lotobo/toolbox-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 16 Wiki Activity

release: publish toolbox aggregate 0.3.1

Browse Source
This commit is contained in:
Albrecht Degering
2026-07-22 20:55:34 +02:00
parent de51ec0bd5
commit 587aadb79b
7 changed files with 28 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.env.example
View File

@@ -4,5 +4,5 @@ TRAEFIK_NETWORK=internal
TRAEFIK_CERT_RESOLVER=netcup
# Keep these two values paired when deploying a newer published toolbox release.
TOOLBOX_RELEASE_VERSION=0.3.0
TOOLBOX_RELEASE_SHA256=718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e
TOOLBOX_RELEASE_VERSION=0.3.1
TOOLBOX_RELEASE_SHA256=41d0f99ffa1a88a6b9cfd5f6a6ca2823a96c0a53cec5ee2a42a688de30b12465

4
Containerfile.release
View File

@@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
FROM ${NGINX_IMAGE} AS release
ARG TOOLBOX_RELEASE_VERSION=0.3.0
ARG TOOLBOX_RELEASE_SHA256=718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e
ARG TOOLBOX_RELEASE_VERSION=0.3.1
ARG TOOLBOX_RELEASE_SHA256=41d0f99ffa1a88a6b9cfd5f6a6ca2823a96c0a53cec5ee2a42a688de30b12465
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/zemion/toolbox-portal/releases/download
RUN set -eu; \

24
README.md
View File

@@ -66,7 +66,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
## Production deployment behind Traefik
The committed `compose.yaml` is the shortest production path. Its release
container downloads the immutable Toolbox 0.3.0 ZIP during the image build,
container downloads the immutable Toolbox 0.3.1 ZIP during the image build,
verifies SHA-256 before extracting it, and then copies only the verified static
files into the pinned unprivileged nginx image. Node.js and a local portal
assembly are not required on the deployment host.
@@ -117,8 +117,8 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
must declare the pinned reverse-DNS id and version. Application and portal
versions are independent.
`release/toolbox.lock.json` is the reviewed v0.3.0 lock. Its URLs and checksums
pin the published PDF Tools 0.3.4, XSLT Tools 0.3.2, and OneNote Tools 0.2.0
`release/toolbox.lock.json` is the reviewed v0.3.1 lock. Its URLs and checksums
pin the published PDF Tools 0.3.4, XSLT Tools 0.3.2, and OneNote Tools 0.2.1
release bytes. Use
`release/toolbox.lock.example.json` as the template for a future release and
verify every downloaded asset before committing updated values. Artifacts may be:
@@ -140,7 +140,7 @@ npm run assemble -- \
--lock release/toolbox.lock.json \
--portal-dist dist \
--output build/toolbox \
--archive build/add-ideas-toolbox-0.3.0.zip
--archive build/add-ideas-toolbox-0.3.1.zip
```
Existing output is refused. Pass `--force` only when replacing those exact
@@ -160,8 +160,8 @@ build/toolbox/
├── xslt/
└── onenote/
build/add-ideas-toolbox-0.3.0.zip
build/add-ideas-toolbox-0.3.0.zip.sha256
build/add-ideas-toolbox-0.3.1.zip
build/add-ideas-toolbox-0.3.1.zip.sha256
```
The assembler verifies SHA-256 before opening an artifact, validates every app
@@ -182,7 +182,7 @@ directory separately:
```sh
npm run package:static -- \
--input build/toolbox \
--output artifacts/add-ideas-toolbox-0.3.0.zip
--output artifacts/add-ideas-toolbox-0.3.1.zip
```
This also emits a `.sha256` sidecar.
@@ -199,9 +199,9 @@ normal local XML/XSLT transformations do not require that permission.
```sh
podman build -f Containerfile \
-t git.add-ideas.de/zemion/toolbox:0.3.0 .
-t git.add-ideas.de/zemion/toolbox:0.3.1 .
podman run --rm -p 8080:8080 \
git.add-ideas.de/zemion/toolbox:0.3.0
git.add-ideas.de/zemion/toolbox:0.3.1
```
For a direct-port local deployment after assembly, use the separate example:
@@ -218,7 +218,7 @@ docker login git.add-ideas.de
docker buildx build \
--platform linux/amd64,linux/arm64 \
--file Containerfile.release \
--tag git.add-ideas.de/zemion/toolbox:0.3.0 \
--tag git.add-ideas.de/zemion/toolbox:0.3.1 \
--tag git.add-ideas.de/zemion/toolbox:0.3 \
--push .
```
@@ -244,8 +244,8 @@ permission to push code, releases, and container packages.
all three apps, switch between them, and confirm the encoded `toolbox`
context.
5. Verify the distribution with
`(cd build && sha256sum -c add-ideas-toolbox-0.3.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.3.0`), and
`(cd build && sha256sum -c add-ideas-toolbox-0.3.1.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.3.1`), and
push the branch and tag to Gitea.
7. In Gitea, open **Releases → New release**, select the tag, and upload the
static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a

2
compose.example.yaml
View File

@@ -3,7 +3,7 @@ services:
build:
context: .
dockerfile: Containerfile
image: git.add-ideas.de/zemion/toolbox:0.3.0
image: git.add-ideas.de/zemion/toolbox:0.3.1
restart: unless-stopped
read_only: true
ports:

6
compose.yaml
View File

@@ -6,9 +6,9 @@ services:
context: .
dockerfile: Containerfile.release
args:
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.3.0}"
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e}"
image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.3.0}"
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.3.1}"
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-41d0f99ffa1a88a6b9cfd5f6a6ca2823a96c0a53cec5ee2a42a688de30b12465}"
image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.3.1}"
restart: unless-stopped
read_only: true
tmpfs:

8
release/toolbox.lock.example.json
View File

@@ -1,7 +1,7 @@
{
"$schema": "./toolbox-release-lock.schema.json",
"schemaVersion": 1,
"releaseVersion": "0.3.0",
"releaseVersion": "0.3.1",
"portalVersion": "0.1.0",
"catalogue": {
"id": "de.add-ideas.toolbox",
@@ -29,9 +29,9 @@
},
{
"id": "de.add-ideas.onenote-tools",
"version": "0.2.0",
"artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.0/onenote-tools-0.2.0.zip",
"sha256": "660c8c53bfd2f21875d41910d208d6638995f8dc31ba150ffa57d5591f56b76b",
"version": "0.2.1",
"artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.1/onenote-tools-0.2.1.zip",
"sha256": "be76b1086f709e6ede4891698c0bcc4b5a23a5665d37fbb860463b9a61b37989",
"target": "onenote"
}
]

8
release/toolbox.lock.json
View File

@@ -1,7 +1,7 @@
{
"$schema": "./toolbox-release-lock.schema.json",
"schemaVersion": 1,
"releaseVersion": "0.3.0",
"releaseVersion": "0.3.1",
"portalVersion": "0.1.0",
"catalogue": {
"id": "de.add-ideas.toolbox",
@@ -29,9 +29,9 @@
},
{
"id": "de.add-ideas.onenote-tools",
"version": "0.2.0",
"artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.0/onenote-tools-0.2.0.zip",
"sha256": "660c8c53bfd2f21875d41910d208d6638995f8dc31ba150ffa57d5591f56b76b",
"version": "0.2.1",
"artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.2.1/onenote-tools-0.2.1.zip",
"sha256": "be76b1086f709e6ede4891698c0bcc4b5a23a5665d37fbb860463b9a61b37989",
"target": "onenote"
}
]