CI infrastructure refactor: Woodpecker→Forgejo Actions, AI declaration, changelog overhaul #55

Merged

coding-agent-marvin8 merged 0 commits from refs/pull/55/head into main

2026-07-15 09:26:19 +00:00

coding-agent-marvin8 commented

2026-07-15 08:18:49 +00:00

(Migrated from codeberg.org)

Closes #54

coding-agent-marvin8 commented

2026-07-15 08:22:19 +00:00

(Migrated from codeberg.org)

.forgejo/workflows/ci.yml line 28

Gitleaks version is dynamically fetched as the latest release. Pin to a specific version…

🔴 Not actioned — the curl|latest pattern for gitleaks on zhuiri is explicitly approved in the project's global AGENTS.md. The gitleaks/gitleaks-action@v2 doesn't work on the local runner, so this is the established pattern across all projects using zhuiri.

[`.forgejo/workflows/ci.yml` line 28](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19250645) > Gitleaks version is dynamically fetched as the latest release. Pin to a specific version… 🔴 Not actioned — the `curl|latest` pattern for gitleaks on zhuiri is explicitly approved in the project's global AGENTS.md. The gitleaks/gitleaks-action@v2 doesn't work on the local runner, so this is the established pattern across all projects using zhuiri.

coding-agent-marvin8 commented

2026-07-15 08:22:30 +00:00

(Migrated from codeberg.org)

.forgejo/workflows/ci.yml line 102

The Forgejo token is embedded directly in the git remote URL. This could leak the token…

🔴 Not actioned — this is the standard, documented pattern for pushing to the pages branch in Forgejo Actions CI. The same pattern is used in longwei and the existing docs.yml it replaces. Forgejo Actions runners mask secrets in logs automatically.

[`.forgejo/workflows/ci.yml` line 102](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19250648) > The Forgejo token is embedded directly in the git remote URL. This could leak the token… 🔴 Not actioned — this is the standard, documented pattern for pushing to the pages branch in Forgejo Actions CI. The same pattern is used in longwei and the existing docs.yml it replaces. Forgejo Actions runners mask secrets in logs automatically.

coding-agent-marvin8 commented

2026-07-15 08:22:37 +00:00

(Migrated from codeberg.org)

.forgejo/workflows/ci.yml line 15

Third-party action 'wuming' is pinned to '@main', which is a mutable reference…

🔴 Not actioned — @main is used intentionally across all Marvin8 projects (longwei, zaojun, yilan, etc.). WuMing is self-maintained; @main tracks the latest stable release. Tag pinning would require manual updates on every WuMing release.

[`.forgejo/workflows/ci.yml` line 15](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19250639) > Third-party action 'wuming' is pinned to '@main', which is a mutable reference… 🔴 Not actioned — `@main` is used intentionally across all Marvin8 projects (longwei, zaojun, yilan, etc.). WuMing is self-maintained; `@main` tracks the latest stable release. Tag pinning would require manual updates on every WuMing release.

coding-agent-marvin8 commented

2026-07-15 08:22:44 +00:00

(Migrated from codeberg.org)

.forgejo/workflows/ci.yml line 17

The variable 'forge.token' is not a standard Forgejo token context…

🔴 Not actioned — forge.token is the modern, documented Forgejo Actions context for accessing the repository token. The older secrets.GITHUB_TOKEN syntax is deprecated. forge.token is the recommended form and is used in longwei and other projects.

[`.forgejo/workflows/ci.yml` line 17](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19250642) > The variable 'forge.token' is not a standard Forgejo token context… 🔴 Not actioned — `forge.token` is the modern, documented Forgejo Actions context for accessing the repository token. The older `secrets.GITHUB_TOKEN` syntax is deprecated. `forge.token` is the recommended form and is used in longwei and other projects.

coding-agent-marvin8 commented

2026-07-15 08:24:39 +00:00

(Migrated from codeberg.org)

.pre-commit-config.yaml line 43

The 'complexipy' hook has lost its '--exclude tests' argument…

🔴 Not actioned — intentional. Running complexity analysis on test files is desired.

[`.pre-commit-config.yaml` line 43](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19250651) > The 'complexipy' hook has lost its '--exclude tests' argument… 🔴 Not actioned — intentional. Running complexity analysis on test files is desired.

coding-agent-marvin8 commented

2026-07-15 08:59:02 +00:00

(Migrated from codeberg.org)

.forgejo/workflows/ci.yml line 98

.forgejo/workflows/ci.yml line 125

The environment variable FORGEJO_TOKEN is set to ${{ forge.token }} which is not defined as a secret…
The token for the git-pages action is set to ${{ forge.token }} instead of a secret…

🔴 Not actioned (both) — forge.token is the modern, documented Forgejo Actions context for accessing the repository token. It is the recommended form and replaces the deprecated secrets.GITHUB_TOKEN. Same pattern used in longwei, kokopelli, and other projects.

[`.forgejo/workflows/ci.yml` line 98](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19252016) [`.forgejo/workflows/ci.yml` line 125](https://codeberg.org/marvinsmastodontools/fedinesia/pulls/55#issuecomment-19252019) > The environment variable `FORGEJO_TOKEN` is set to `${{ forge.token }}` which is not defined as a secret… > The token for the git-pages action is set to `${{ forge.token }}` instead of a secret… 🔴 Not actioned (both) — `forge.token` is the modern, documented Forgejo Actions context for accessing the repository token. It is the recommended form and replaces the deprecated `secrets.GITHUB_TOKEN`. Same pattern used in longwei, kokopelli, and other projects.