underpost 3.2.3 → 3.2.5

package/.github/workflows/publish.ci.yml

@@ -3,17 +3,27 @@ on:
   push:
     tags:
       - 'v*'
+permissions:
+  contents: write
+  packages: write
+  id-token: write
 jobs:
   build-and-publish:
     # prevents this action from running on forks
     if: github.repository == 'underpostnet/pwa-microservices-template'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
+      packages: write
       id-token: write
     steps:
       - uses: actions/checkout@v6
 
+      - name: Install required packages
+        run: |
+          sudo apt-get update -y
+          sudo apt-get install -y sudo tar gzip bzip2 git curl
+
       - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
@@ -27,12 +37,21 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: npm publish --provenance --access public
 
+      - name: Dispatch release CD
+        run: |
+          curl -s -f -X POST \
+            -H "Accept: application/vnd.github.v3+json" \
+            -H "Authorization: token ${{ secrets.GIT_AUTH_TOKEN }}" \
+            "https://api.github.com/repos/underpostnet/pwa-microservices-template/actions/workflows/release.cd.yml/dispatches" \
+            -d '{"ref":"master"}'
+
   build-and-publish-ghpkg:
     # prevents this action from running on forks
     if: github.repository == 'underpostnet/pwa-microservices-template-ghpkg'
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
+      packages: write
       id-token: write
     steps:
       - uses: actions/checkout@v6
@@ -66,10 +85,3 @@ jobs:
           npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GIT_AUTH_TOKEN }}
-
-  # Release deploy — triggers release.cd.yml after Docker build succeeds
-  deploy-release:
-    needs: build-and-publish
-    if: always() && needs.build-and-publish.result == 'success'
-    uses: ./.github/workflows/release.cd.yml
-    secrets: inherit

package/CHANGELOG.md

@@ -1,6 +1,33 @@
 # Changelog
 
-## 2026-04-15
+## 2026-04-16
+
+### cli-run
+
+- Refactor cron command execution to improve flag handling and streamline deployment options ([1773b8e12](https://github.com/underpostnet/engine/commit/1773b8e12d1edccd99d21b231c47bbea647e9772))
+- Add shellExec command for database operations in deployment process ([9de52cb7d](https://github.com/underpostnet/engine/commit/9de52cb7d69e2fe2a8e515e8bfb23a615c0974a6))
+
+### cli-cron
+
+- Enhance cron job commands with git option and streamline backup operations ([170c77ff4](https://github.com/underpostnet/engine/commit/170c77ff499712bce2fe443719c29528c52610e5))
+- Refactor cron job commands to use 'underpost' CLI and remove secret run step ([e51cd0231](https://github.com/underpostnet/engine/commit/e51cd023195ef8855b36418b4076812ef677baaf))
+- Refactor streamline cron deployment handling and add deploy-id resolver ([bb81fe80b](https://github.com/underpostnet/engine/commit/bb81fe80bcb6b7aa30604d65d0357b2e3e5e10ee))
+
+### github-actions
+
+- Fix sudo usage in package installation step ([8545a8e88](https://github.com/underpostnet/engine/commit/8545a8e88e10443d754bcadb1772c3e1acb369f9))
+
+## New release v:3.2.4 (2026-04-15)
+
+### cli-cron
+
+- Update underpost container environment path for volume mount ([8fdfb5416](https://github.com/underpostnet/engine/commit/8fdfb54165f4ef7379fccbeb20e5c476320bc1f6))
+
+### github-actions
+
+- Add dispatch step for release CD in publish workflow ([8dc0e3ccd](https://github.com/underpostnet/engine/commit/8dc0e3ccd1a578f776edf215428d08640b44c3d1))
+
+## New release v:3.2.3 (2026-04-15)
 
 ### cli-cron
 

package/CLI-HELP.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v3.2.3
+## underpost ci/cd cli v3.2.5
 
