Merge branch 'main' into aquire_DB_lock_for_CreatePipeline

Author: 6543

.cspell.json

@@ -28,14 +28,15 @@
     "Bluesky",
     "Boguslawski",
     "bradrydzewski",
+    "buildkit",
     "BUILDPLATFORM",
     "buildx",
-    "buildkit",
     "caddyfile",
     "ccmenu",
     "CERTDIR",
     "certmagic",
     "charmbracelet",
+    "checkmake",
     "cicd",
     "ciphertext",
     "Cloudron",
@@ -48,6 +49,7 @@
     "datacenter",
     "DATASOURCE",
     "Debugf",
+    "dejavusans",
     "Demilestoned",
     "desaturate",
     "devx",
@@ -119,15 +121,16 @@
     "mapstructure",
     "markdownlint",
     "mdbook",
-    "Milestoned",
     "memswap",
     "Metas",
     "mhmxs",
+    "Milestoned",
     "moby",
     "Msgf",
     "mstruebing",
     "multiarch",
     "multierr",
+    "narqo",
     "netdns",
     "Netrc",
     "Nextcloud",
@@ -173,7 +176,6 @@
     "Rydzewski",
     "seccomp",
     "secprofile",
-    "securecookie",
     "selfhosted",
     "sess",
     "shellescape",
@@ -210,6 +212,7 @@
     "Upsert",
     "urfave",
     "usecase",
+    "useragent",
     "varchar",
     "varz",
     "Vieter",
@@ -238,32 +241,33 @@
     "zerologger"
   ],
   "ignorePaths": [
-    "*.excalidraw",
-    "*.svg",
-    "*_test.go",
     ".cspell.json",
     ".git/**/*",
     ".gitignore",
     ".golangci.yaml",
     ".vscode/extensions.json",
+    "*_test.go",
+    "*.excalidraw",
+    "*.svg",
+    "**/*.pb.go",
+    "**/fixtures/**",
+    "**/testdata/**",
     "CHANGELOG.md",
-    "Makefile",
+    "docs/versioned_docs/",
     "flake.nix",
     "go.mod",
-    "**/*.pb.go",
+    "Makefile",
+    "package.json",
     "server/store/datastore/migration/**/*",
     "web/components.d.ts",
     "web/src/assets/locales/**/*",
-    "**/fixtures/**",
-    "**/testdata/**",
-    "docs/versioned_docs/",
-    "package.json",
     // generated
-    "go.sum",
-    "flake.lock",
-    "pnpm-lock.yaml",
+    "**/mocks/**",
     "**/node_modules/**/*",
     "cmd/server/openapi/docs.go",
+    "flake.lock",
+    "go.sum",
+    "pnpm-lock.yaml",
     "renovate.json",
     // TODO: remove the following
     "docs/**/*.js",

.ecrc

@@ -8,6 +8,7 @@
     "LICENSE",
     "node_modules",
     "server/store/datastore/migration/test-files/sqlite.db",
+    "server/store/datastore/migration/test-files/postgres.sql",
     "server/store/datastore/feed.go",
     "cmd/server/openapi/docs.go",
     "_test.go",

.gitpod.yml

@@ -10,7 +10,7 @@ tasks:
       WOODPECKER_BACKEND_DOCKER_NETWORK: ci_default
     init: |
       # renovate: datasource=golang-version depName=golang
-      GO_VERSION=1.25.1
+      GO_VERSION=1.25.6
       rm -rf ~/go
       curl -fsSL https://dl.google.com/go/go$GO_VERSION.linux-amd64.tar.gz | tar xzs -C ~/
       go mod tidy

