underpost 3.2.30 → 3.2.80

package/CLI-HELP.md

@@ -1,6 +1,6 @@
 ## Underpost CLI
 
-> underpost ci/cd cli v3.2.30
+> underpost ci/cd cli v3.2.80
 
 **Usage:** `underpost [options] [command]`
 
@@ -210,12 +210,15 @@ Manages commits to a GitHub repository, supporting various commit types and opti
 | `--edit` | Edit last commit. |
 | `--deploy-id <deploy-id>` | Sets the deployment configuration ID for the commit context. |
 | `--cached` | Commit staged changes only or context. |
+| `--init-repo [origin]` | Initialize a git repository at the specified path. Optionally set the git remote origin URL. |
 | `--hashes <hashes>` | Comma-separated list of specific file hashes of commits. |
 | `--extension <extension>` | specific file extensions of commits. |
-| `--changelog [latest-n]` | Print plain the changelog of the specified number of latest n commits, if no number is provided it will get the changelog to latest ci integration |
+| `--changelog` | Print the plain changelog of the last N commits (see --from-n-commit, default 1). |
 | `--changelog-build` | Builds a CHANGELOG.md file based on the commit history |
 | `--changelog-min-version <version>` | Sets the minimum version limit for --changelog-build (default: 2.85.0) |
 | `--changelog-no-hash` | Excludes commit hashes from the generated changelog entries (used with --changelog-build). |
+| `--changelog-msg` | Print the sanitized, commit-ready changelog message of the last N commits (see --from-n-commit, default 1). Empty when there are no tagged entries. |
+| `--from-n-commit <n>` | Number of latest commits to include in --changelog/--changelog-msg (default: 1). |
 | `--unpush` | With --log, automatically sets range to unpushed commits ahead of remote. |
 | `-b` | Shows the current Git branch name. |
 | `-p [branch]` | Shows the reflog for the specified branch. |
@@ -517,7 +520,7 @@ Manages secrets for various platforms.
 
 | Argument | Description |
 | --- | --- |
-| `platform` | The secret management platform. Options: underpost, globalSecretClean. |
+| `platform` | The secret management platform. Options: underpost, sanitizeSecretEnvFile, globalSecretClean. |
 
 #### Options
 
@@ -547,19 +550,21 @@ Manages Docker images, including building, saving, and loading into Kubernetes c
 | `--rm <image-id>` | Removes specified Underpost Dockerfile images. |
 | `--path [path]` | The path to the Dockerfile directory. |
 | `--image-name [image-name]` | Sets a custom name for the Docker image. |
-| `--image-path [image-path]` | Sets the output path for the tar image archive. |
+| `--image-out-path [image-out-path]` | Sets the output path for the tar image archive. |
 | `--dockerfile-name [dockerfile-name]` | Sets a custom name for the Dockerfile. |
 | `--podman-save` | Exports the built image as a tar file using Podman. |
-| `--pull-base` | Pulls base images and builds a "rockylinux9-underpost" image. |
+| `--pull-base` | Pulls the base image prerequisites (rockylinux:9) on the host; combine with --build. |
 | `--spec` | Get current cached list of container images used by all pods |
 | `--namespace <namespace>` | Kubernetes namespace for image operations (defaults to "default"). |
 | `--kind` | Set kind cluster env image context management. |
 | `--kubeadm` | Set kubeadm cluster env image context management. |
 | `--k3s` | Set k3s cluster env image context management. |
+| `--docker-compose` | Load the built image tar into the local Docker store for Docker Compose availability. |
 | `--node-name` | Set node name for kubeadm or k3s cluster env image context management. |
 | `--reset` | Performs a build without using the cache. |
 | `--dev` | Use development mode. |
 | `--pull-dockerhub <dockerhub-image>` | Sets a custom Docker Hub image for base image pulls. |
+| `--import-tar <tar-path>` | Load a pre-built image tar archive (e.g. ./image-v1.0.0.tar) into the enabled target(s) without building. Combine with --kind, --kubeadm, --k3s and/or --docker-compose; the archive is loaded into each enabled one. |
 | `-h, --help` | display help for command |
 
