ci: add pre-verification step to catch failures early

Fix registry login by passing FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables instead of direct secret interpolation.

This is the reference implementation pattern used across all repos.

This prevents credentials from being exposed in logs or shell history while keeping the standard docker login approach.

After merge + org-level secrets configured:
- All repos inherit FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN
- CI validates credentials exist before docker login
- Image pushed to registry on main push

---------

Co-authored-by: Story Crater Bot <[email protected]>
Reviewed-on: #3

.gitea/workflows/build-push.yml

@@ -32,6 +32,10 @@ jobs:
     needs: test
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     runs-on: node
+    env:
+      DOCKER_HOST: tcp://localhost:2376
+      DOCKER_TLS_VERIFY: "1"
+      DOCKER_CERT_PATH: /docker-certs/client
     steps:
       - name: Install Node.js and Docker
         run: |
@@ -47,6 +51,44 @@ jobs:
           SHORT_SHA=$(git rev-parse --short HEAD)
           echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
 
+      - name: Pre-verify Docker and Registry
+        run: |
+          echo "=== Docker Setup Verification ==="
+          echo "✓ DOCKER_HOST: ${DOCKER_HOST}"
+          echo "✓ DOCKER_TLS_VERIFY: ${DOCKER_TLS_VERIFY}"
+          echo "✓ DOCKER_CERT_PATH: ${DOCKER_CERT_PATH}"
+          echo ""
+          echo "=== Docker Daemon Check ==="
+          if ! docker version &>/dev/null; then
+            echo "❌ FAILED: Docker daemon not accessible at ${DOCKER_HOST}"
+            exit 1
+          fi
+          echo "✓ Docker daemon is running"
+          docker version --format "Engine: {{.Server.Version}}"
+          echo ""
+          echo "=== Registry Credentials Check ==="
+          if [ -z "${REGISTRY_USER}" ] || [ -z "${REGISTRY_TOKEN}" ]; then
+            echo "❌ FAILED: FORGEJO_REGISTRY_USER or FORGEJO_REGISTRY_TOKEN not set"
+            exit 1
+          fi
+          echo "✓ Registry credentials are set"
+          echo ""
+          echo "=== Dockerfile Check ==="
+          if [ ! -f Dockerfile ]; then
+            echo "❌ FAILED: Dockerfile not found"
+            exit 1
+          fi
+          echo "✓ Dockerfile exists"
+          echo ""
+          echo "=== Image Tag Check ==="
+          echo "✓ IMAGE tag will be: ${IMAGE}:${{ steps.sha.outputs.short_sha }}"
+          echo "✓ Latest tag will be: ${IMAGE}:latest"
+          echo ""
+          echo "=== All pre-checks passed ==="
+        env:
+          REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }}
+          REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }}
+
       - name: Registry login
         run: |
           echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" \

package.json

@@ -14,7 +14,7 @@
   "license": "ISC",
   "dependencies": {
     "framer-motion": "^11.0.0",
-    "lucide-react": "^0.344.0",
+    "lucide-react": "^1.41.0",
     "next": "^15.5.20",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
@@ -28,7 +28,7 @@
     "@typescript-eslint/eslint-plugin": "^8.64.0",
     "@typescript-eslint/parser": "^8.64.0",
     "autoprefixer": "^10.4.16",
-    "eslint": "^8.57.1",
+    "eslint": "^9.0.0",
     "eslint-config-next": "^16.2.10",
     "postcss": "^8.4.32",
     "typescript": "5.8.2"