You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Multi-arch Docker images (linux/amd64 + linux/arm64) built and pushed to GHCR on every vX.Y.Z tag, tagged latest / major / minor / exact
GitHub Release created automatically with notes pulled from this CHANGELOG
Hardened: every action pinned to a commit SHA, workflow_dispatch inputs passed via env vars, per-job least-privilege permissions, strict semver + package.json + CHANGELOG validation guards
No npm publish and no stored NPM_TOKEN — the pipeline uses only the per-run, auto-expiring GITHUB_TOKEN. npm publishing stays manual and passkey-gated.
docker-compose.yml for self-hosters (n8n etc.) to run the server in HTTP mode in one command. Note: the compose HTTP endpoint is unauthenticated — intended for LAN / behind a reverse proxy only. Addresses the public-image request in #5.