 ### Usage: `underpost [options] [command]`
   ```

package/README.md

@@ -16,7 +16,7 @@
 
 <div align="center">
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.3)](https://socket.dev/npm/package/underpost/overview/3.2.3) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.5)](https://socket.dev/npm/package/underpost/overview/3.2.5) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 </div>
 
@@ -61,7 +61,7 @@ npm run dev
 <a target="_top" href="https://www.nexodev.org/docs?cid=src">See Docs here.</a>
 
 <!-- cli-index-start -->
-## underpost ci/cd cli v3.2.3
+## underpost ci/cd cli v3.2.5
 
 ### Usage: `underpost [options] [command]`
   ```

package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml

@@ -23,21 +23,19 @@ spec:
         spec:
           containers:
             - name: dd-cron-backup
-              image: underpost/underpost-engine:v3.2.3
+              image: underpost/underpost-engine:v3.2.5
               command:
                 - /bin/sh
                 - -c
                 - >
                   cd /home/dd/engine &&
-                  node bin run secret &&
                   node bin env dd-cron production &&
-                  node bin cron --git --dev --kubeadm dd-lampp,dd-cyberia,dd-core,dd-test backup
+                  node bin cron dd-lampp,dd-cyberia,dd-core,dd-test backup --git --kubeadm 
               volumeMounts:
                 - mountPath: /home/dd/engine
                   name: underpost-cron-container-volume
-                - mountPath: /usr/lib/node_modules/underpost/.env
+                - mountPath: /usr/lib/node_modules/underpost
                   name: underpost-share-env
-                  subPath: .env
           volumes:
             - hostPath:
                 path: /home/dd/engine

package/manifests/cronjobs/dd-cron/dd-cron-dns.yaml

@@ -23,21 +23,19 @@ spec:
         spec:
           containers:
             - name: dd-cron-dns
-              image: underpost/underpost-engine:v3.2.3
+              image: underpost/underpost-engine:v3.2.5
               command:
                 - /bin/sh
                 - -c
                 - >
                   cd /home/dd/engine &&
-                  node bin run secret &&
                   node bin env dd-cron production &&
-                  node bin cron --git --dev --kubeadm dd-cron dns
+                  node bin cron dd-cron dns --git --kubeadm 
               volumeMounts:
                 - mountPath: /home/dd/engine
                   name: underpost-cron-container-volume
-                - mountPath: /usr/lib/node_modules/underpost/.env
+                - mountPath: /usr/lib/node_modules/underpost
                   name: underpost-share-env
-                  subPath: .env
           volumes:
             - hostPath:
                 path: /home/dd/engine

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.3
+          image: localhost/rockylinux9-underpost:v3.2.5
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -100,7 +100,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: localhost/rockylinux9-underpost:v3.2.3
+          image: localhost/rockylinux9-underpost:v3.2.5
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.3
+          image: localhost/rockylinux9-underpost:v3.2.5
           envFrom:
             - secretRef:
                 name: underpost-config
@@ -112,7 +112,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v3.2.3
+          image: localhost/rockylinux9-underpost:v3.2.5
           envFrom:
             - secretRef:
                 name: underpost-config

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "underpost",
-    "version": "3.2.3",
+    "version": "3.2.5",
     "description": "pwa api rest template",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",

package/src/cli/release.js

@@ -148,7 +148,7 @@ class UnderpostRelease {
       shellExec(`node bin new --deploy-id dd-default`);
       console.log(fs.existsSync(`./engine-private/conf/dd-default`));
       shellExec(`sudo rm -rf ./engine-private/conf/dd-default`);
-      shellExec(`node bin cron --dev --setup-start`);
+      shellExec(`node bin cron --kubeadm --setup-start --git`); // --apply
       shellExec(`node bin cmt --changelog-build`);
     },
 

package/src/cli/run.js

@@ -654,6 +654,7 @@ echo -e "[code]\nname=Visual Studio Code\nbaseurl=https://packages.microsoft.com
       const env = options.dev ? 'development' : 'production';
       const baseCommand = options.dev ? 'node bin' : 'underpost';
       const baseClusterCommand = options.dev ? ' --dev' : '';
+      const clusterFlag = options.k3s ? ' --k3s' : options.kind ? ' --kind' : ' --kubeadm';
       const defaultPath = [
         'dd-default',
         options.replicas,
@@ -674,7 +675,8 @@ echo -e "[code]\nname=Visual Studio Code\nbaseurl=https://packages.microsoft.com
           if (!validVersion) throw new Error('Version mismatch');
         }
         if (options.timezone !== 'none') shellExec(`${baseCommand} run${baseClusterCommand} tz`);
-        if (options.deployIdCronJobs !== 'none') shellExec(`node bin cron --dev --setup-start --apply`);
+        if (options.deployIdCronJobs !== 'none')
+          shellExec(`node bin cron${baseClusterCommand}${clusterFlag} --setup-start --git --apply`);
       }
 
