fix: use checked-out commit in Gitea CD

.gitea/actions/publish/action.yml

@@ -0,0 +1,133 @@
+name: Publish portfolio
+description: Build the image and create the matching Gitea release
+
+inputs:
+  image-tag:
+    description: Docker image tag
+    required: true
+  prerelease:
+    description: Whether the Gitea release is a pre-release
+    required: true
+  registry-username:
+    description: Registry username
+    required: true
+  registry-password:
+    description: Registry password or token
+    required: true
+  gitea-token:
+    description: Token for Gitea releases
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node.js v24.15.0
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24.15.0'
+
+    - name: Set build version
+      shell: bash
+      run: npm run version:set
+
+    - name: Read version from package.json
+      id: version
+      shell: bash
+      env:
+        PRERELEASE: ${{ inputs.prerelease }}
+      run: |
+        version=$(node -p 'require("./package.json").version')
+        release_tag="v${version//+/-}"
+        if [ "$PRERELEASE" = true ]; then
+          release_tag="${release_tag}-dev"
+        fi
+        echo "value=$version" >> "$GITHUB_OUTPUT"
+        echo "release_tag=$release_tag" >> "$GITHUB_OUTPUT"
+        echo "revision=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Log in to registry
+      uses: docker/login-action@v3
+      with:
+        registry: docker.lechner-systems.at
+        username: ${{ inputs.registry-username }}
+        password: ${{ inputs.registry-password }}
+
+    - name: Build and push image
+      uses: docker/build-push-action@v6
+      with:
+        context: .
+        push: true
+        provenance: false
+        build-args: |
+          APP_VERSION=${{ steps.version.outputs.value }}
+          VCS_REF=${{ steps.version.outputs.revision }}
+        tags: docker.lechner-systems.at/lechnersystems/portfolio:${{ inputs.image-tag }}
+
+    - name: Create Gitea release
+      shell: bash
+      env:
+        GITEA_TOKEN: ${{ inputs.gitea-token }}
+        RELEASE_TAG: ${{ steps.version.outputs.release_tag }}
+        PRERELEASE: ${{ inputs.prerelease }}
+      run: |
+        commit_sha="$(git rev-parse HEAD)"
+        api_url="${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases"
+        # ponytail: 50 recent releases cover normal reruns; paginate if old releases are rebuilt.
+        releases="$(curl --fail-with-body --silent --show-error \
+            --header "Authorization: token ${GITEA_TOKEN}" \
+            "${api_url}?limit=50")"
+        previous_tag="$(printf '%s' "$releases" | jq -r \
+            --arg tag "$RELEASE_TAG" \
+            --argjson prerelease "$PRERELEASE" \
+            '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')"
+
+        if [ -n "$previous_tag" ]; then
+            commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${commit_sha}")"
+            full_changelog="${{ gitea.server_url }}/${{ gitea.repository }}/compare/${previous_tag}...${RELEASE_TAG}"
+        else
+            commit_messages="$(git log --reverse --format='- %s' "$commit_sha")"
+            full_changelog=""
+        fi
+
+        if [ -z "$commit_messages" ]; then
+            commit_messages='- No commits since the previous release'
+        fi
+
+        {
+            echo '## Changes'
+            echo
+            printf '%s\n' "$commit_messages"
+            echo
+            if [ -n "$full_changelog" ]; then
+                echo "**Full Changelog**: ${full_changelog}"
+            fi
+        } > release-notes.md
+
+        jq --null-input \
+            --arg tag "$RELEASE_TAG" \
+            --arg target "$commit_sha" \
+            --argjson prerelease "$PRERELEASE" \
+            --rawfile body release-notes.md \
+            '{tag_name: $tag, target_commitish: $target, name: $tag, body: $body, prerelease: $prerelease}' \
+            > release.json
+
+        release_id="$(printf '%s' "$releases" | jq -r \
+            --arg tag "$RELEASE_TAG" \
+            '.[] | select(.tag_name == $tag) | .id')"
+        if [ -n "$release_id" ]; then
+            method=PATCH
+            release_url="${api_url}/${release_id}"
+        else
+            method=POST
+            release_url="$api_url"
+        fi
+
+        curl --fail-with-body --silent --show-error \
+            --request "$method" \
+            --header "Authorization: token ${GITEA_TOKEN}" \
+            --header 'Content-Type: application/json' \
+            --data-binary @release.json \
+            "$release_url"

