cesnimda
87d44537b9
security.yml: gitleaks secret scan + NuGet/npm vulnerability gate on PRs and pushes to main/develop (detective backstop to the pre-commit hook). deploy-staging.yml: on merge to develop, re-verify then rebuild the isolated local staging stack (needs a self-hosted Windows runner). deploy-prod.yml: tag-gated production promotion (the tag is the approval), ready to activate once the Linux server + its runner exist. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
30 lines
1.5 KiB
Markdown
30 lines
1.5 KiB
Markdown
# Changelog
|
|
|
|
All notable changes to InboxIntel are documented here. Format follows
|
|
[Keep a Changelog](https://keepachangelog.com/); versions follow
|
|
[Semantic Versioning](https://semver.org/). See [docs/WORKFLOW.md](docs/WORKFLOW.md).
|
|
|
|
## [Unreleased]
|
|
### Added
|
|
- CI/CD pipeline (`.gitea/workflows/`): `security` (gitleaks secret scan + NuGet/npm
|
|
vulnerability gate), `deploy-staging` (auto-redeploy local staging on `develop`),
|
|
`deploy-prod` (tag-gated production promotion, inactive until the server exists).
|
|
- Formal Git workflow & environment strategy (`docs/WORKFLOW.md`).
|
|
- Staging environment overlay (`docker-compose.staging.yml`) — production-shaped
|
|
Linux containers on Windows, isolated ports/volumes.
|
|
- Version-controlled Git hooks (`scripts/git-hooks/`) + installer
|
|
(`scripts/install-hooks.ps1`): pre-commit secret/format checks, pre-push
|
|
build+test gate.
|
|
- `VERSION` file as the single source of truth for the release number.
|
|
|
|
## [0.1.0] — scaffold
|
|
### Added
|
|
- .NET 8 Clean Architecture backend (Domain/Application/Infrastructure/Api) + React/Vite SPA.
|
|
- Docker Compose stack (Postgres 16, API, frontend, optional nginx proxy).
|
|
- Gitea Actions CI (backend build+test, frontend build) on `main`/`develop` + PRs.
|
|
- Security hardening: encrypted OAuth tokens, EF global query filters (IDOR),
|
|
loopback binds, non-root containers, SSRF egress guard.
|
|
- One-command deploy scripts (`deploy/up.ps1`, `deploy/up.sh`).
|
|
|
|
[Unreleased]: https://your-gitea-host/InboxIntel/compare/v0.1.0...HEAD
|