       const currentTraffic = isDeployRunnerContext(path, options)
@@ -687,7 +689,6 @@ echo -e "[code]\nname=Visual Studio Code\nbaseurl=https://packages.microsoft.com
       const cmdString = options.cmd
         ? ' --cmd ' + (options.cmd.find((c) => c.match('"')) ? '"' + options.cmd + '"' : "'" + options.cmd + "'")
         : '';
-      const clusterFlag = options.k3s ? ' --k3s' : options.kind ? ' --kind' : ' --kubeadm';
       const gitCleanFlag = options.gitClean ? ' --git-clean' : '';
 
       shellExec(
@@ -699,6 +700,10 @@ echo -e "[code]\nname=Visual Studio Code\nbaseurl=https://packages.microsoft.com
       );
 
       if (isDeployRunnerContext(path, options)) {
+        // Backup app/services repositories with repo-backup configured
+        shellExec(
+          `${baseCommand} db ${deployId} ${clusterFlag}${baseClusterCommand} --repo-backup --primary-pod --git --force-clone --preserveUUID ${options.namespace ? ` --ns ${options.namespace}` : ''}`,
+        );
         shellExec(
           `${baseCommand} deploy${clusterFlag}${cmdString} --replicas ${replicas} --disable-update-proxy ${deployId} ${env} --versions ${versions}${
             options.namespace ? ` --namespace ${options.namespace}` : ''

package/src/index.js

@@ -44,7 +44,7 @@ class Underpost {
    * @type {String}
    * @memberof Underpost
    */
-  static version = 'v3.2.3';
+  static version = 'v3.2.5';
 
   /**
    * Required Node.js major version

package/src/server/backup.js

@@ -50,8 +50,7 @@ class BackUp {
     for (const _deployId of deployList.split(',')) {
       const deployId = _deployId.trim();
       if (!deployId) continue;
-
-      const dbCommand = `node bin db ${options.git ? '--git --force-clone ' : ''}--export --primary-pod${clusterFlag} ${deployId}`;
+      const dbCommand = `node bin db ${options.git ? '--git --force-clone ' : ''}--export --primary-pod --preserveUUID${clusterFlag} ${deployId}`;
       const repoCommand = `node bin db --repo-backup${clusterFlag} ${deployId}`;
 
       // Pass GITHUB_TOKEN and GITHUB_USERNAME ephemerally through the SSH command

package/src/server/conf.js

@@ -148,6 +148,23 @@ const getConfFolder = (deployId) => {
     : `./engine-private/conf/${deployId}`;
 };
 
+/**
+ * Reads `engine-private/deploy/dd.cron` and returns the deploy-id string,
+ * or `null` if the file does not exist or is empty.
+ *
+ * @method cronDeployIdResolve
+ * @returns {string|null} The deploy-id from dd.cron, or null.
+ * @memberof ServerConfBuilder
+ */
+const cronDeployIdResolve = () => {
+  const cronDeployFile = './engine-private/deploy/dd.cron';
+  if (fs.existsSync(cronDeployFile)) {
+    const id = fs.readFileSync(cronDeployFile, 'utf8').trim();
+    return id || null;
+  }
+  return null;
+};
+
 /**
  * Loads the deployment-specific `.env` file referenced by `engine-private/deploy/dd.cron`
  * into `process.env`. Uses `NODE_ENV` to select the environment variant
@@ -162,15 +179,12 @@ function loadCronDeployEnv() {
   const envName = process.env.NODE_ENV || 'production';
 