 ---
@@ -820,7 +825,7 @@ Runs specified scripts using various runners.
 
 | Argument | Description |
 | --- | --- |
-| `runner-id` | The runner ID to run. Options: dev-cluster,etc-hosts,ipfs-expose,metadata,svc-ls,svc-rm,ssh-deploy-info,node-move,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-local,docker-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,get-proxy,instance-promote,instance,instance-build-manifest,ls-deployments,host-update,install-crio,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,sh,log,ps,pid-info,background,ports,deploy-test,tf-vae-test,spark-template,pull-rocky-image,rmi,kill,generate-pass,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job,push-bundle,pull-bundle,build-cluster-deployment-manifests,monitor-ui,shared-dir,shared-dir-add-user. |
+| `runner-id` | The runner ID to run. Options: dev-cluster,etc-hosts,ipfs-expose,metadata,svc-ls,svc-rm,ssh-deploy-info,node-move,dev-hosts-expose,dev-hosts-restore,cluster-build,template-deploy,template-deploy-local,docker-image,clean,pull,release-deploy,ssh-deploy,ide,crypto-policy,sync,stop,ssh-deploy-stop,ssh-deploy-db-rollback,ssh-deploy-db,ssh-deploy-db-status,tz,get-proxy,instance-promote,instance,deploy-key,instance-build-manifest,ls-deployments,host-update,install-crio,dd-container,ip-info,db-client,git-conf,promote,metrics,cluster,deploy,disk-clean,disk-devices,disk-usage,dev,service,sh,log,ps,pid-info,background,ports,deploy-test,tf-vae-test,spark-template,pull-rocky-image,rmi,kill,generate-pass,secret,underpost-config,gpu-env,tf-gpu-test,deploy-job,push-bundle,pull-bundle,build-cluster-deployment-manifests,monitor-ui,shared-dir,shared-dir-add-user. |
 | `path` | The input value, identifier, or path for the operation. |
 
 #### Options
@@ -871,6 +876,7 @@ Runs specified scripts using various runners.
 | `--kubeadm` | Sets the kubeadm cluster context for the runner execution. |
 | `--k3s` | Sets the k3s cluster context for the runner execution. |
 | `--kind` | Sets the kind cluster context for the runner execution. |
+| `--traffic <traffic>` | Blue/green traffic colour to bake into generated manifests (default: blue). |
 | `--git-clean` | Runs git clean on volume mount paths before copying. |
 | `--deploy-id <deploy-id>` | Sets deploy id context for the runner execution. |
 | `--user <user>` | Sets user context for the runner execution. |
@@ -896,6 +902,7 @@ Runs specified scripts using various runners.
 | `--pull-bundle` | Explicitly download the pre-built client bundle from Cloudinary inside the container (supported by: sync, template-deploy). Use together with --skip-full-build. |
 | `--remove` | Remove/teardown resources |
 | `--test` | Enables test/generic-purpose mode for the runner (e.g. use self-signed TLS instead of cert-manager). |
+| `--branch <branch>` | Sets the branch for git operations (default: current branch). |
 | `-h, --help` | display help for command |
 