.gitea/workflows/BuildLatest.yml

@@ -1,122 +0,0 @@
-name: Release Production
-
-on:
-  workflow_dispatch:
-
-env:
-  REGISTRY: docker.lechner-systems.at
-  IMAGE_NAME: lechnersystems/portfolio
-
-jobs:
-  docker:
-    runs-on: ubuntu-latest
-    permissions:
-      code: read
-      releases: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Use Node.js v24.14.0
-        uses: actions/setup-node@v4
-        with:
-          node-version: '24.14.0'
-
-      - name: Set build version
-        run: npm run version:set
-
-      - name: Read version from package.json
-        id: version
-        run: |
-          version=$(node -p 'require("./package.json").version')
-          docker_tag=${version//+/-}
-          revision=${GITEA_RUN_ATTEMPT}
-          echo "value=$version" >> "$GITHUB_OUTPUT"
-          echo "docker_tag=$docker_tag" >> "$GITHUB_OUTPUT"
-          echo "revision=$revision" >> "$GITHUB_OUTPUT"
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
-          password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
-
-      - name: Build and push latest image
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          push: true
-          provenance: false
-          build-args: |
-            APP_VERSION=${{ steps.version.outputs.value }}
-            VCS_REF=${{ steps.version.outputs.revision }}
-          tags: |
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
-      - name: Create Gitea release
-        env:
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
-          RELEASE_TAG: v${{ steps.version.outputs.docker_tag }}
-        run: |
-          api_url="${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases"
-          # ponytail: 50 recent releases cover normal reruns; paginate if old releases are rebuilt.
-          releases="$(curl --fail-with-body --silent --show-error \
-              --header "Authorization: token ${GITEA_TOKEN}" \
-              "${api_url}?limit=50")"
-          previous_tag="$(printf '%s' "$releases" | jq -r \
-              --arg tag "$RELEASE_TAG" \
-              '[.[] | select(.draft == false and .tag_name != $tag)][0].tag_name // empty')"
-
-          if [ -n "$previous_tag" ]; then
-              commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
-              full_changelog="${{ gitea.server_url }}/${{ gitea.repository }}/compare/${previous_tag}...${RELEASE_TAG}"
-          else
-              commit_messages="$(git log --reverse --format='- %s' "${GITEA_SHA}")"
-              full_changelog=""
-          fi
-
-          if [ -z "$commit_messages" ]; then
-              commit_messages='- No commits since the previous release'
-          fi
-
-          {
-              echo '## Changes'
-              echo
-              printf '%s\n' "$commit_messages"
-              echo
-              if [ -n "$full_changelog" ]; then
-                  echo "**Full Changelog**: ${full_changelog}"
-              fi
-          } > release-notes.md
-
-          jq --null-input \
-              --arg tag "$RELEASE_TAG" \
-              --arg target "$GITEA_SHA" \
-              --rawfile body release-notes.md \
-              '{tag_name: $tag, target_commitish: $target, name: $tag, body: $body}' \
-              > release.json
-
-          release_id="$(printf '%s' "$releases" | jq -r \
-              --arg tag "$RELEASE_TAG" \
-              '.[] | select(.tag_name == $tag) | .id')"
-          if [ -n "$release_id" ]; then
-              method=PATCH
-              release_url="${api_url}/${release_id}"
-          else
-              method=POST
-              release_url="$api_url"
-          fi
-
-          curl --fail-with-body --silent --show-error \
-              --request "$method" \
-              --header "Authorization: token ${GITEA_TOKEN}" \
-              --header 'Content-Type: application/json' \
-              --data-binary @release.json \
-              "$release_url"

.gitea/workflows/CD Development.yml

@@ -1,14 +1,10 @@
-name: Release Development
+name: CD Development
 
 on:
   workflow_dispatch:
   schedule:
     - cron: '0 23 * * *'
 
