Preskoči na sadržaj

Changelog

Pregled najnovijih promjena u dokumentaciji.

2026-06-08

chore(release): [skip ci] publish docs

Released: docs@0.1.2 - 0.1.2 Release-Build: 47

  • Autor: Git Author
  • Commit: 9309e7d

chore(services): add root health_path to coolify configuration in services.json

  • Autor: Dejan Njezic
  • Commit: 0e99529

2026-06-07

chore(release): [skip ci] publish docs

Released: docs@0.1.1 - 0.1.1 Release-Build: 46

  • Autor: Git Author
  • Commit: e0f87fa

Merged in ci/pr-gate-lint-via-generated-targets (pull request #7)

chore(services): update application_uuid in services.json

  • Autor: Dejan Njezic
  • Commit: 07f5e52

chore(services): update application_uuid in services.json

  • Autor: Dejan Njezic
  • Commit: 137bcbe

chore(release): [skip ci] publish docs

Released: docs@0.1.0 - 0.1.0 Release-Build: 44

  • Autor: Git Author
  • Commit: 8a42aa2

Merged in ci/pr-gate-lint-via-generated-targets (pull request #6)

ci(pr-gate): premjesti lint na generisane ci-* make targete Approved-by: Glitchy

  • Autor: Dejan Njezic
  • Commit: bf88abb

ci(pr-gate): configure full git history clone in pipeline and update .dockerignore

  • Added clone: depth: full to necessary pipeline steps for complete git history.

  • Removed .git from .dockerignore to include it in the build context.

  • Autor: Dejan Njezic

  • Commit: 7116fb0

ci(pr-gate): streamline pipeline scripts and unify make targets in bitbucket-pipelines.yml

  • Autor: Dejan Njezic
  • Commit: 4f43a78

ci(pr-gate): rename docs-scan command to scan in bitbucket-pipelines.yml

  • Autor: Dejan Njezic
  • Commit: fb16baa

ci(pr-gate): simplify docs-scan command in bitbucket-pipelines.yml

  • Autor: Dejan Njezic
  • Commit: 1a4533d

ci(pr-gate): consolidate artifact paths in bitbucket-pipelines.yml and update services schema version

  • Autor: Dejan Njezic
  • Commit: f3d39c9

2026-06-03

ci(pr-gate): update bitbucket-pipelines.yml to use dynamic ENV for build and deploy steps

  • Autor: Dejan Njezic
  • Commit: bb46ad3

ci(pr-gate): premjesti lint na generisane ci-* make targete

Lint & Validate korak je zvao lokalne docker-run Makefile targete (hadolint/markdownlint) + inline 'git ls-files | xargs ci//lint.py' pozive, uz 'unset DOCKER_HOST' workaround. ci-artifacts v12.1.0 generiše ci-hadolint/ci-markdownlint/ci-shellcheck/ci-ruff sa '?= . --exclude ci/' repo-walk defaultom i rutira docker pozive kroz Python entry pointe koji interno skidaju DOCKER_HOST na self-hosted runnerima. Zato: - zovi make ci-hadolint/ci-markdownlint/ci-shellcheck/ci-ruff umjesto lokalnih targeta i inline lint poziva - ci-docker-compose-validate bez COMPOSE_FILES (default walk nađe docker-compose.yaml) - ukloni 'unset DOCKER_HOST' (sada suvišan) - ukloni lokalne hadolint/markdownlint Makefile targete (zamijenjeni generisanim) Scope se širi: markdownlint docs//.md -> sav *.md (CLAUDE.md), hadolint Dockerfile -> +Dockerfile.dev; oba provjereno prolaze pinovane lintere (hadolint v2.12.0, markdownlint-cli2 v0.13.0).

  • Autor: Dejan Njezic
  • Commit: 76ae659

2026-06-02

Merged in ci/prod-ci-artifacts-migration (pull request #5)

ci: migrate docs pipeline to ci-artifacts v12 + Lint & Validate gate

  • Autor: Dejan Njezic
  • Commit: bcd1c0f

ci: update bitbucket-pipelines.yml comments for clarity and accuracy

  • Autor: Dejan Njezic
  • Commit: 11c9777

fix(pr-gate): unset DOCKER_HOST u Lint & Validate (hadolint/markdownlint docker run)

BB self-hosted runner postavi DOCKER_HOST=tcp://localhost:2375 (DinD), a Hetzner runner koristi unix socket. Bez unset-a docker run za hadolint/markdownlint pukne s "Cannot connect to the Docker daemon at tcp://localhost:2375". Hetzner PITFALL #1.

  • Autor: Dejan Njezic
  • Commit: 42643cf

ci(pr-gate): add lint stage (hadolint, markdownlint, shellcheck, ruff)

  • Lint & Validate step: hadolint + markdownlint (pinned Docker images), shellcheck + ruff (ci-artifacts wrappers, dynamic scope via git ls-files, vendored ci/ excluded), plus gitleaks + compose-validate. clone: depth: full (git-revision-date needs full history under mkdocs --strict). artifacts: lint-results/**.
  • build-strict-ci: isolated .venv-ci + mkdocs --strict (broken link/nav check).
  • Dockerfile: fix DL4006 (SHELL pipefail before piped RUN); .hadolint.yaml ignores DL3008.
  • markdownlint: .markdownlint-cli2.jsonc (Material-aware) + code-block language/whitespace cleanup.
  • Makefile: hadolint/markdownlint/build-strict-ci targets; MKDOCS venv-aware var.