 ---
@@ -920,6 +927,7 @@ General-purpose Docker Compose development pipeline (mirrors the Kubernetes dev
 | `--reset` | Comprehensive teardown (equivalent to cluster --reset): removes all stack containers, the network, named volumes (destroys data), orphans, and generated artifacts. |
 | `--force` | Force reinstall (--install), remove volumes (--down), or also drop the env-file (--reset). |
 | `--deploy-id <deploy-id>` | Deployment to run as the app container (default: dd-default). 'dd-default' self-bootstraps a fresh engine; any other id runs the standard 'underpost start' command (mirrors src/cli/deploy.js). |
+| `--docker-compose-id <docker-compose-id>` | Selects a canonical custom-workflow stack at engine-private/conf/<deploy-id>/docker-compose/<docker-compose-id>/ (docker-compose.yml + compose.env + nginx.conf, used as-is; nginx/env generation is skipped). e.g. --deploy-id dd-cyberia --docker-compose-id cyberia for the Cyberia MMO ecosystem. |
 | `--env <env>` | Deployment environment for non-default deploy ids (default: development). |
 | `--generate` | Render dynamic supporting files (nginx router config, env-file, app-command override). |
 | `--up` | Start the full stack detached (regenerates config first). |

package/README.md

@@ -10,13 +10,13 @@
 
 <div align="center">
 
-<a target="_top" href='https://download.rockylinux.org/pub/rocky/9/'><img alt='rockylinux' src='https://img.shields.io/badge/Rocky Linux v9.6-100000?style=flat&logo=rockylinux&logoColor=white&labelColor=10b981&color=727273'/></a> <a target="_top" href='https://www.npmjs.com/package/npm?activeTab=versions'><img alt='npm' src='https://img.shields.io/badge/npm v11.6.2-100000?style=flat&logo=npm&logoColor=white&labelColor=CB3837&color=727273'/></a> <a target="_top" href='https://nodejs.org/download/release'><img alt='nodedotjs' src='https://img.shields.io/badge/node v24.15.0-100000?style=flat&logo=nodedotjs&logoColor=white&labelColor=5FA04E&color=727273'/></a> <a target="_top" href='https://pgp.mongodb.com/'><img alt='mongodb' src='https://img.shields.io/badge/mongodb_server v7.0-100000?style=flat&logo=mongodb&logoColor=white&labelColor=47A248&color=727273'/></a>
+<a target="_top" href='https://download.rockylinux.org/pub/rocky/9/'><img alt='rockylinux' src='https://img.shields.io/badge/Rocky Linux v9.8-100000?style=flat&logo=rockylinux&logoColor=white&labelColor=10b981&color=727273'/></a> <a target="_top" href='https://www.npmjs.com/package/npm?activeTab=versions'><img alt='npm' src='https://img.shields.io/badge/npm v11.6.2-100000?style=flat&logo=npm&logoColor=white&labelColor=CB3837&color=727273'/></a> <a target="_top" href='https://nodejs.org/download/release'><img alt='nodedotjs' src='https://img.shields.io/badge/node v24.15.0-100000?style=flat&logo=nodedotjs&logoColor=white&labelColor=5FA04E&color=727273'/></a> <a target="_top" href='https://pgp.mongodb.com/'><img alt='mongodb' src='https://img.shields.io/badge/mongodb_server v7.0-100000?style=flat&logo=mongodb&logoColor=white&labelColor=47A248&color=727273'/></a>
 
 </div>
 
 <div align="center">
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![](https://data.jsdelivr.com/v1/package/npm/underpost/badge)](https://www.jsdelivr.com/package/npm/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.30)](https://socket.dev/npm/package/underpost/overview/3.2.30) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![](https://data.jsdelivr.com/v1/package/npm/underpost/badge)](https://www.jsdelivr.com/package/npm/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/3.2.80)](https://socket.dev/npm/package/underpost/overview/3.2.80) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 </div>
 
@@ -88,7 +88,7 @@ npm run dev
 <!-- cli-index-start -->
 ## Underpost CLI
 
-> underpost ci/cd cli v3.2.30
+> underpost ci/cd cli v3.2.80
 
 **Usage:** `underpost [options] [command]`
 

package/bin/build.js

@@ -14,7 +14,8 @@ import {
   updatePrivateEngineTestRepo,
 } from '../src/server/conf.js';
 import { loadDeployCatalog } from '../src/server/catalog.js';
-import UnderpostRepository from '../src/cli/repository.js';
+import Underpost from '../src/index.js';
+import { DOCKER_SCRIPTS } from '../src/api/cyberia-server-defaults/cyberia-server-defaults.js';
 
