mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-20 05:42:19 +03:00
The runner-base stage COPY'd the standalone build as root and then ran `RUN chown -R node:node /app`. On overlayfs a chown rewrites every file it touches into the new layer, so the published image carried the ~2 GB standalone tree twice (docker history of diegosouzapw/omniroute:latest: `COPY /app/.build/next/standalone ./` 2.03 GB followed by `RUN chown -R node:node /app` 2.04 GB). Set `--chown=node:node` on the three COPYs that populate /app, drop the recursive chown, and hand /app and /app/data to node non-recursively next to the `mkdir -p /app/data` so the data dir stays writable without a volume. Measured by rebuilding the runner-base COPY/chown sequence against the published /app tree (root-owned source, same base image, linux/arm64): before: 4.38 GB of layers (COPY 2.04 GB + chown -R 2.04 GB), inspect Size 1220846106 after: 2.34 GB of layers (COPY --chown 2.04 GB), inspect Size 655117142 The fixed image runs as uid 1000, /app and /app/data are node-owned and writable, the server boots and healthcheck.mjs exits 0. hadolint output is unchanged. tests/unit/dockerfile-copy-chown-13990.test.ts guards the mechanism. Fixes #13990 Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>
changelog.d/ — changelog fragments
A PR never edits CHANGELOG.md directly during the cycle. Instead it adds ONE new
file here — its changelog entry as a fragment. Two PRs never touch the same file, so
changelog merge conflicts (the "CHANGELOG-eat" cascade that forced a re-sync push + full
CI re-run after every sibling merge) are structurally impossible.
Convention
| Directory | Aggregates under |
|---|---|
features/ |
### ✨ New Features |
fixes/ |
### 🐛 Bug Fixes |
maintenance/ |
### 📝 Maintenance |
- Filename:
<PR-number>-<short-slug>.md(e.g.fixes/6700-dockerfile-better-sqlite3.md). The PR number prefix keeps aggregation order deterministic. - Content: the exact bullet line(s) that should land in
CHANGELOG.md, starting with-. Multi-line (continuation) bullets are fine. Keep the repo's credit format:(#PR — thanks @user). - One fragment per PR (rarely more, e.g. a PR that both fixes and adds).
Example
changelog.d/fixes/6496-cloudflare-relay-worker-syntax.md:
- **fix(providers):** Cloudflare relay Worker deploys use Service Worker syntax with `body_part` metadata ([#6496](https://github.com/diegosouzapw/OmniRoute/pull/6496)) — thanks @SeaXen
Aggregation
The release captain (or /generate-release) folds all fragments into CHANGELOG.md and
deletes them:
node scripts/release/aggregate-changelog.mjs # write + delete fragments
node scripts/release/aggregate-changelog.mjs --dry-run # preview only
Fragment well-formedness is enforced by npm run check:changelog-integrity (the same
gate that guards against CHANGELOG-eat for legacy direct edits).