From e5941b5f50593343bbd68cce148479e82be37200 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 02:07:41 +0000 Subject: [PATCH 1/4] chore(deps): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yml | 4 ++-- .github/workflows/ci.yml | 10 +++++----- .github/workflows/crowdin-sync.yml | 6 +++--- .github/workflows/mirror-to-gitlab.yml | 2 +- .github/workflows/security.yml | 2 +- 5 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index c2795f69..3b48df27 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -21,7 +21,7 @@ jobs: working-directory: flutter-app steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Flutter uses: subosito/flutter-action@v2 @@ -129,7 +129,7 @@ jobs: packages: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Log in to GitHub Container Registry uses: docker/login-action@v4 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7804baae..01b323e8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -56,7 +56,7 @@ jobs: PODCASTINDEX_SECRET: "" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python 3.11 uses: actions/setup-python@v6 @@ -163,7 +163,7 @@ jobs: OPENAI_API_KEY: "" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python 3.11 uses: actions/setup-python@v6 @@ -205,7 +205,7 @@ jobs: working-directory: mcp-server steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python 3.11 uses: actions/setup-python@v6 @@ -241,7 +241,7 @@ jobs: working-directory: admin-service steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Node.js 24 uses: actions/setup-node@v6 @@ -271,7 +271,7 @@ jobs: working-directory: flutter-app steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Flutter uses: subosito/flutter-action@v2 diff --git a/.github/workflows/crowdin-sync.yml b/.github/workflows/crowdin-sync.yml index 616e09be..75f25548 100644 --- a/.github/workflows/crowdin-sync.yml +++ b/.github/workflows/crowdin-sync.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Upload to Crowdin uses: crowdin/github-action@v2 @@ -58,7 +58,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Download from Crowdin uses: crowdin/github-action@v2 @@ -105,7 +105,7 @@ jobs: # # steps: # - name: Checkout repository - # uses: actions/checkout@v6 + # uses: actions/checkout@v7 # # - name: Download from Crowdin # uses: crowdin/github-action@v2 diff --git a/.github/workflows/mirror-to-gitlab.yml b/.github/workflows/mirror-to-gitlab.yml index e1ee2766..ae92c2dd 100644 --- a/.github/workflows/mirror-to-gitlab.yml +++ b/.github/workflows/mirror-to-gitlab.yml @@ -10,7 +10,7 @@ jobs: mirror: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index f749dfc9..8226e553 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout full repository history - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6.0.3 with: fetch-depth: 0 persist-credentials: false From 339f888179e3a6bedea63ea5b25dede63aa2e3d3 Mon Sep 17 00:00:00 2001 From: Thang Nguyen Huu <2001230909@hufi.edu.vn> Date: Mon, 6 Jul 2026 18:53:36 +0700 Subject: [PATCH 2/4] fix: align checkout pin comment --- .github/workflows/security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 8226e553..64adf055 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout full repository history - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 persist-credentials: false From 58727acc6395129a5e823c3e427eab577d03aa46 Mon Sep 17 00:00:00 2001 From: Thang Nguyen Huu <2001230909@hufi.edu.vn> Date: Fri, 10 Jul 2026 15:21:24 +0700 Subject: [PATCH 3/4] fix(ci): consolidate pr agent config --- .pr_agent.toml | 21 ++++++++------------- 1 file changed, 8 insertions(+), 13 deletions(-) diff --git a/.pr_agent.toml b/.pr_agent.toml index 71badea5..5edf7a59 100644 --- a/.pr_agent.toml +++ b/.pr_agent.toml @@ -2,6 +2,14 @@ # Use Google Gemini API model = "google/gemini-2.5-pro" fallback_models = ["google/gemini-2.5-flash"] +git_provider = "github" +pr_commands = [ + "/review", + "/describe", + "/improve", + "/ask", + "/update_changelog", +] [pr_reviewer] # Enable/disable features @@ -58,20 +66,7 @@ extra_instructions = """ - Clarify implementation choices """ -[config] # Model configuration (uncomment to customize) # model = "gpt-4-turbo-preview" # model = "anthropic/claude-3-5-sonnet-20241022" # fallback_models = ["gpt-3.5-turbo"] - -# Git provider -git_provider = "github" - -# Review triggers -pr_commands = [ - "/review", - "/describe", - "/improve", - "/ask", - "/update_changelog", -] From 0edb7f55806a2321da0bbbacbd95c295f4562197 Mon Sep 17 00:00:00 2001 From: Thang Nguyen Huu <2001230909@hufi.edu.vn> Date: Fri, 10 Jul 2026 15:14:00 +0700 Subject: [PATCH 4/4] fix(security): load translation api keys from env --- .gitleaks.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitleaks.toml b/.gitleaks.toml index f23b4621..b2ea72c3 100644 --- a/.gitleaks.toml +++ b/.gitleaks.toml @@ -45,6 +45,7 @@ regexes = [ paths = [ '''(^|/)backend-service/QUICKSTART\.md$''', '''(^|/)docs/gateway/API_GATEWAY_FULL_POLICY_SETUP\.md$''', + '''(^|/)docs/operations/API_GATEWAY_FULL_POLICY_SETUP\.md$''', '''(^|/)gateway/kong/kong\.yml$''', ]