Release: 4 features, 4 fixes, 1 chore → Main by github-actions[bot] · Pull Request #8001 · KBVE/kbve

github-actions · 2026-03-15T06:45:52Z

Release: Dev → Main

9 atomic commits ready for main

Features

feat(bevy_mapdb): add proto-driven map definitions crate (feat(bevy_mapdb): add proto-driven map definitions crate #8003) (f23a15e)
feat(astro-kbve): add npcdb content collection and API endpoint (feat(astro-kbve): add npcdb content collection and API endpoint #8005) (b5cd064)
feat(bevy_quests): add proto-driven quest definitions crate (feat(bevy_quests): add proto-driven quest definitions crate #8004) (b72c204)
feat(npcdb): populate npcdb with 23 discordsh dungeon NPCs (feat(npcdb): populate npcdb with 23 discordsh dungeon NPCs #8008) (5823c75)

Bug Fixes

fix(axum-kbve): force HTTP/1.1 on ArgoCD proxy to prevent ALPN h2 hang (fix(axum-kbve): force HTTP/1.1 on ArgoCD proxy to prevent ALPN h2 hang #8000) (04cdce1)
fix(kube): move hardcoded MC RCON password to SealedSecret (fix(kube): move hardcoded MC RCON password to SealedSecret #8006) (e15fca0)
fix(mc): upgrade alpine packages to resolve CVE-2026-22184 zlib vulnerability (fix(mc): patch CVE-2026-22184 zlib vulnerability in mc-rust-base #8007) (cd4cd9d)
fix(ci): bump actions to Node 24 and add rustup toolchain guard to MC Dockerfiles (fix(ci): bump Node 20 actions and guard MC Rust toolchain #8009) (e0e3104)

Chores

chore(astro-kbve): weekly nx report and graph 2026-03-15 (chore(astro-kbve): weekly nx report 2026-03-15 #8002) (a679003)

This PR is automatically maintained by CI — KBVE Studio

#8000) rustls negotiates HTTP/2 via ALPN with ArgoCD, which routes the connection to its gRPC handler instead of the REST API. The proxy sends HTTP/1.1 requests, causing the connection to stall silently.

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

github-actions · 2026-03-15T06:51:54Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 9 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/utils-self-hosted-job.yml

Package	Version	License	Issue Type
docker/setup-qemu-action	4..	Null	Unknown License

packages/rust/bevy/bevy_mapdb/Cargo.toml

Package	Version	License	Issue Type
bevy	>= 0.18.0, < 0.19.0	Null	Unknown License
prost	>= 0.14.0, < 0.15.0	Null	Unknown License
serde	>= 1.0.0, < 2.0.0	Null	Unknown License
serde_json	>= 1.0.0, < 2.0.0	Null	Unknown License

packages/rust/bevy/bevy_quests/Cargo.toml

Package	Version	License	Issue Type
bevy	>= 0.18.0, < 0.19.0	Null	Unknown License
prost	>= 0.14.0, < 0.15.0	Null	Unknown License
serde	>= 1.0.0, < 2.0.0	Null	Unknown License
serde_json	>= 1.0.0, < 2.0.0	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

actions/docker/setup-qemu-action

4.*.*

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 10	all changesets reviewed
Security-Policy	🟢 9	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

cargo/bevy

>= 0.18.0, < 0.19.0

Unknown

cargo/prost

>= 0.14.0, < 0.15.0

Unknown

cargo/prost-build

>= 0.14.0, < 0.15.0

Unknown

cargo/serde

>= 1.0.0, < 2.0.0

Unknown

cargo/serde_json

>= 1.0.0, < 2.0.0

Unknown

cargo/bevy

>= 0.18.0, < 0.19.0

Unknown

cargo/prost

>= 0.14.0, < 0.15.0

Unknown

cargo/prost-build

>= 0.14.0, < 0.15.0

Unknown

cargo/serde

>= 1.0.0, < 2.0.0

Unknown

cargo/serde_json

>= 1.0.0, < 2.0.0

Unknown

Scanned Files

.github/workflows/utils-self-hosted-job.yml
packages/rust/bevy/bevy_mapdb/Cargo.toml
packages/rust/bevy/bevy_quests/Cargo.toml

New bevy_mapdb package compiling mapdb.proto into typed Rust structs via prost. MapDb registry indexes zones, regions, and world object definitions with O(1) lookups by slug/ULID plus filtered queries by biome, zone type, and object type. Supports from_bytes, from_json, and from_proto loading.

Wire up the Astro side for NPC data so human-edited MDX entries are validated against the proto-generated Zod schema and served as JSON at /api/npcdb.json for the Bevy client.