.golangci.yaml

@@ -49,10 +49,10 @@ linters:
         agent:
           list-mode: lax
           files:
-            - '**/agent/**/*.go'
             - '**/agent/*.go'
-            - '**/cmd/agent/**/*.go'
+            - '**/agent/**/*.go'
             - '**/cmd/agent/*.go'
+            - '**/cmd/agent/**/*.go'
           deny:
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cli
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd/cli
@@ -63,70 +63,89 @@ linters:
         cli:
           list-mode: lax
           files:
-            - '**/cli/**/*.go'
             - '**/cli/*.go'
-            - '**/cmd/cli/**/*.go'
+            - '**/cli/**/*.go'
             - '**/cmd/cli/*.go'
+            - '**/cmd/cli/**/*.go'
           deny:
             - pkg: go.woodpecker-ci.org/woodpecker/v3/agent
-            - pkg: go.woodpecker-ci.org/woodpecker/v3/server
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd/agent
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd/server
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/rpc
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/server
             - pkg: go.woodpecker-ci.org/woodpecker/v3/web
         pipeline:
           list-mode: lax
           files:
-            - '**/pipeline/**/*.go'
-            - '**/pipeline/*.go'
             - '!**/cli/pipeline/*.go'
             - '!**/cli/pipeline/**/*.go'
             - '!**/server/pipeline/*.go'
             - '!**/server/pipeline/**/*.go'
+            - '**/pipeline/*.go'
+            - '**/pipeline/**/*.go'
           deny:
             - pkg: go.woodpecker-ci.org/woodpecker/v3/agent
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cli
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/rpc
             - pkg: go.woodpecker-ci.org/woodpecker/v3/server
             - pkg: go.woodpecker-ci.org/woodpecker/v3/web
         server:
           list-mode: lax
           files:
-            - '**/server/**/*.go'
-            - '**/server/*.go'
-            - '**/cmd/server/**/*.go'
             - '**/cmd/server/*.go'
-            - '**/web/**/*.go'
+            - '**/cmd/server/**/*.go'
+            - '**/server/*.go'
+            - '**/server/**/*.go'
             - '**/web/*.go'
+            - '**/web/**/*.go'
           deny:
             - pkg: go.woodpecker-ci.org/woodpecker/v3/agent
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cli
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd/agent
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd/cli
             - pkg: go.woodpecker-ci.org/woodpecker/v3/woodpecker-go/woodpecker
+        rpc:
+          list-mode: lax
+          files:
+            - '!**/agent/rpc/*.go'
+            - '!**/agent/rpc/**/*.go'
+            - '!**/server/rpc/*.go'
+            - '!**/server/rpc/**/*.go'
+            - '**/rpc/*.go'
+            - '**/rpc/**/*.go'
+          deny:
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/agent
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/cli
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/server
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/web
         shared:
           list-mode: lax
           files:
-            - '**/shared/**/*.go'
-            - '**/shared/*.go'
             - '!**/pipeline/shared/*.go'
             - '!**/pipeline/shared/**/*.go'
+            - '**/shared/*.go'
+            - '**/shared/**/*.go'
           deny:
             - pkg: go.woodpecker-ci.org/woodpecker/v3/agent
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cli
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd
             - pkg: go.woodpecker-ci.org/woodpecker/v3/pipeline
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/rpc
             - pkg: go.woodpecker-ci.org/woodpecker/v3/server
             - pkg: go.woodpecker-ci.org/woodpecker/v3/web
         woodpecker-go:
           list-mode: lax
           files:
-            - '**/woodpecker-go/woodpecker/**/*.go'
             - '**/woodpecker-go/woodpecker/*.go'
+            - '**/woodpecker-go/woodpecker/**/*.go'
           deny:
             - pkg: go.woodpecker-ci.org/woodpecker/v3/agent
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cli
             - pkg: go.woodpecker-ci.org/woodpecker/v3/cmd
             - pkg: go.woodpecker-ci.org/woodpecker/v3/pipeline
+            - pkg: go.woodpecker-ci.org/woodpecker/v3/rpc
             - pkg: go.woodpecker-ci.org/woodpecker/v3/server
             - pkg: go.woodpecker-ci.org/woodpecker/v3/shared
             - pkg: go.woodpecker-ci.org/woodpecker/v3/web
@@ -159,7 +178,7 @@ linters:
         - time.*
         - strings.Split
         - callerName
-        - securecookie.GenerateRandomKey
+        - random.GetRandomBytes
     revive:
       rules:
         - name: var-naming

.mockery.yaml

@@ -5,7 +5,7 @@ filename: mock_{{.InterfaceName}}.go
 pkgname: mocks
 recursive: true
 packages:
-  go.woodpecker-ci.org/woodpecker/v3/pipeline/rpc:
+  go.woodpecker-ci.org/woodpecker/v3/rpc:
     config:
       recursive: false
   go.woodpecker-ci.org/woodpecker/v3/server/forge:

.pre-commit-config.yaml

@@ -8,20 +8,21 @@ repos:
     rev: v6.0.0
     hooks:
       - id: end-of-file-fixer
+        exclude: '\.sql$'
       - id: trailing-whitespace
         exclude: ^docs/versioned_docs/.+/40-cli.md$
   - repo: https://github.com/golangci/golangci-lint
-    rev: v2.5.0
+    rev: v2.8.0
     hooks:
       - id: golangci-lint
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.45.0
+    rev: v0.47.0
     hooks:
       - id: markdownlint
         exclude: '^(docs/versioned_docs/.*|CHANGELOG.md)$'
         language_version: 22.15.1
   - repo: https://github.com/mrtazz/checkmake
-    rev: 0.2.2
+    rev: v0.3.2
     hooks:
       - id: checkmake
         exclude: '^docker/Dockerfile.make$' # actually a Dockerfile and not a makefile
@@ -30,11 +31,11 @@ repos:
     hooks:
       - id: hadolint
   - repo: https://github.com/rbubley/mirrors-prettier
-    rev: v3.6.2
+    rev: v3.8.1
     hooks:
       - id: prettier
   - repo: https://github.com/adrienverge/yamllint.git
-    rev: v1.37.1
+    rev: v1.38.0
     hooks:
       - id: yamllint
         args: [--strict, -c=.yamllint.yaml]

