Merge branch 'dev' into pr-container-images

Co-authored-by: homarr-renovate[bot] <158783068+homarr-renovate[bot]@users.noreply.github.com>

.github/workflows/ci.yml

@@ -167,7 +167,7 @@ jobs:
       - name: Cache Playwright browsers
         if: '!env.ACT'
         id: playwright-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cache/ms-playwright
           key: playwright-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
@@ -185,7 +185,7 @@ jobs:
 
       - name: Upload E2E artifacts
         if: failure() && !env.ACT
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: playwright-report
           path: e2e/test-results/

.github/workflows/on-pr-docker-cleanup.yml

@@ -0,0 +1,64 @@
+name: "[PR] Cleanup Docker preview image"
+
+on:
+  pull_request_target:
+    types: [closed]
+    branches:
+      - dev
+  workflow_dispatch:
+    inputs:
+      pr-number:
+        description: "PR number whose preview image to delete"
+        required: true
+        type: number
+
+permissions:
+  packages: write
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_TAG: pr-${{ github.event.inputs.pr-number || github.event.number }}
+
+jobs:
+  delete-image:
+    name: Delete PR preview image from GHCR
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Delete package version
+        uses: actions/github-script@v8
+        with:
+          script: |
+            const packageName = 'homarr-test';
+            const org = context.repo.owner;
+            const tag = process.env.IMAGE_TAG;
+
+            const versions = await github.paginate(
+              github.rest.packages.getAllPackageVersionsForPackageOwnedByOrg,
+              {
+                package_type: 'container',
+                package_name: packageName,
+                org,
+                per_page: 100,
+              }
+            );
+
+            const target = versions.find(v =>
+              v.metadata?.container?.tags?.includes(tag)
+            );
+
+            if (!target) {
+              console.log(`No package version found with tag "${tag}". Nothing to delete.`);
+              return;
+            }
+
+            console.log(`Deleting package version ${target.id} (tag: ${tag})`);
+
+            await github.rest.packages.deletePackageVersionForOrg({
+              package_type: 'container',
+              package_name: packageName,
+              org,
+              package_version_id: target.id,
+            });
+
+            console.log(`Successfully deleted package version ${target.id}`);

.github/workflows/on-pr-docker-publish.yml

@@ -0,0 +1,89 @@
+name: "[PR] Publish Docker preview image"
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    branches:
+      - dev
+  workflow_dispatch:
+    inputs:
+      pr-number:
+        description: "PR number (uses head ref of that PR)"
+        required: true
+        type: number
+      ref:
+        description: "Git ref to build (branch, tag, or SHA)"
+        required: false
+        type: string
+        default: ""
+
+permissions:
+  contents: read
+  packages: write
+
+env:
+  SKIP_ENV_VALIDATION: true
+  REGISTRY: ghcr.io
+  GHCR_REPO: ghcr.io/homarr-labs/homarr-test
+  TURBO_TELEMETRY_DISABLED: 1
+
+concurrency:
+  group: pr-docker-${{ github.event.inputs.pr-number || github.event.number }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-push:
+    name: Build and push PR preview image
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (
+        github.event_name == 'pull_request' &&
+        github.event.pull_request.draft == false &&
+        github.event.pull_request.head.repo.full_name == github.repository
+      )
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+          ref: ${{ github.event.inputs.ref || '' }}
+
+      - name: Determine tag
+        id: tag
+        run: |
+          PR_NUMBER="${{ github.event.inputs.pr-number || github.event.number }}"
+          echo "tag=pr-${PR_NUMBER}" >> "$GITHUB_OUTPUT"
+          echo "pr-number=${PR_NUMBER}" >> "$GITHUB_OUTPUT"
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: "${{ env.GHCR_REPO }}"
+          tags: |
+            type=raw,value=${{ steps.tag.outputs.tag }}
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          network: host
+          platforms: linux/amd64
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          push: true
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+        env:
+          SKIP_ENV_VALIDATION: true

Dockerfile

@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.10
+# syntax=docker/dockerfile:1.25
 
 FROM node:24.18.0-alpine AS base
 
@@ -24,10 +24,9 @@ RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store \
 
 COPY . .
 # Follow the pnpm fetch pattern from https://pnpm.io/cli/fetch
-# --offline enforces no registry access (all packages are in the store from fetch)
 # --frozen-lockfile is omitted as recommended by the pnpm fetch docs
 RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store \
-    pnpm install --recursive --offline
+    pnpm install --recursive
 
 ARG SKIP_ENV_VALIDATION='true'
 ARG CI='true'

pnpm-workspace.yaml

@@ -93,11 +93,11 @@ catalog:
   "@types/video.js": ^7.3.58
   "@types/ws": ^8.18.1
   "@types/xml2js": ^0.4.14
-  posthog-js: ^1.398.2
-  posthog-node: ^5.39.2
+  posthog-js: ^1.399.0
+  posthog-node: ^5.40.0
   "@vitejs/plugin-react": ^6.0.3
-  "@vitest/coverage-v8": ^4.1.9
-  "@vitest/ui": ^4.1.9
+  "@vitest/coverage-v8": ^4.1.10
+  "@vitest/ui": ^4.1.10
   "@xterm/addon-canvas": ^0.7.0
   "@xterm/addon-fit": 0.11.0
   "@xterm/xterm": ^6.0.0
@@ -145,14 +145,14 @@ catalog:
   mantine-react-table: npm:mantine-react-table-open@9.0.3
   mcp-handler: ^1.1.0
   maria2: ^0.4.1
-  mysql2: 3.22.5
+  mysql2: 3.22.6
   next: 16.2.10
   next-auth: 5.0.0-beta.31
   next-intl: 4.13.1
   node-loader: ^2.1.0
   octokit: ^5.0.5
   oxfmt: ^0.58.0
-  oxlint: ^1.72.0
+  oxlint: ^1.73.0
   pg: ^8.22.0
   postcss-preset-mantine: ^1.18.0
   prismjs: ^1.30.0
@@ -177,13 +177,13 @@ catalog:
   tsdav: ^2.3.0
   tsx: 4.20.4
   turbo: ^2.10.4
-  typescript: ^6.0.3
-  vite: ^8.1.2
+  typescript: ^7.0.2
+  vite: ^8.1.4
   undici: 7.28.0
   use-deep-compare-effect: ^1.8.1
   video.js: ^8.23.9
   vite-tsconfig-paths: ^6.1.1
-  vitest: ^4.1.9
+  vitest: ^4.1.10
   winston: 3.19.0
   ws: ^8.21.0
   xml2js: ^0.6.2
@@ -229,7 +229,7 @@ overrides:
   "tar-fs@>=3.0.0 <3.0.9": ">=3.1.3"
   "tar-fs@>=2.0.0 <2.1.3": ">=3.1.3"
   "tmp@<=0.2.3": ">=0.2.7"
-  "vite@>=5.0.0 <=5.4.18": ">=8.1.3"
+  "vite@>=5.0.0 <=5.4.18": ">=8.1.4"
 patchedDependencies:
   "@types/node-unifi": "patches/@types__node-unifi.patch"
   "trpc-to-openapi": "patches/trpc-to-openapi.patch"