- Create SealedSecret for mc-rcon-secret in mc namespace - Add RBAC (Role/RoleBinding) scoped to mc-rcon-secret only - Add SecretStore + ExternalSecret to sync password into kbve namespace - Replace hardcoded MC_RCON_PASSWORD env var with secretKeyRef - Add seal-rcon-password.sh for regenerating the sealed secret

New bevy_quests crate compiling questdb.proto into typed Rust structs via prost with a searchable QuestDb Bevy resource. Supports loading from proto binary or Astro /api/questdb.json with automatic string- to-enum conversion. Provides lookups by slug, ULID, category, tag, NPC giver, and zone.

…rability (#8007)

Port all enemy NPCs from the DiscordSH dungeon crawler into the Astro npcdb content collection with full stats, behavior traits, lore, and proper schema-validated frontmatter.

… Dockerfiles (#8009)

fix(axum-kbve): force HTTP/1.1 on ArgoCD proxy to prevent ALPN h2 hang (

04cdce1

#8000) rustls negotiates HTTP/2 via ALPN with ArgoCD, which routes the connection to its gRPC handler instead of the REST API. The proxy sends HTTP/1.1 requests, causing the connection to stall silently.

github-actions bot added auto-pr dev→main labels Mar 15, 2026

github-project-automation bot added this to KBVE Mar 15, 2026

github-project-automation bot moved this to Review in KBVE Mar 15, 2026

chore(astro-kbve): weekly nx report and graph 2026-03-15 (#8002)

a679003

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

github-actions bot changed the title ~~Release: 1 fix → Main~~ Release: 1 fix, 1 chore → Main Mar 15, 2026

github-actions bot changed the title ~~Release: 1 fix, 1 chore → Main~~ Release: 1 feature, 1 fix, 1 chore → Main Mar 15, 2026

h0lybyte added 2 commits March 15, 2026 03:12

feat(astro-kbve): add npcdb content collection and API endpoint (#8005)

b5cd064

Wire up the Astro side for NPC data so human-edited MDX entries are validated against the proto-generated Zod schema and served as JSON at /api/npcdb.json for the Bevy client.

github-actions bot changed the title ~~Release: 1 feature, 1 fix, 1 chore → Main~~ Release: 2 features, 2 fixes, 1 chore → Main Mar 15, 2026

github-actions bot changed the title ~~Release: 2 features, 2 fixes, 1 chore → Main~~ Release: 3 features, 2 fixes, 1 chore → Main Mar 15, 2026

fix(mc): upgrade alpine packages to resolve CVE-2026-22184 zlib vulne…

cd4cd9d

…rability (#8007)

github-actions bot changed the title ~~Release: 3 features, 2 fixes, 1 chore → Main~~ Release: 3 features, 3 fixes, 1 chore → Main Mar 15, 2026

feat(npcdb): populate npcdb with 23 discordsh dungeon NPCs (#8008)

5823c75

Port all enemy NPCs from the DiscordSH dungeon crawler into the Astro npcdb content collection with full stats, behavior traits, lore, and proper schema-validated frontmatter.

github-actions bot changed the title ~~Release: 3 features, 3 fixes, 1 chore → Main~~ Release: 4 features, 3 fixes, 1 chore → Main Mar 15, 2026

fix(ci): bump actions to Node 24 and add rustup toolchain guard to MC…

e0e3104

… Dockerfiles (#8009)

h0lybyte self-requested a review as a code owner March 15, 2026 07:34

github-actions bot changed the title ~~Release: 4 features, 3 fixes, 1 chore → Main~~ Release: 4 features, 4 fixes, 1 chore → Main Mar 15, 2026

chore(kbve): minor version bump.

e32f96a

h0lybyte merged commit 5db6e82 into main Mar 15, 2026
11 checks passed

github-project-automation bot moved this from Review to Done in KBVE Mar 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release: 4 features, 4 fixes, 1 chore → Main#8001

Release: 4 features, 4 fixes, 1 chore → Main#8001
h0lybyte merged 10 commits intomainfrom
dev

github-actions bot commented Mar 15, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Mar 15, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

github-actions bot commented Mar 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release: Dev → Main

Features

Bug Fixes

Chores

Uh oh!

github-actions bot commented Mar 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

License Issues

.github/workflows/utils-self-hosted-job.yml

packages/rust/bevy/bevy_mapdb/Cargo.toml

packages/rust/bevy/bevy_quests/Cargo.toml

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions bot commented Mar 15, 2026 •

edited

Loading

github-actions bot commented Mar 15, 2026 •

edited

Loading