v0.0.1

.github/environments.json

@@ -0,0 +1,23 @@
+{
+    "Develop": {
+        "deployment_branch_policy": {
+            "protected_branches": false,
+            "custom_branch_policies": true
+        },
+        "reviewers": [],
+        "wait_timer": 0
+    },
+    "Production": {
+        "deployment_branch_policy": {
+            "protected_branches": false,
+            "custom_branch_policies": true
+        },
+        "reviewers": [],
+        "wait_timer": 0
+    },
+    "github-pages": {
+        "deployment_branch_policy": null,
+        "reviewers": [],
+        "wait_timer": 0
+    }
+}

.github/protection.json

@@ -1,4 +1,19 @@
 {
+    "develop": {
+        "allow_deletions": false,
+        "allow_force_pushes": false,
+        "enforce_admins": false,
+        "required_pull_request_reviews": {
+            "dismiss_stale_reviews": false,
+            "require_code_owner_reviews": false,
+            "required_approving_review_count": 1
+        },
+        "required_status_checks": {
+            "contexts": [],
+            "strict": true
+        },
+        "restrictions": null
+    },
     "main": {
         "allow_deletions": false,
         "allow_force_pushes": false,

.github/workflows/approve.yml

@@ -5,13 +5,19 @@ on:
     types:
       - opened
 
+permissions:
+  pull-requests: write
+
 jobs:
   approve:
     runs-on: ubuntu-latest
 
     if: endsWith(github.actor, '[bot]')
 
     steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
       - name: Approve
         run: gh pr review ${{ github.event.number }} --approve
         env:

.github/workflows/devcontainer.yml

@@ -32,18 +32,18 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Docker Meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: vscode
           tags: |
             latest
 
       - name: Build Image for VSCode
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: .devcontainer/Dockerfile

.github/workflows/docker.yml

@@ -34,18 +34,18 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Docker Meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: vscode
           tags: |
             latest
 
       - name: Build Image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: Dockerfile

.github/workflows/gh-deploy.yml

@@ -20,6 +20,8 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
 
+    environment: github-pages
+
     steps:
       - name: Checkout
         uses: actions/checkout@v6

.github/workflows/pr-agent.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: PR Agent Action Step
-        uses: qodo-ai/pr-agent@v0.31
+        uses: qodo-ai/pr-agent@v0.32
         env:
           CONFIG.CUSTOM_MODEL_MAX_TOKENS: 64000
           CONFIG.MODEL: "gemini/gemini-2.5-flash"

.github/workflows/publish-app.yml

@@ -3,7 +3,7 @@ name: Publish App to GHCR
 on:
   push:
     branches:
-      - main
+      - develop
     paths:
       - ".github/workflows/publish-app.yml"
       - ".python-version"
@@ -30,18 +30,18 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract Metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -61,7 +61,7 @@ jobs:
             org.opencontainers.image.licenses=MIT
 
       - name: Build and Push App Image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: Dockerfile

.github/workflows/publish-devcontainer.yml

@@ -3,7 +3,7 @@ name: Publish Devcontainer to GHCR
 on:
   push:
     branches:
-      - main
+      - develop
     paths:
       - ".devcontainer/Dockerfile"
       - ".github/workflows/publish-devcontainer.yml"
@@ -30,18 +30,18 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           password: ${{ secrets.GITHUB_TOKEN }}
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
 
       - name: Extract Metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -61,7 +61,7 @@ jobs:
             org.opencontainers.image.vendor=a5chin <a5chin.origin+contact@gmail.com>
 
       - name: Build and Push Devcontainer Image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: .devcontainer/Dockerfile

.github/workflows/release.yml

@@ -1,28 +1,57 @@
 name: Release
 
 on:
-  pull_request:
+  push:
     branches:
+      - develop
       - main
-    types:
-      - closed
 
 permissions:
   contents: write
   pull-requests: read
 
 jobs:
-  publish:
-    if: github.event.pull_request.merged == true && contains(github.head_ref, 'release/')
+  develop:
+    if: github.ref_name == 'develop'
 
     runs-on: ubuntu-latest
 
+    environment: Develop
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Update Draft Release
+        uses: release-drafter/release-drafter@v7
+        with:
+          config-name: release-drafter.yml
+          disable-autolabeler: true
+          publish: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  production:
+    if: github.ref_name == 'main'
+
+    runs-on: ubuntu-latest
+
+    environment: Production
+
     steps:
       - name: Checkout
         uses: actions/checkout@v6
 
+      - name: Get PR Title for Version
+        id: pr
+        run: |
+          PR_TITLE=$(gh pr list --search "${{ github.sha }}" --state merged --json title --jq '.[0].title')
+          echo "TITLE=$PR_TITLE" >> "$GITHUB_OUTPUT"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Publish Release
-        uses: release-drafter/release-drafter@v6
+        uses: release-drafter/release-drafter@v7
         with:
           config-name: release-drafter.yml
           disable-autolabeler: true
@@ -31,5 +60,5 @@ jobs:
           tag: ${{ env.VERSION }}
           version: ${{ env.VERSION }}
         env:
+          VERSION: ${{ steps.pr.outputs.TITLE }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          VERSION: ${{ github.event.pull_request.title }}