 const baseConfPath = './engine-private/conf/dd-cron/.env.production';
 if (fs.existsSync(baseConfPath)) dotenv.config({ path: baseConfPath, override: true });
@@ -34,8 +35,8 @@ const buildDeployTemplate = async (confName) => {
   const catalog = await loadDeployCatalog(confName);
 
   if (catalog.sourceMoves.length) {
-    UnderpostRepository.API.sparseCheckoutDirectory(`conf/${confName}`);
-    if (catalog.sourceMoves.some(([src]) => !fs.existsSync(src))) UnderpostRepository.API.pullSourceRepo(repoName);
+    Underpost.repo.sparseCheckoutDirectory(`conf/${confName}`);
+    if (catalog.sourceMoves.some(([src]) => !fs.existsSync(src))) Underpost.repo.pullSourceRepo(repoName);
   }
   syncDeployIdSources(catalog.sourceMoves);
 
@@ -125,9 +126,14 @@ const buildDeployTemplate = async (confName) => {
       packageJson.description = catalog.description;
       const { CyberiaDependencies } = await import(`../src/api/cyberia-server-defaults/cyberia-server-defaults.js`);
       packageJson.dependencies = {
-        ...originPackageJson.dependencies,
+        underpost: '^' + Underpost.version.replace('v', ''),
+        'adm-zip': '^0.6.0',
         ...CyberiaDependencies,
       };
+      packageJson.scripts = {
+        ...packageJson.scripts,
+        ...DOCKER_SCRIPTS,
+      };
       fs.writeFileSync(`${basePath}/bin/index.js`, fs.readFileSync(`./bin/cyberia.js`, 'utf8'), 'utf8');
       // Canonical Cyberia doc; engine-cyberia/README.md is a generated copy — never hand-edited.
       fs.writeFileSync(
@@ -154,6 +160,16 @@ const buildDeployTemplate = async (confName) => {
   if (!fs.existsSync(`${basePath}/images`)) fs.mkdirSync(`${basePath}/images`);
 
   fs.copyFileSync(`./.github/workflows/${repoName}.ci.yml`, `${basePath}/.github/workflows/${repoName}.ci.yml`);
+  if (fs.existsSync(`./.github/workflows/docker-image.${repoName}.ci.yml`))
+    fs.copyFileSync(
+      `./.github/workflows/docker-image.${repoName}.ci.yml`,
+      `${basePath}/.github/workflows/docker-image.${repoName}.ci.yml`,
+    );
+  if (fs.existsSync(`./.github/workflows/docker-image.${repoName}.dev.ci.yml`))
+    fs.copyFileSync(
+      `./.github/workflows/docker-image.${repoName}.dev.ci.yml`,
+      `${basePath}/.github/workflows/docker-image.${repoName}.dev.ci.yml`,
+    );
   fs.copyFileSync(`./.github/workflows/${repoName}.cd.yml`, `${basePath}/.github/workflows/${repoName}.cd.yml`);
 
   if (fs.existsSync(`./typedoc.${confName}.json`)) {
@@ -179,6 +195,26 @@ const buildDeployTemplate = async (confName) => {
     `${basePath}/.gitignore`,
     fs.readFileSync(`.gitignore`, 'utf8').split('# Ignore ERP / CRM custom prototypes src')[0],
   );
+
+  // Process catalog copies — each [src, dest] pair is copied from engine root to the template target.
+  if (catalog.copies && catalog.copies.length) {
+    for (const [src, dest] of catalog.copies) {
+      if (fs.existsSync(src)) {
+        logger.info(`Build copy`, `${src} -> ${dest}`);
+        fs.copySync(src, `${basePath}/${dest.replace(/^\.\//, '')}`);
+      }
+    }
+  }
+
+  // Process catalog moves — each [src, dest] pair is moved from engine src to template dest.
+  if (catalog.moves && catalog.moves.length) {
+    for (const [src, dest] of catalog.moves) {
+      if (fs.existsSync(src)) {
+        logger.info(`Build move`, `${src} -> ${dest}`);
+        fs.moveSync(src, `${basePath}/${dest.replace(/^\.\//, '')}`, { overwrite: true });
+      }
+    }
+  }
 };
 
