Run releases on the dedicated CI runner #5

Merged

erik merged 1 commit from task-2901494a-fix-remote-release-runner into main

2026-07-27 08:16:10 -05:00

erik commented

2026-07-27 08:14:54 -05:00

Owner

Summary

run web release jobs on the remote Debian devserver through ubuntu-latest
install Docker CLI and Buildx inside the remote job instead of depending on a local runner image
add manual non-publishing dispatch to validate the full multi-platform build remotely
keep Tailwind watch output minified so generated CSS stays clean

Verification

Forgejo CI run #9 passed
remote devserver release validation run #10 passed for both target platforms with publishing disabled
npm run lint
npm test (304 tests)
workflow structure and publication-gate validation

Run #10: https://forge.caradoc.com/erik/erikvancraddock.com/actions/runs/10

Task: task-2901494a

## Summary - run web release jobs on the remote Debian `devserver` through `ubuntu-latest` - install Docker CLI and Buildx inside the remote job instead of depending on a local runner image - add manual non-publishing dispatch to validate the full multi-platform build remotely - keep Tailwind watch output minified so generated CSS stays clean ## Verification - Forgejo CI run #9 passed - remote `devserver` release validation run #10 passed for both target platforms with publishing disabled - `npm run lint` - `npm test` (304 tests) - workflow structure and publication-gate validation Run #10: https://forge.caradoc.com/erik/erikvancraddock.com/actions/runs/10 Task: task-2901494a

erik added 1 commit

2026-07-27 08:14:54 -05:00

Run web releases on remote CI runner

CI / build-lint-test (push) Successful in 45s

Details

f90dace9ce

erik commented

2026-07-27 08:15:28 -05:00

Author

Owner

Review update

PR: #5 is open; Forgejo CI run #9 and non-publishing remote release validation run #10 passed on the dedicated Debian devserver runner.
Result: approved.
Scope: replaces the obsolete custom runner-image dependency with Docker CLI installation inside the remote job, adds a safe manual validation path, and keeps watched CSS output consistent with production builds.
Verification evidence: remote multi-platform Buildx validation completed with publishing disabled, lint passed, all 304 tests passed, and the workflow publication gate was validated.

Acceptance criteria

Met: Valid web-v* tags publish; manual dispatch validates with push: false; ordinary branch pushes and pull requests do not publish.
Met: Remote validation run #10 successfully built linux/amd64 and linux/arm64 through QEMU and Buildx on devserver.
Met: Tag publication retains semantic version, UTC timestamp, and latest tags.
Met: The previously verified Docker image returns its embedded APP_VERSION from /health.
Met: Automated explicit and fallback version tests remain passing.
Met: The release skill retains its repository, validation, approval, and monitoring gates.
Met: css:watch now uses --minify, so the watcher no longer dirties committed generated CSS after production builds.
Met: Documentation identifies the dedicated remote runner and non-publishing manual validation command.
Met: Local lint/tests and remote CI/multi-platform Docker validation all passed without publishing.

Findings

Blocking issues: none.
Warnings: none.
Final verdict: approved.
Follow-up: merge after explicit human approval, then prepare a new immutable release tag because web-v0.3.0 records the failed obsolete workflow.

### Review update - PR: #5 is open; Forgejo CI run #9 and non-publishing remote release validation run #10 passed on the dedicated Debian `devserver` runner. - Result: approved. - Scope: replaces the obsolete custom runner-image dependency with Docker CLI installation inside the remote job, adds a safe manual validation path, and keeps watched CSS output consistent with production builds. - Verification evidence: remote multi-platform Buildx validation completed with publishing disabled, lint passed, all 304 tests passed, and the workflow publication gate was validated. ### Acceptance criteria - [x] **Met:** Valid `web-v*` tags publish; manual dispatch validates with `push: false`; ordinary branch pushes and pull requests do not publish. - [x] **Met:** Remote validation run #10 successfully built `linux/amd64` and `linux/arm64` through QEMU and Buildx on `devserver`. - [x] **Met:** Tag publication retains semantic version, UTC timestamp, and `latest` tags. - [x] **Met:** The previously verified Docker image returns its embedded `APP_VERSION` from `/health`. - [x] **Met:** Automated explicit and fallback version tests remain passing. - [x] **Met:** The release skill retains its repository, validation, approval, and monitoring gates. - [x] **Met:** `css:watch` now uses `--minify`, so the watcher no longer dirties committed generated CSS after production builds. - [x] **Met:** Documentation identifies the dedicated remote runner and non-publishing manual validation command. - [x] **Met:** Local lint/tests and remote CI/multi-platform Docker validation all passed without publishing. ### Findings - Blocking issues: none. - Warnings: none. - Final verdict: **approved**. - Follow-up: merge after explicit human approval, then prepare a new immutable release tag because `web-v0.3.0` records the failed obsolete workflow.

erik merged commit 2a09209aec into main

2026-07-27 08:16:10 -05:00

erik deleted branch task-2901494a-fix-remote-release-runner

2026-07-27 08:16:10 -05:00

erik referenced this pull request from a commit

2026-07-27 08:16:11 -05:00

Merge pull request 'Run releases on the dedicated CI runner' (#5) from task-2901494a-fix-remote-release-runner into main