04-14 10:42:40 +02:00
dependabot[bot]
db8868b25b
chore(deps): bump actions/upload-pages-artifact from 4 to 5
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](https://github.com/actions/upload-pages-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-pages-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-14 08:23:11 +00:00
RocketQuack
4c6d4decca
Merge pull request #1868 from frappe/dependabot/github_actions/docker/bake-action-7.1.0
chore(deps): bump docker/bake-action from 7.0.0 to 7.1.0
2026-04-13 14:46:14 +02:00
dependabot[bot]
3e1e045f7a
chore(deps): bump pnpm/action-setup from 5 to 6
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 5 to 6.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v5...v6)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 08:39:38 +00:00
dependabot[bot]
526119247f
chore(deps): bump docker/bake-action from 7.0.0 to 7.1.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v7.0.0...v7.1.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 08:39:30 +00:00
Daniel Radl
bb3faf8a25
Merge pull request #1867 from AMR-Mannesmann/docs/add-maintainers-file
docs: add MAINTAINERS.md to document project maintainers
2026-04-12 15:15:16 +02:00
Daniel Radl
adaf37dfa5 docs: add MAINTAINERS.md to document project maintainers 2026-04-12 15:12:42 +02:00
github-actions
f36bde7aca chore: Update example.env 2026-04-11 05:32:15 +00:00
Daniel Radl
9d566ecc3d
Merge pull request #1866 from AMR-Mannesmann/chore/vscode-watcher-exclude
chore(vscode): exclude build artifacts and deps from file watcher
2026-04-10 17:33:34 +02:00
Daniel Radl
91308ce43d chore(vscode): exclude build artifacts and deps from file watcher 2026-04-10 16:51:19 +02:00
RocketQuack
1aa7f670ad
Merge pull request #1864 from Rocket-Quack/fix/security-updates-2
fix(docs): override vulnerable vite dependency
2026-04-09 13:26:55 +02:00
RocketQuack
90d9d25eb3 fix(docs): override vulnerable vite dependency 2026-04-09 13:17:52 +02:00
github-actions
dfb6ee4f08 chore: Update example.env 2026-04-09 10:37:09 +00:00
github-actions
20169854f5 chore: Update example.env 2026-04-09 05:17:52 +00:00
RocketQuack
7382ba247c
Merge pull request #1862 from frappe/dependabot/pip/pytest-9.0.3
chore(deps): bump pytest from 9.0.2 to 9.0.3
2026-04-08 14:15:03 +02:00
dependabot[bot]
f521624b1b
chore(deps): bump pytest from 9.0.2 to 9.0.3
Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-08 08:24:16 +00:00
github-actions
031d1964a1 chore: Update example.env 2026-04-07 18:26:31 +00:00
OmarElaraby26
8892908f5d docs: require Docker Engine v23+ instead of setting DOCKER_BUILDKIT=1
BuildKit has been the default builder since Docker Engine 23.0 (Feb 2023),
so prefixing the example build commands with DOCKER_BUILDKIT=1 is redundant
on any supported install. Replace the prefix with an explicit prerequisite
note so the requirement lives with the user's environment, not the example.

The build relies on BuildKit secret mounts (--secret) to keep apps.json
tokens out of image layers, which is why a real BuildKit-default engine
is mandatory rather than merely recommended.

Addresses review feedback on PR #1861.
2026-04-07 20:12:29 +02:00
OmarElaraby26
ae275df161 fix(security): replace APPS_JSON_BASE64 build-arg with BuildKit secret mount
APPS_JSON_BASE64 is stored in image layer metadata, permanently exposing
private repo tokens (GitHub PATs) to anyone with image pull access.

Replace --build-arg with --mount=type=secret so that apps.json is only
available during the RUN step and never committed to any layer.

Refs: https://docs.docker.com/reference/build-checks/secrets-used-in-arg-or-env/
2026-04-05 22:24:53 +02:00
RocketQuack
65d9510a2b
Merge pull request #1858 from sujaldev/patch-1
docs: fix dead link for environment variables reference.
2026-04-04 14:41:50 +02:00
Sujal Singh
259aa24c64 docs: fix dead link for environment variables reference 2026-04-04 06:44:45 +05:30
Daniel Radl
558c8b676c
Merge pull request #1856 from ews-pgasser/feat/add-pre-commit-postCreateCommand
Add pre-commit to devcontainer postCreateCommand
2026-04-03 20:08:32 +02:00
RocketQuack
44acc39d35
Merge pull request #1857 from BurningDog/fix/correct-link-to-env-vars-doc
fix: correct links to documentation
2026-04-03 12:40:32 +02:00
Roger Saner
563e895ad0
fix: update compose.yaml
Correct URL for Build Setup
2026-04-02 18:55:05 +02:00
Roger Saner
c7d61a5a6d
fix: update example.env
Correct link to env vars doc
2026-04-02 18:43:23 +02:00
ews-pgasser
c1236d9fcf feat: add pre-commit to devcontainer postCreateCommand 2026-04-02 16:01:41 +02:00
Daniel Radl
bc24e3190e
Merge pull request #1855 from ews-pgasser/fix/update-erpnext-to-version-16
Update Frappe and ERPNext branches to version 16
2026-04-02 13:49:56 +02:00
Daniel Radl
023af5214c
chore: add EOF newline 2026-04-02 13:48:10 +02:00
ews-pgasser
fc60479969 chore: update erpnext branch to version-16 2026-04-02 10:00:40 +02:00
ews-pgasser
6c05252b9f chore: update frappe branch to version-16 2026-04-02 10:00:33 +02:00