  • mkdocs.yml: social cards_layout_options (brand colors).

  • Autor: Dejan Njezic

  • Commit: a16bca6

ci: add isolated venv and strict build target for CI pipeline

  • Autor: Dejan Njezic
  • Commit: be369ba

ci: simplify build steps by removing redundant commands in pipeline

  • Autor: Dejan Njezic
  • Commit: 639f034

ci(pr-gate): razdvoji build i scan u zasebne step-ove (infisical pattern)

Build step gura dev image (--push), scan step ga povlaci sa registry-ja i Trivy skenira. Da dev tag ne kolidira sa produkcijskim bare tagom: uklonjen build.tagging.image_tag_format i dodat release.git_tag.staging_suffix=build_number -> dev=infopuls/docs:-, prod=infopuls/docs:. Uklonjeni unset DOCKER_HOST + BUILDX_NO_DEFAULT_ATTESTATIONS (bili za --no-push lokalni scan; sad scan povlaci sa registry-ja). Dry-run: dev 0.1.0-999, prod 0.1.0.

  • Autor: Dejan Njezic
  • Commit: caf5de9

ci: podigni docs na ci-artifacts v12.0.0 (services manifest v14)

ci-artifacts v12.0.0 (PR #149 merge) ships schema v14: per-service deploy.coolify.health_path (default /healthz), uklonjen globalni CI_HEALTH_PATH. v13->v14 je samo restamp ($schema + version) -- docs ne koristi health-check ni CI_HEALTH_PATH pa nema body izmjene. - services.json: version 13->14, $schema v13.json->v14.json. - bitbucket-pipelines.yml: komentari v11.1.3->v12.0.0. - BB repo var CI_SCRIPTS_VERSION: v11.1.3->v12.0.0 (preko MCP-a, prije push-a da gate skine v14 loader).

  • Autor: Dejan Njezic
  • Commit: f4f1e17

fix(pr-gate): unset DOCKER_HOST — trivy nije nalazio lokalni image

Debug je otkrio da 'scan failed' NIJE ranjivost nego 'image not found': trivy se vezivao na tcp://localhost:2375 (DOCKER_HOST na self-hosted runneru) i nije nalazio --no-push izgradjen infopuls/docs:0.1.0 ni lokalno ni na registry-ju. unset DOCKER_HOST -> trivy i buildx koriste pravi docker socket. Potrebno samo u PR gate-u (skenira lokalni image); produkcijski build pusha pa nije pogodjen. Uklonjen privremeni trivy debug ispis.

  • Autor: Dejan Njezic
  • Commit: 34934e9

chore(pr-gate): privremeni trivy debug ispis (dijagnoza CRITICAL-a)

Scan verb suzbija trivy tabelu pa direktnim trivy image --format table ispisom hvatamo tacan CVE+paket sa runner-ovog DB-a. Uklanja se poslije dijagnoze.

  • Autor: Dejan Njezic
  • Commit: 97bc993

fix(pr-gate): BUILDX_NO_DEFAULT_ATTESTATIONS=1

Buildx default-no kaci SBOM/provenance attestaciju u manifest listu, pa trivy pokupi i builder stage (python:3.12-slim Debian) CRITICAL-e iako NISU u finalnom nginx:alpine image-u (runner-ov bazni digest dokazano 0 CRITICAL, 1 HIGH koji apk upgrade rijesi). Iskljucujemo default attestacije da scan gleda samo deployovani image. Build verb ne forsira --provenance/--sbom pa env var ima efekta. Samo PR gate skenira.

  • Autor: Dejan Njezic
  • Commit: b4f8af1

fix(docker): apk upgrade u nginx:alpine final stage

Povlaci zakrpljene alpine pakete u finalnom image-u. nginx:alpine kasni za security update-ima pa drzi fixable CRITICAL koji Trivy gate (severity=CRITICAL, ignore-unfixed) hvata. Resava ranjivost bez mijenjanja baznog taga.

  • Autor: Dejan Njezic
  • Commit: 28c065d

fix(pr-gate): make docs-bump ENV=development umjesto hardkodovane seed verzije

Verzija/image_tag se izvode iz conventional commitova (non-prod bump: bez commita/ taga/push-a), umjesto ranije hardkodovane VERSION=0.0.0 + pr- seed. build/scan citaju seeded image_tag iz ci-state.

  • Autor: Dejan Njezic
  • Commit: 4252ced

fix(pr-gate): seed --version mora biti bare semver (0.0.0, ne 0.0.0-pr)

  • Autor: Dejan Njezic
  • Commit: f6b9b9c

ci(pr-gate): pošten build — Docker build + Trivy umjesto disable-ovanog social-a

Prethodni gate je iskljucivao social plugin (DOCS_SOCIAL_CARDS=false) da mkdocs build --strict prodje bez cairo/pango na runneru -- gate tako NIJE testirao da social kartice buildaju (namjestanje da prodje). Zamijenjeno postenom provjerom koja nista ne iskljucuje: - make docs-seed/docs-build (NO_PUSH): gradi PRAVI Docker image (cairo/pango/social buildaju kao produkcija), lokalno preko buildx --load, bez push-a (nema registry pollution). - make docs-scan: Trivy scan lokalnog image-a. Revert social env-gate u mkdocs.yml (vraceno na plain - social).

  • Autor: Dejan Njezic
  • Commit: ec23d06

Ovaj changelog se automatski generiše iz git commit historije.