From 587aadb79bf8a905de0a1b801a25cbf2f1a8b562 Mon Sep 17 00:00:00 2001 From: Albrecht Degering Date: Wed, 22 Jul 2026 20:55:34 +0200 Subject: [PATCH] release: publish toolbox aggregate 0.3.1 --- .env.example | 4 ++-- Containerfile.release | 4 ++-- README.md | 24 ++++++++++++------------ compose.example.yaml | 2 +- compose.yaml | 6 +++--- release/toolbox.lock.example.json | 8 ++++---- release/toolbox.lock.json | 8 ++++---- 7 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.env.example b/.env.example index 3170d47..c2aa3b7 100644 --- a/.env.example +++ b/.env.example @@ -4,5 +4,5 @@ TRAEFIK_NETWORK=internal TRAEFIK_CERT_RESOLVER=netcup # Keep these two values paired when deploying a newer published toolbox release. -TOOLBOX_RELEASE_VERSION=0.3.0 -TOOLBOX_RELEASE_SHA256=718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e +TOOLBOX_RELEASE_VERSION=0.3.1 +TOOLBOX_RELEASE_SHA256=41d0f99ffa1a88a6b9cfd5f6a6ca2823a96c0a53cec5ee2a42a688de30b12465 diff --git a/Containerfile.release b/Containerfile.release index d198ec9..2ae4e67 100644 --- a/Containerfile.release +++ b/Containerfile.release @@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3 FROM ${NGINX_IMAGE} AS release -ARG TOOLBOX_RELEASE_VERSION=0.3.0 -ARG TOOLBOX_RELEASE_SHA256=718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e +ARG TOOLBOX_RELEASE_VERSION=0.3.1 +ARG TOOLBOX_RELEASE_SHA256=41d0f99ffa1a88a6b9cfd5f6a6ca2823a96c0a53cec5ee2a42a688de30b12465 ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/zemion/toolbox-portal/releases/download RUN set -eu; \ diff --git a/README.md b/README.md index f599957..276edc7 100644 --- a/README.md +++ b/README.md @@ -66,7 +66,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported ## Production deployment behind Traefik The committed `compose.yaml` is the shortest production path. Its release -container downloads the immutable Toolbox 0.3.0 ZIP during the image build, +container downloads the immutable Toolbox 0.3.1 ZIP during the image build, verifies SHA-256 before extracting it, and then copies only the verified static files into the pinned unprivileged nginx image. Node.js and a local portal assembly are not required on the deployment host. @@ -117,8 +117,8 @@ The app release should also publish a matching `.sha256` sidecar. The manifest must declare the pinned reverse-DNS id and version. Application and portal versions are independent. -`release/toolbox.lock.json` is the reviewed v0.3.0 lock. Its URLs and checksums -pin the published PDF Tools 0.3.4, XSLT Tools 0.3.2, and OneNote Tools 0.2.0 +`release/toolbox.lock.json` is the reviewed v0.3.1 lock. Its URLs and checksums +pin the published PDF Tools 0.3.4, XSLT Tools 0.3.2, and OneNote Tools 0.2.1 release bytes. Use `release/toolbox.lock.example.json` as the template for a future release and verify every downloaded asset before committing updated values. Artifacts may be: @@ -140,7 +140,7 @@ npm run assemble -- \ --lock release/toolbox.lock.json \ --portal-dist dist \ --output build/toolbox \ - --archive build/add-ideas-toolbox-0.3.0.zip + --archive build/add-ideas-toolbox-0.3.1.zip ``` Existing output is refused. Pass `--force` only when replacing those exact @@ -160,8 +160,8 @@ build/toolbox/ ├── xslt/ └── onenote/ -build/add-ideas-toolbox-0.3.0.zip -build/add-ideas-toolbox-0.3.0.zip.sha256 +build/add-ideas-toolbox-0.3.1.zip +build/add-ideas-toolbox-0.3.1.zip.sha256 ``` The assembler verifies SHA-256 before opening an artifact, validates every app @@ -182,7 +182,7 @@ directory separately: ```sh npm run package:static -- \ --input build/toolbox \ - --output artifacts/add-ideas-toolbox-0.3.0.zip + --output artifacts/add-ideas-toolbox-0.3.1.zip ``` This also emits a `.sha256` sidecar. @@ -199,9 +199,9 @@ normal local XML/XSLT transformations do not require that permission. ```sh podman build -f Containerfile \ - -t git.add-ideas.de/zemion/toolbox:0.3.0 . + -t