 const program = new Command();

package/bin/deploy.js

@@ -422,7 +422,7 @@ ${shellExec(`git log | grep Author: | sort -u`, { stdout: true }).split(`\n`).jo
         shellExec(`sudo rm -rf ${path}/${imageName.replace(':', '_')}.tar`);
         const args = [
           `node bin image --build --path ${path}/backend/`,
-          `--image-name=${imageName} --image-path=${path}`,
+          `--image-name=${imageName} --image-out-path=${path}`,
           `--podman-save --${process.argv.includes('kubeadm') ? 'kubeadm' : 'kind'} --reset`,
         ];
         shellExec(args.join(' '));
@@ -434,7 +434,7 @@ ${shellExec(`git log | grep Author: | sort -u`, { stdout: true }).split(`\n`).jo
         shellExec(`sudo rm -rf ${path}/${imageName.replace(':', '_')}.tar`);
         const args = [
           `node bin image --build --path ${path}/frontend/`,
-          `--image-name=${imageName} --image-path=${path}`,
+          `--image-name=${imageName} --image-out-path=${path}`,
           `--podman-save --${process.argv.includes('kubeadm') ? 'kubeadm' : 'kind'} --reset`,
         ];
         shellExec(args.join(' '));

package/bump.config.js

@@ -17,6 +17,7 @@ export default {
     'package-lock.json',
     // engine-private confs are git-ignored and visited only if present at bump time.
     'engine-private/conf/**/package.json',
+    'scripts/*',
   ],
   commit: false,
   tag: false,