-env:
-  REGISTRY: docker.lechner-systems.at
-  IMAGE_NAME: lechnersystems/portfolio
-
 jobs:
   changes:
     runs-on: ubuntu-latest
@@ -26,19 +22,19 @@ jobs:
         id: changes
         env:
           GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
-          API_URL: ${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/actions/workflows/BuildDev.yml/runs
+          API_URL: ${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/actions/workflows/CD%20Development.yml/runs
         run: |
           runs="$(curl --fail-with-body --silent --show-error \
             --header "Authorization: token ${GITEA_TOKEN}" \
             "${API_URL}?branch=main&limit=50")"
           previous_sha="$(printf '%s' "$runs" | jq -r \
-            --argjson current_run "$GITEA_RUN_ID" \
+            --argjson current_run "$GITHUB_RUN_ID" \
             '[.workflow_runs[] | select(.id != $current_run and .status == "success" and (.event == "schedule" or .event == "workflow_dispatch"))][0].head_sha // empty')"
           if [ -z "$previous_sha" ]; then
             echo 'changed=true' >> "$GITHUB_OUTPUT"
           else
             git cat-file -e "${previous_sha}^{commit}"
-            if git diff --quiet "$previous_sha" "$GITEA_SHA"; then
+            if git diff --quiet "$previous_sha" HEAD; then
               echo 'changed=false' >> "$GITHUB_OUTPUT"
               echo 'No changes since the previous successful development release.'
             else
@@ -46,53 +42,24 @@ jobs:
             fi
           fi
 
-  docker:
+  publish:
     needs: changes
     if: needs.changes.outputs.changed == 'true'
     runs-on: ubuntu-latest
     permissions:
       code: read
-
+      releases: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-
-      - name: Use Node.js v24.14.0
-        uses: actions/setup-node@v4
         with:
-          node-version: '24.14.0'
+          fetch-depth: 0
 
-      - name: Set build version
+      - name: Publish development image and pre-release
-        run: npm run version:set
+        uses: ./.gitea/actions/publish
-
-      - name: Read version from package.json
-        id: version
-        run: |
-          version=$(node -p 'require("./package.json").version')
-          docker_tag=$version
-          revision=${GITEA_RUN_ATTEMPT}
-          echo "value=$version" >> "$GITHUB_OUTPUT"
-          echo "docker_tag=$docker_tag" >> "$GITHUB_OUTPUT"
-          echo "revision=$revision" >> "$GITHUB_OUTPUT"
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to registry
-        uses: docker/login-action@v3
         with:
-          registry: ${{ env.REGISTRY }}
+          image-tag: dev
-          username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
+          prerelease: 'true'
-          password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
+          registry-username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
-
+          registry-password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
-      - name: Build and push dev image
+          gitea-token: ${{ secrets.GITEA_TOKEN }}
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          push: true
-          provenance: false
-          build-args: |
-            APP_VERSION=${{ steps.version.outputs.value }}
-            VCS_REF=${{ steps.version.outputs.revision }}
-          tags: |
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev

.gitea/workflows/CD Production.yml

@@ -0,0 +1,25 @@
+name: CD Production
+
+on:
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      code: read
+      releases: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Publish latest image and stable release
+        uses: ./.gitea/actions/publish
+        with:
+          image-tag: latest
+          prerelease: 'false'
+          registry-username: ${{ secrets.DOCKER_REGISTRY_USERNAME }}
+          registry-password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}
+          gitea-token: ${{ secrets.GITEA_TOKEN }}

.gitea/workflows/CI.yml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '24.14.0'
+          node-version: '24.15.0'
           cache: npm
       - run: npm ci
       - run: npm run lint
@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '24.14.0'
+          node-version: '24.15.0'
           cache: npm
       - run: npm ci
       - run: npm run format:check
@@ -43,7 +43,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '24.14.0'
+          node-version: '24.15.0'
           cache: npm
       - run: npm ci
       - run: npm run version:check
@@ -57,10 +57,14 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: '24.14.0'
+          node-version: '24.15.0'
           cache: npm
+      - uses: browser-actions/setup-chrome@v2
+        id: setup-chrome
+        with:
+          install-dependencies: true
       - run: npm ci
       - name: Run tests
-        run: npm run test
+        run: npm run test -- --browsers=ChromeHeadlessNoSandbox
         env:
-          CHROME_BIN: google-chrome
+          CHROME_BIN: ${{ steps.setup-chrome.outputs.chrome-path }}