git.add-ideas.de/zemion/toolbox:0.3.1 . podman run --rm -p 8080:8080 \ - git.add-ideas.de/zemion/toolbox:0.3.0 + git.add-ideas.de/zemion/toolbox:0.3.1 ``` For a direct-port local deployment after assembly, use the separate example: @@ -218,7 +218,7 @@ docker login git.add-ideas.de docker buildx build \ --platform linux/amd64,linux/arm64 \ --file Containerfile.release \ - --tag git.add-ideas.de/zemion/toolbox:0.3.0 \ + --tag git.add-ideas.de/zemion/toolbox:0.3.1 \ --tag git.add-ideas.de/zemion/toolbox:0.3 \ --push . ``` @@ -244,8 +244,8 @@ permission to push code, releases, and container packages. all three apps, switch between them, and confirm the encoded `toolbox` context. 5. Verify the distribution with - `(cd build && sha256sum -c add-ideas-toolbox-0.3.0.zip.sha256)`. -6. Commit the reviewed lock, tag the toolbox release (for example `v0.3.0`), and + `(cd build && sha256sum -c add-ideas-toolbox-0.3.1.zip.sha256)`. +6. Commit the reviewed lock, tag the toolbox release (for example `v0.3.1`), and push the branch and tag to Gitea. 7. In Gitea, open **Releases → New release**, select the tag, and upload the static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a diff --git a/compose.example.yaml b/compose.example.yaml index 3e47dd3..3ac6af9 100644 --- a/compose.example.yaml +++ b/compose.example.yaml @@ -3,7 +3,7 @@ services: build: context: . dockerfile: Containerfile - image: git.add-ideas.de/zemion/toolbox:0.3.0 + image: git.add-ideas.de/zemion/toolbox:0.3.1 restart: unless-stopped read_only: true ports: diff --git a/compose.yaml b/compose.yaml index 3148203..308b234 100644 --- a/compose.yaml +++ b/compose.yaml @@ -6,9 +6,9 @@ services: context: . dockerfile: Containerfile.release args: - TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.3.0}" - TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e}" - image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.3.0}" + TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.3.1}" + TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-41d0f99ffa1a88a6b9cfd5f6a6ca2823a96c0a53cec5ee2a42a688de30b12465}" + image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.3.1}" restart: unless-stopped read_only: true tmpfs: diff --git a/release/toolbox.lock.example.json b/release/toolbox.lock.example.json index c8faf04..8dfb1d1 100644 --- a/release/toolbox.lock.example.json +++ b/release/toolbox.lock.example.json @@ -1,7 +1,7 @@ { "$schema": "./toolbox-release-lock.schema.json", "schemaVersion": 1, - "releaseVersion": "0.3.0", + "releaseVersion": "0.3.1", "portalVersion": "0.1.0", "catalogue": { "id": "de.add-ideas.toolbox", @@ -29,9 +29,9 @@ }, { "id": "de.add-ideas.onenote-tools", - "version": "0.2.0", - "artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.0/onenote-tools-0.2.0.zip", - "sha256": "660c8c53bfd2f21875d41910d208d6638995f8dc31ba150ffa57d5591f56b76b", + "version": "0.2.1", + "artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.1/onenote-tools-0.2.1.zip", + "sha256": "be76b1086f709e6ede4891698c0bcc4b5a23a5665d37fbb860463b9a61b37989", "target": "onenote" } ] diff --git a/release/toolbox.lock.json b/release/toolbox.lock.json index c8faf04..8dfb1d1 100644 --- a/release/toolbox.lock.json +++ b/release/toolbox.lock.json @@ -1,7 +1,7 @@ { "$schema": "./toolbox-release-lock.schema.json", "schemaVersion": 1, - "releaseVersion": "0.3.0", + "releaseVersion": "0.3.1", "portalVersion": "0.1.0", "catalogue": { "id": "de.add-ideas.toolbox", @@ -29,9 +29,9 @@ }, { "id": "de.add-ideas.onenote-tools", - "version": "0.2.0", - "artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.0/onenote-tools-0.2.0.zip", - "sha256": "660c8c53bfd2f21875d41910d208d6638995f8dc31ba150ffa57d5591f56b76b", + "version": "0.2.1", + "artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.1/onenote-tools-0.2.1.zip", + "sha256": "be76b1086f709e6ede4891698c0bcc4b5a23a5665d37fbb860463b9a61b37989", "target": "onenote" } ]