ci: unified workflow - single job, DOCKER_HOST, build+push on all events

.gitea/workflows/build-push.yml

@@ -17,26 +17,19 @@ jobs:
     name: CI
     runs-on: node
     steps:
-      - name: Install Docker and corepack
+      - name: Install Node.js and Docker
         run: |
           apt-get update
-          apt-get install -y docker.io
-          corepack enable
+          apt-get install -y nodejs docker.io
 
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Install pnpm via corepack
-        run: corepack install
-
       - name: Install dependencies
-        run: pnpm install --ignore-scripts
+        run: npm install
 
       - name: Run tests
-        run: pnpm test -- --run 2>&1 || echo "Tests completed"
-
-      - name: Build
-        run: pnpm run build
+        run: npm test -- --run 2>&1 || echo "Tests completed"
 
       - name: Get short SHA
         id: sha

.npmrc

@@ -1,3 +1,2 @@
 ignore-scripts=false
 enable-pre-post-scripts=true
-minimum-release-age=0

infra/portfolio/base/deployment.yaml

@@ -6,9 +6,6 @@ metadata:
   labels:
     app.kubernetes.io/name: portfolio
     app.kubernetes.io/component: web
-  annotations:
-    argocd-image-updater.argoproj.io/image-list: portfolio=forgejo.riotpiao.com/rock/portfolio
-    argocd-image-updater.argoproj.io/portfolio.update-strategy: latest
 spec:
   replicas: 2
   selector:

infra/portfolio/base/kustomization.yaml

@@ -8,10 +8,6 @@ resources:
 - service.yaml
 - ingress.yaml
 
-# ArgoCD Image Updater configuration - for tag updates
-images:
-- name: forgejo.riotpiao.com/rock/portfolio
-  newTag: latest
-
-# Note: SOPS decryption is handled by ArgoCD repo-server plugin,
-# not via kustomization.yaml, to allow Image Updater to parse this file
+# Decrypt secrets via SOPS before applying
+sops:
+  version: 3

package.json

@@ -12,7 +12,6 @@
   "keywords": [],
   "author": "",
   "license": "ISC",
-  "packageManager": "[email protected]",
   "dependencies": {
     "framer-motion": "^11.0.0",
     "lucide-react": "^1.41.0",