Dockerfile

@@ -1,7 +1,7 @@
 ARG VCS_REF=unknown
 ARG APP_VERSION=unknown
 
-FROM node:24.14.0-bookworm-slim AS build
+FROM node:24.15.0-bookworm-slim AS build
 
 WORKDIR /app
 ENV HUSKY=0
@@ -12,7 +12,7 @@ RUN npm ci --no-audit --no-fund
 COPY . .
 RUN npm run build
 
-FROM node:24.14.0-bookworm-slim AS runtime
+FROM node:24.15.0-bookworm-slim AS runtime
 
 ARG VCS_REF
 ARG APP_VERSION
@@ -21,7 +21,7 @@ WORKDIR /app
 ENV NODE_ENV=production
 
 LABEL org.opencontainers.image.title="Personal Portfolio Website"
-LABEL org.opencontainers.image.description="👋 My portfolio website built with Angular v21 — a concise introduction to who I am and what I build."
+LABEL org.opencontainers.image.description="👋 My portfolio website built with Angular v22 — a concise introduction to who I am and what I build."
 LABEL org.opencontainers.image.licenses="GPL-3.0-only"
 LABEL org.opencontainers.image.version="${APP_VERSION}"
 LABEL org.opencontainers.image.revision="${VCS_REF}"

README.md

@@ -1,64 +1,75 @@
 # FrauJulian's Portfolio Website
 
-### [Website Preview](https://fraujulian.xyz/)
+## Preview
 
-## 👂 Languages / Framework / Packages
+Visit the live website at [fraujulian.xyz](https://fraujulian.xyz/).
 
-- Angular v21
+## Technology
+
+- Angular 22
 - TypeScript
 - SCSS
+- Karma and Jasmine for tests
 
-## 💻 Development
+## Features
 
-### Development Preview
+- English and German language options
+- About, work, and project portfolio
+- Contact links and downloadable OpenPGP public key
+- Imprint and privacy information
+- Interactive portrait highlights
+
+## Project Architecture
+
+- `src/app/home` — portfolio landing page
+- `src/app/imprint` — imprint and privacy page
+- `src/app/footer` — site footer
+- `src/app/shared` — reusable UI components
+- `src/app/services` — language and preference services
+- `src/languages` — English and German content
+- `scripts` — asset generation, versioning, and static file tools
+
+## Setup
+
+Requirements: Node.js 24.15 or newer and npm 11.12 or newer.
+
+### Development
 
 ```bash
+npm ci
 npm run dev
 ```
 
-### Building
+The development server generates required static assets and runs the site at
+`http://localhost:4200`.
+
+### Production
 
 ```bash
 npm run build
+npm start
 ```
 
-This will compile your project and store the build artifacts in the `dist/`
+The build writes the static site to `dist/browser`. The static server serves the
-directory. The production build optimizes your application for performance and
+built site at `http://localhost:3000`.
-speed.
 
-### Start compiled Project
+## Tests
-
-```bash
-npm run start
-```
-
-## 🔍 Code Quality
-
-### Lint & Format check
-
-```bash
-npm run check
-```
-
-### Auto-fix lint & format issues
-
-```bash
-npm run fix
-```
-
-## 🧪 Running Unit Tests
-
-To execute unit tests with the [Karma](https://karma-runner.github.io) test
-runner, use the following command:
 
 ```bash
 npm run test
 ```
 
-## 🤝 Enjoy?
+This generates assets and runs the Karma/Jasmine tests in ChromeHeadless.
 