   // 1) Load dd.cron env (takes full precedence)
-  const cronDeployFile = './engine-private/deploy/dd.cron';
-  if (fs.existsSync(cronDeployFile)) {
-    const cronDeployId = fs.readFileSync(cronDeployFile, 'utf8').trim();
-    if (cronDeployId) {
-      const cronEnvPath = `./engine-private/conf/${cronDeployId}/.env.${envName}`;
-      if (fs.existsSync(cronEnvPath)) {
-        const cronEnv = dotenv.parse(fs.readFileSync(cronEnvPath, 'utf8'));
-        process.env = { ...process.env, ...cronEnv };
-      }
+  const cronDeployId = cronDeployIdResolve();
+  if (cronDeployId) {
+    const cronEnvPath = `./engine-private/conf/${cronDeployId}/.env.${envName}`;
+    if (fs.existsSync(cronEnvPath)) {
+      const cronEnv = dotenv.parse(fs.readFileSync(cronEnvPath, 'utf8'));
+      process.env = { ...process.env, ...cronEnv };
     }
   }
 
@@ -1776,4 +1790,5 @@ export {
   readConfJson,
   DEFAULT_DEPLOY_ID,
   loadCronDeployEnv,
+  cronDeployIdResolve,
 };

package/src/server/cron.js

@@ -16,7 +16,7 @@ const volumeHostPath = '/home/dd';
 const enginePath = '/home/dd/engine';
 const cronVolumeName = 'underpost-cron-container-volume';
 const shareEnvVolumeName = 'underpost-share-env';
-const underpostContainerEnvPath = '/usr/lib/node_modules/underpost/.env';
+const underpostContainerEnvDir = '/usr/lib/node_modules/underpost';
 
 /**
  * Generates a Kubernetes CronJob YAML manifest string.
@@ -64,11 +64,11 @@ const cronJobYamlFactory = ({
     .replace(/^-|-$/g, '')
     .substring(0, 52);
 
-  const cronBin = dev ? 'node bin' : 'underpost';
+  const cronBin = 'node bin'; // dev ? 'node bin' : 'underpost';
   const flags = `${git ? '--git ' : ''}${dev ? '--dev ' : ''}${dryRun ? '--dry-run ' : ''}${k3s ? '--k3s ' : ''}${kind ? '--kind ' : ''}${kubeadm ? '--kubeadm ' : ''}`;
-  const commands = [`cd ${enginePath}`, `node bin run secret`];
+  const commands = [`cd ${enginePath}`]; // `node bin run secret`
   if (cmd) commands.push(cmd);
-  commands.push(`${cronBin} cron ${flags}${deployList} ${jobList}`);
+  commands.push(`${cronBin} cron ${deployList} ${jobList} ${flags}`);
   const fullCommand = commands.join(' &&\n                  ');
 
   return `apiVersion: batch/v1
@@ -105,9 +105,8 @@ spec:
               volumeMounts:
                 - mountPath: ${enginePath}
                   name: ${cronVolumeName}
-                - mountPath: ${underpostContainerEnvPath}
+                - mountPath: ${underpostContainerEnvDir}
                   name: ${shareEnvVolumeName}
-                  subPath: .env
           volumes:
             - hostPath:
                 path: ${enginePath}
@@ -273,17 +272,15 @@ class UnderpostCron {
         logger.warn(`package.json not found for deploy-id: ${deployId}`, { path: packageJsonPath });
       }
 
-      // Generate and apply cron job manifests for this deploy-id
-      const hasExplicitCluster = options.k3s || options.kind || options.kubeadm;
       await Underpost.cron.generateK8sCronJobs({
         deployId,
         namespace: options.namespace,
         image: options.image,
         apply: options.apply,
         createJobNow: options.createJobNow,
-        git: options.git !== undefined ? options.git : true,
-        dev: options.dev !== undefined ? options.dev : true,
-        kubeadm: hasExplicitCluster ? !!options.kubeadm : true,
+        git: !!options.git,
+        dev: !!options.dev,
+        kubeadm: !!options.kubeadm,
         cmd: options.cmd || `node bin env ${deployId} production`,
         k3s: !!options.k3s,
         kind: !!options.kind,

package/src/server/dns.js

@@ -265,7 +265,8 @@ class Dns {
    * @returns {Promise<void>}
    */
   static async callback(deployList) {
-    loadCronDeployEnv();
+    // loadCronDeployEnv();
+
     const isOnline = await Dns.isInternetConnection();
 
     if (!isOnline) return;