Files

T

Co-authored-by: Junie <junie@jetbrains.com>

2026-10-29 00:02:14 +01:00

Changelog

All notable project changes should be documented here.

This project follows Semantic Versioning. For more details, see docs/DEVELOPMENT.md.

Unreleased

CI/CD migrated to Drone — replaced Gitea Actions with Drone CI/CD (.drone.yml). The Docker plugin auto_tag feature automatically creates Semantic Versioning tags (0.3.0, 0.3) on Git tag pushes. Configure REGISTRY_USERNAME and REGISTRY_PASSWORD secrets in the Gitea repository settings.

CI/CD with Drone — automated Docker image build and push on Git tags using Drone CI/CD. Each release produces three tags: full version (0.2.0), minor version (0.2), and latest. Configure REGISTRY_USERNAME and REGISTRY_PASSWORD secrets in Gitea repository settings.
Docker build optimization — added .dockerignore to exclude unnecessary files from the build context, reducing build time and image size.
Release documentation — added detailed release process guide in docs/DEVELOPMENT.md with Semantic Versioning workflow.

Multi-stage Docker build — the Dockerfile now compiles both the Angular frontend and Spring Boot backend inside Docker using three stages (Node.js → Gradle → JRE). Build the entire application with a single docker build command — no local Java or Node.js required.
Security hardening — replaced full host root mount (/:/host/root:ro) with specific directory mounts (/proc, /sys, /etc/hostname, /etc/os-release, /var, /home, /opt, /tmp, /srv, /usr) to minimize the attack surface.
Host metrics consistency — LinuxMemoryService and CpuDetailsService now read host metrics from /host/proc instead of container metrics from OSHI.
Concurrency improvements — replaced synchronized methods with AtomicReference in SystemMetricsService, SystemProcessesService, and CpuDetailsService to eliminate lock contention.
Global error handling — added @RestControllerAdvice for structured JSON error responses.
Unit tests — added 32 tests covering /proc file parsers, CPU usage calculations, and process uptime logic.
Docker security — added non-root user (appuser), read-only filesystem, no-new-privileges, and healthcheck to the container.
Debug logging — added log.debug() calls in silent catch blocks across all services.
Documentation structure established.