From 846ffcaa12f16fe1071e2aa621573c1096e34061 Mon Sep 17 00:00:00 2001 From: gimlichael Date: Mon, 10 Aug 2026 00:09:01 +0200 Subject: [PATCH 1/2] =?UTF-8?q?=F0=9F=92=9A=20prevent=20privileged=20jobs?= =?UTF-8?q?=20from=20running=20on=20dependabot=20pull=20requests?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dependabot PRs from fork repositories need to skip jobs that require secrets or privileged environment access. Detecting dependabot[bot] as the pull request author ensures CI jobs like container publishing and attestation do not run when the change origin cannot be fully trusted. --- .github/workflows/ci-pipeline.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci-pipeline.yml b/.github/workflows/ci-pipeline.yml index 13e7621..3f5fb3b 100644 --- a/.github/workflows/ci-pipeline.yml +++ b/.github/workflows/ci-pipeline.yml @@ -56,6 +56,7 @@ jobs: DOCKERHUB_REPOSITORY_INPUT: ${{ inputs.dockerhub_repository }} HEAD_REPOSITORY: ${{ github.event.pull_request.head.repo.full_name }} CURRENT_REPOSITORY: ${{ github.repository }} + PULL_REQUEST_AUTHOR: ${{ github.event.pull_request.user.login }} run: | set -euo pipefail @@ -81,7 +82,7 @@ jobs: echo "promote-dockerhub=false" >> "$GITHUB_OUTPUT" fi - if [[ "$EVENT_NAME" == "pull_request" && "$HEAD_REPOSITORY" != "$CURRENT_REPOSITORY" ]]; then + if [[ "$EVENT_NAME" == "pull_request" && ( "$HEAD_REPOSITORY" != "$CURRENT_REPOSITORY" || "$PULL_REQUEST_AUTHOR" == "dependabot[bot]" ) ]]; then echo "run-privileged-jobs=false" >> "$GITHUB_OUTPUT" else echo "run-privileged-jobs=true" >> "$GITHUB_OUTPUT" From dacf5ea4e3de04bfa6e65c1e07fb86958d44763f Mon Sep 17 00:00:00 2001 From: gimlichael Date: Mon, 10 Aug 2026 00:09:09 +0200 Subject: [PATCH 2/2] =?UTF-8?q?=F0=9F=92=AC=20finalize=20release=20notes?= =?UTF-8?q?=20for=202.0.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Update the release date to the current date (2026-08-10) and fix the changelog link to point to the 2.0.0 tag instead of HEAD, ensuring the link resolves correctly in GitHub. --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f58ce0d..0bb4650 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,7 @@ All notable changes to this project are documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). -## [2.0.0] - 2026-08-09 +## [2.0.0] - 2026-08-10 This is a **major** release representing a deliberate modernization of the Static Content Provider. The application keeps its focus — a small, read-only, framework-first static content origin for CDN and segregated asset-host scenarios — but the implementation, configuration contract, container, and DevOps are fully modernized for .NET 10 and contemporary cloud-native patterns. @@ -120,7 +120,7 @@ This is the initial release of the Static Content Provider. - Last-Modified header support for HTTP conditional requests, - Basic license and documentation. -[2.0.0]: https://github.com/codebeltnet/web-cdn-origin/compare/1.4.0...HEAD +[2.0.0]: https://github.com/codebeltnet/web-cdn-origin/compare/1.4.0...2.0.0 [1.4.0]: https://github.com/codebeltnet/web-cdn-origin/compare/1.3.0...1.4.0 [1.3.0]: https://github.com/codebeltnet/web-cdn-origin/compare/1.2.0...1.3.0 [1.2.0]: https://github.com/codebeltnet/web-cdn-origin/compare/1.1.5...1.2.0