.woodpecker/binaries.yaml

@@ -8,7 +8,7 @@ when:
 
 variables:
   - &golang_image 'docker.io/golang:1.25'
-  - &node_image 'docker.io/node:23-alpine'
+  - &node_image 'docker.io/node:24-alpine'
   - &xgo_image 'docker.io/techknowlogick/xgo:go-1.25.x'
 
 # cspell:words bindata netgo
@@ -38,7 +38,7 @@ steps:
       - apt install -y tree
       - make cross-compile-server
     environment:
-      PLATFORMS: linux|arm64/v8;linux|amd64;windows|amd64
+      PLATFORMS: linux|arm64/v8;linux|amd64;linux|riscv64;windows|amd64
       TAGS: bindata sqlite sqlite_unlock_notify netgo
       ARCHIVE_IT: '1'
 
@@ -99,7 +99,7 @@ steps:
   release:
     depends_on:
       - checksums
-    image: woodpeckerci/plugin-release:0.2.5
+    image: woodpeckerci/plugin-release:0.2.6
     settings:
       api_key:
         from_secret: github_token

.woodpecker/docker.yaml

@@ -1,8 +1,8 @@
 variables:
   - &golang_image 'docker.io/golang:1.25'
-  - &node_image 'docker.io/node:23-alpine'
+  - &node_image 'docker.io/node:24-alpine'
   - &xgo_image 'docker.io/techknowlogick/xgo:go-1.25.x'
-  - &buildx_plugin 'docker.io/woodpeckerci/plugin-docker-buildx:6.0.3'
+  - &buildx_plugin 'docker.io/woodpeckerci/plugin-docker-buildx:6.0.4'
   - &platforms_release 'linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/386,linux/amd64,linux/ppc64le,linux/riscv64,linux/s390x,freebsd/arm64,freebsd/amd64,openbsd/arm64,openbsd/amd64'
   - &platforms_server 'linux/arm/v7,linux/arm64/v8,linux/amd64,linux/ppc64le,linux/riscv64'
   - &platforms_preview 'linux/amd64'
@@ -44,6 +44,8 @@ when:
   - event: push
     branch: ${CI_REPO_DEFAULT_BRANCH}
     path: *when_path
+  - event: pull_request_metadata
+    evaluate: 'CI_COMMIT_PULL_REQUEST_LABELS contains "build_pr_images"'
 
 steps:
   vendor:
@@ -52,7 +54,7 @@ steps:
     commands:
       - go mod vendor
     when:
-      - event: pull_request
+      - event: [pull_request, pull_request_metadata]
         evaluate: 'CI_COMMIT_PULL_REQUEST_LABELS contains "build_pr_images"'
       - event: pull_request
         path: *when_path
@@ -72,7 +74,7 @@ steps:
       - pnpm install --frozen-lockfile
       - pnpm build
     when:
-      - event: pull_request
+      - event: [pull_request, pull_request_metadata]
         evaluate: 'CI_COMMIT_PULL_REQUEST_LABELS contains "build_pr_images"'
       - event: pull_request
         path: *when_path
@@ -95,7 +97,7 @@ steps:
       PLATFORMS: linux|amd64
       TAGS: sqlite sqlite_unlock_notify netgo
     when:
-      - event: pull_request
+      - event: [pull_request, pull_request_metadata]
         evaluate: 'CI_COMMIT_PULL_REQUEST_LABELS contains "build_pr_images"'
       - event: pull_request
         path: *when_path
@@ -131,7 +133,7 @@ steps:
       logins: *publish_logins
     when: &when-preview
       evaluate: 'CI_COMMIT_PULL_REQUEST_LABELS contains "build_pr_images"'
-      event: pull_request
+      event: [pull_request, pull_request_metadata]
 
   build-server-dryrun:
     depends_on:
@@ -305,6 +307,19 @@ steps:
   # C L I #
   #########
 
+  build-cli-alpine-preview:
+    depends_on:
+      - vendor
+    image: *buildx_plugin
+    settings:
+      repo: woodpeckerci/woodpecker-cli
+      dockerfile: docker/Dockerfile.cli.alpine.multiarch.rootless
+      platforms: *platforms_preview
+      tag: pull_${CI_COMMIT_PULL_REQUEST}-alpine
+      build_args: *build_args
+      logins: *publish_logins
+    when: *when-preview
+
   build-cli-dryrun:
     depends_on:
       - vendor