package/docker-compose.yml

@@ -26,7 +26,7 @@ services:
   mongodb:
     image: ${MONGO_IMAGE:-mongo:latest}
     container_name: dd-mongodb
-    entrypoint: ["bash", "/docker-init/entrypoint.sh"]
+    entrypoint: ['bash', '/docker-init/entrypoint.sh']
     environment:
       MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME:?set MONGO_INITDB_ROOT_USERNAME in docker/compose.env}
       MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD:?set MONGO_INITDB_ROOT_PASSWORD in docker/compose.env}
@@ -38,9 +38,9 @@ services:
     networks:
       - dd-internal
     expose:
-      - "27017"
+      - '27017'
     ports:
-      - "${MONGO_HOST_PORT:-27017}:27017"
+      - '${MONGO_HOST_PORT:-27017}:27017'
     healthcheck:
       test:
         - CMD-SHELL
@@ -58,18 +58,18 @@ services:
   valkey-service:
     image: ${VALKEY_IMAGE:-valkey/valkey:latest}
     container_name: dd-valkey
-    command: ["valkey-server", "--port", "6379", "--bind", "0.0.0.0", "--protected-mode", "no"]
+    command: ['valkey-server', '--port', '6379', '--bind', '0.0.0.0', '--protected-mode', 'no']
     volumes:
       - valkey-data:/data
     networks:
       - dd-internal
     expose:
-      - "6379"
+      - '6379'
     # NodePort equivalent (manifests/valkey/valkey-nodeport.yaml nodePort 32079).
     ports:
-      - "${VALKEY_NODEPORT:-32079}:6379"
+      - '${VALKEY_NODEPORT:-32079}:6379'
     healthcheck:
-      test: ["CMD", "valkey-cli", "-p", "6379", "ping"]
+      test: ['CMD', 'valkey-cli', '-p', '6379', 'ping']
       interval: 10s
       timeout: 5s
       retries: 10
@@ -81,7 +81,7 @@ services:
   # (dd-default-development-blue). Connection targets use Docker service
   # discovery instead of hardcoded localhost.
   app:
-    image: ${APP_IMAGE:-underpost/underpost-engine}:${APP_TAG:-v3.2.22}
+    image: ${APP_IMAGE:-underpost/underpost-engine}:${APP_TAG:-v3.2.80}
     container_name: dd-app
     # The start command is supplied by the generated override docker/compose.app.yml
     # (see `underpost docker-compose --generate --deploy-id <id>`), keeping this
@@ -100,18 +100,18 @@ services:
     networks:
       - dd-internal
     expose:
-      - "4001"
-      - "4002"
-      - "4003"
-      - "4004"
+      - '4001'
+      - '4002'
+      - '4003'
+      - '4004'
     # Direct access to the LoadBalancer-equivalent ports (manifest 4001-4004).
     ports:
-      - "${APP_PORT_4001:-4001}:4001"
-      - "${APP_PORT_4002:-4002}:4002"
-      - "${APP_PORT_4003:-4003}:4003"
-      - "${APP_PORT_4004:-4004}:4004"
+      - '${APP_PORT_4001:-4001}:4001'
+      - '${APP_PORT_4002:-4002}:4002'
+      - '${APP_PORT_4003:-4003}:4003'
+      - '${APP_PORT_4004:-4004}:4004'
     healthcheck:
-      test: ["CMD-SHELL", "timeout 2 bash -c '</dev/tcp/127.0.0.1/4001' || exit 1"]
+      test: ['CMD-SHELL', "timeout 2 bash -c '</dev/tcp/127.0.0.1/4001' || exit 1"]
       interval: 15s
       timeout: 5s
       retries: 5
@@ -134,9 +134,9 @@ services:
     networks:
       - dd-internal
     ports:
-      - "${PROXY_HTTP_PORT:-80}:80"
+      - '${PROXY_HTTP_PORT:-80}:80'
     healthcheck:
-      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1/healthz"]
+      test: ['CMD', 'wget', '-q', '-O', '-', 'http://127.0.0.1/healthz']
       interval: 15s
       timeout: 5s
       retries: 5
@@ -162,11 +162,11 @@ services:
     networks:
       - dd-internal
     expose:
-      - "9090"
+      - '9090'
     ports:
-      - "${PROMETHEUS_PORT:-9090}:9090"
+      - '${PROMETHEUS_PORT:-9090}:9090'
     healthcheck:
-      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1:9090/-/healthy"]
+      test: ['CMD', 'wget', '-q', '-O', '-', 'http://127.0.0.1:9090/-/healthy']
       interval: 15s
       timeout: 5s
       retries: 5
@@ -185,18 +185,18 @@ services:
     environment:
       GF_SECURITY_ADMIN_USER: ${GRAFANA_ADMIN_USER:-admin}
       GF_SECURITY_ADMIN_PASSWORD: ${GRAFANA_ADMIN_PASSWORD:-admin}
-      GF_USERS_ALLOW_SIGN_UP: "false"
+      GF_USERS_ALLOW_SIGN_UP: 'false'
     volumes:
       - ./docker/grafana/provisioning:/etc/grafana/provisioning:ro
       - grafana-data:/var/lib/grafana
     networks:
       - dd-internal
     expose:
-      - "3000"
+      - '3000'
     ports:
-      - "${GRAFANA_PORT:-3000}:3000"
+      - '${GRAFANA_PORT:-3000}:3000'
     healthcheck:
-      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1:3000/api/health"]
+      test: ['CMD', 'wget', '-q', '-O', '-', 'http://127.0.0.1:3000/api/health']
       interval: 15s
       timeout: 5s
       retries: 5

package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml

@@ -23,7 +23,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-backup
-              image: underpost/underpost-engine:v3.2.30
+              image: underpost/underpost-engine:v3.2.80
               command:
                 - /bin/sh
                 - -c

package/manifests/cronjobs/dd-cron/dd-cron-dns.yaml

@@ -23,7 +23,7 @@ spec:
         spec:
           containers:
             - name: dd-cron-dns
-              image: underpost/underpost-engine:v3.2.30
+              image: underpost/underpost-engine:v3.2.80
               command:
                 - /bin/sh
                 - -c