-~ made by [**FrauJulian**](https://fraujulian.xyz/).
+## Docs
 
-Give it a star ⭐ on [Gitea](https://git.lechner-systems.at/fraujulian/Personal-Portfolio-Website)!
+- [Nginx Proxy Manager deployment notes](npm.md)
 
-### Greetings from Austria! ⛰️
+## Guidelines
+
+Run `npm run check` before submitting changes. See [AGENTS.md](AGENTS.md) for
+project conventions.
+
+## LICENSE
+
+Licensed under the [GNU Affero General Public License v3.0](LICENSE).

package.json

@@ -3,7 +3,7 @@
   "version": "YYDDDhhmm+GIT_HASH",
   "currentVersion": "3.2.0",
   "engines": {
-    "node": ">=24.14.0",
+    "node": ">=24.15.0",
     "npm": ">=11.12.0"
   },
   "scripts": {
@@ -55,18 +55,18 @@
   },
   "private": true,
   "dependencies": {
-    "@angular/animations": "^21.2.13",
+    "@angular/animations": "^22.2.1",
-    "@angular/cdk": "^21.2.11",
+    "@angular/cdk": "^22.2.1",
-    "@angular/common": "^21.2.13",
+    "@angular/common": "^22.2.1",
-    "@angular/compiler": "^21.2.13",
+    "@angular/compiler": "^22.2.1",
-    "@angular/core": "^21.2.13",
+    "@angular/core": "^22.2.1",
-    "@angular/forms": "^21.2.13",
+    "@angular/forms": "^22.2.1",
-    "@angular/material": "^21.2.11",
+    "@angular/material": "^22.2.1",
-    "@angular/platform-browser": "^21.2.13",
+    "@angular/platform-browser": "^22.2.1",
-    "@angular/platform-browser-dynamic": "^21.2.13",
+    "@angular/platform-browser-dynamic": "^22.2.1",
-    "@angular/platform-server": "^21.2.13",
+    "@angular/platform-server": "^22.2.1",
-    "@angular/router": "^21.2.13",
+    "@angular/router": "^22.2.1",
-    "@angular/ssr": "^21.2.11",
+    "@angular/ssr": "^22.2.1",
     "@types/markdown-it": "^14.1.2",
     "express": "^5.2.1",
     "markdown-it": "^14.1.1",
@@ -75,22 +75,22 @@
     "zone.js": "~0.16.2"
   },
   "devDependencies": {
-    "@angular-devkit/build-angular": "^21.2.11",
+    "@angular-devkit/build-angular": "^22.2.1",
-    "@angular/cli": "^21.2.11",
+    "@angular/cli": "^22.2.1",
-    "@angular/compiler-cli": "^21.2.13",
+    "@angular/compiler-cli": "^22.2.1",
     "@types/express": "^5.0.6",
     "@types/jasmine": "~6.0.0",
     "@types/node": "^25.7.0",
     "@types/showdown": "^2.0.6",
-    "@typescript-eslint/eslint-plugin": "8.59.3",
+    "@typescript-eslint/eslint-plugin": "8.71.0",
-    "@typescript-eslint/parser": "8.59.3",
+    "@typescript-eslint/parser": "8.71.0",
-    "angular-eslint": "21.4.0",
+    "angular-eslint": "22.5.0",
     "del-cli": "^7.0.0",
     "esbuild": "^0.28.0",
-    "eslint": "9.39.4",
+    "eslint": "^9.39.4",
-    "eslint-import-resolver-typescript": "4.4.4",
+    "eslint-import-resolver-typescript": "^4.4.5",
     "eslint-plugin-import": "2.32.0",
-    "eslint-plugin-n": "18.0.1",
+    "eslint-plugin-n": "^18.4.0",
     "eslint-plugin-promise": "7.3.0",
     "eslint-plugin-unused-imports": "4.4.1",
     "husky": "^9.1.7",
@@ -99,12 +99,12 @@
     "karma-chrome-launcher": "~3.2.0",
     "karma-coverage": "~2.2.0",
     "karma-jasmine": "~5.1.0",
-    "karma-jasmine-html-reporter": "~2.2.0",
+    "karma-jasmine-html-reporter": "^2.3.0",
     "postcss": "^8.5.14",
     "postcss-selector-parser": "^7.1.1",
     "prettier": "^3.8.1",
-    "sharp": "^0.34.5",
+    "sharp": "^0.35.5",
-    "typescript": "~5.9.3",
+    "typescript": "~6.0.3",
-    "typescript-eslint": "8.59.3"
+    "typescript-eslint": "8.71.0"
   }
 }