RayLabsHQ/gitea-mirror v2.13.1

on GitHub

🔧 Docker Workflow Improvements & CI/CD Enhancements

This patch release focuses on improving the Docker build pipeline, security scanning, and CI/CD reliability.

✨ New Features

Docker & CI/CD Enhancements

• Docker Hub Authentication: Added Docker Hub authentication for Docker Scout security scanning
• Comprehensive Docker Workflow: Consolidated multiple Docker workflows into a single efficient workflow with build, push & security scan
• Enhanced Security Scanning: Migrated from Trivy to Docker Scout for more comprehensive security analysis
• Improved Pipeline Reliability: Enhanced CI/CD pipeline with better error handling and wait steps for image availability

🛠️ Improvements

Infrastructure & Build Process

• Updated Bun Base Image: Updated to latest Bun version for improved security and performance
• Enhanced Workflow Reliability: Added wait steps and proper error handling in Docker workflows
• Security Scanning Integration: Docker Scout now provides vulnerability scanning, recommendations, and policy evaluation
• Workflow Consolidation: Merged separate Docker workflows into single comprehensive workflow

Package Management

• Updated Dependencies: Updated various package dependencies to latest versions
• Enhanced Security: Regular security scanning integrated into CI/CD pipeline

🐛 Bug Fixes

Docker & CI/CD Issues

• Docker Scout Integration: Fixed Docker Scout action integration issues and image reference problems
• Workflow Reliability: Resolved workflow reliability issues with proper error handling
• Security Scanning: Security scanning workflow now continues on security issues without failing the build
• Image Availability: Added wait steps to ensure Docker images are available before scanning

🔄 Technical Changes

Workflow Improvements

• Consolidated Workflows: Single Docker workflow now handles build, push, and security scanning
• Enhanced Error Handling: Workflows continue execution even when security issues are detected
• Optimized Scanning: Improved Docker Scout integration with proper image references
• Better Triggers: Enhanced workflow triggers for more reliable CI/CD execution

📦 Installation

Docker

docker pull ghcr.io/arunavo4/gitea-mirror:v2.13.1

Docker Compose

Update your docker-compose.yml to use:

image: ghcr.io/arunavo4/gitea-mirror:v2.13.1

From Source

git checkout v2.13.1
bun install
bun run build

🔍 Security

This release includes enhanced security scanning with Docker Scout integration, providing:

• Comprehensive vulnerability analysis
• Security recommendations
• Policy evaluation
• SARIF output for GitHub Security tab

📋 Migration Notes

This is a patch release with no breaking changes. Users can upgrade directly from v2.13.0 without any configuration changes.

For Docker Users

• Simply pull the new image tag: v2.13.1
• No configuration changes required
• All existing functionality preserved

For Source Installations

• Update to the v2.13.1 tag
• Run bun install to update dependencies
• Rebuild with bun run build

🚀 What's Next

This release sets the foundation for more robust CI/CD processes and enhanced security scanning. Future releases will continue to build on these improvements.

Full Changelog: v2.13.0...v2.13.1