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: underpost/underpost-engine:v3.2.30
+          image: underpost/underpost-engine:v3.2.80
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -98,7 +98,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: underpost/underpost-engine:v3.2.30
+          image: underpost/underpost-engine:v3.2.80
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "underpost",
-    "version": "3.2.30",
+    "version": "3.2.80",
     "description": "Underpost Platform — end-to-end CI/CD and application-delivery toolchain CLI. Covers bare metal, Kubernetes, K3s, kubeadm, LXD, container/image orchestration, secrets, databases, cron jobs, monitoring, SSH, runners, PWA + Workbox delivery, and release orchestration. Extensible via downstream CLIs.",
     "scripts": {
         "start": "node --max-old-space-size=8192 src/server",
@@ -71,14 +71,14 @@
     },
     "homepage": "https://github.com/underpostnet/pwa-microservices-template#readme",
     "dependencies": {
-        "@fortawesome/fontawesome-free": "^7.2.0",
-        "@fullcalendar/rrule": "^6.1.21",
+        "@fortawesome/fontawesome-free": "^7.3.1",
+        "@fullcalendar/rrule": "^7.0.1",
         "@grpc/grpc-js": "^1.14.4",
         "@grpc/proto-loader": "^0.8.1",
         "@neodrag/vanilla": "^2.3.1",
-        "adm-zip": "^0.5.17",
-        "ag-grid-community": "^35.3.1",
-        "axios": "^1.18.0",
+        "adm-zip": "^0.6.0",
+        "ag-grid-community": "^36.0.1",
+        "axios": "^1.18.1",
         "bumpp": "^11.1.0",
         "chai": "^6.2.2",
         "clipboardy": "^5.3.1",
@@ -96,25 +96,25 @@
         "escape-string-regexp": "^5.0.0",
         "express": "^5.2.1",
         "express-fileupload": "^1.4.3",
-        "express-rate-limit": "^8.5.2",
+        "express-rate-limit": "^8.6.0",
         "express-slow-down": "^3.1.0",
         "fast-json-stable-stringify": "^2.1.0",
         "favicons": "^7.3.0",
-        "fs-extra": "^11.3.5",
-        "fullcalendar": "^6.1.21",
-        "helmet": "^8.2.0",
+        "fs-extra": "^11.3.6",
+        "fullcalendar": "^7.0.1",
+        "helmet": "^8.3.0",
         "html-minifier-terser": "^7.2.0",
-        "http-proxy-middleware": "^4.1.1",
+        "http-proxy-middleware": "^4.2.0",
         "ignore-walk": "^9.0.0",
         "iovalkey": "^0.3.3",
         "json-colorizer": "^3.0.1",
         "jsonwebtoken": "^9.0.3",
         "mariadb": "^3.5.3",
-        "marked": "^18.0.5",
+        "marked": "^18.0.6",
         "mocha": "^11.7.6",
-        "mongoose": "^9.7.1",
+        "mongoose": "^9.7.4",
         "morgan": "^1.11.0",
-        "nodemailer": "^9.0.0",
+        "nodemailer": "^9.0.3",
         "nodemon": "^3.0.1",
         "peer": "^1.0.2",
         "peerjs": "^1.5.5",
@@ -128,7 +128,7 @@
         "split-file": "^2.3.0",
         "swagger-autogen": "^2.23.7",
         "swagger-ui-express": "^5.0.0",
-        "typedoc": "^0.28.19",
+        "typedoc": "^0.28.20",
         "typescript": "^6.0.3",
         "validator": "^13.15.35",
         "vanilla-jsoneditor": "^3.12.0",