chore: bump the dependencies-major group with 3 updates

.changeset/NOTES.txt

@@ -0,0 +1,10 @@
+# Ignore Configuration
+
+devbox-docs: Documentation site, not published to npm
+
+# Note on devbox-shared:
+# - devbox-shared is an internal private package (private: true) and will not be published to npm
+# - It cannot be in the ignore list because devbox-sdk depends on it (changesets validation rule)
+# - It is linked with devbox-sdk to share version numbers
+# - The private: true flag ensures it will never be published, even though it's not ignored
+

.changeset/config.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://unpkg.com/@changesets/[email protected]/schema.json",
+  "changelog": [
+    "@changesets/changelog-github",
+    {
+      "repo": "zjy365/devbox-sdk"
+    }
+  ],
+  "commit": false,
+  "fixed": [],
+  "linked": [
+    [
+      "devbox-sdk",
+      "devbox-shared"
+    ]
+  ],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [
+    "devbox-docs"
+  ]
+}

.dockerignore

@@ -0,0 +1,44 @@
+# Git
+.git
+.gitignore
+
+# Dependencies
+node_modules
+**/node_modules
+
+# Build outputs
+.next
+**/.next
+dist
+**/dist
+build
+**/build
+
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Environment
+.env
+.env*.local
+
+# IDE
+.vscode
+.idea
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Testing
+coverage
+**/.coverage
+
+# Misc
+.vercel
+*.tsbuildinfo
+

.env.template

@@ -0,0 +1,2 @@
+KUBECONFIG=
+LOG_LEVEL=INFO # Supports: INFO, WARN, ERROR

.github/dependabot.yml

@@ -1,43 +1,46 @@
-version: 2
-updates:
-  - package-ecosystem: "github-actions"
-    directory: ".github/workflows"
-    schedule:
-      interval: "monthly"
-    commit-message:
-      # Prefix all commit messages with "chore: "
-      prefix: "chore"
-    open-pull-requests-limit: 10
+# Temporarily disable Dependabot auto-update dependency feature
+# To re-enable, uncomment the following
 
-  - package-ecosystem: "npm"
-    directory: "/"
-    commit-message:
-      # Prefix all commit messages with "chore: "
-      prefix: "chore"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 10
-    # Use the 'dependencies' default label and add
-    # the 'automerge' one for automerge github action support
-    labels:
-      - "dependencies"
-      - "automerge"
-    groups:
-      # Production dependencies without breaking changes
-      dependencies:
-        dependency-type: "production"
-        update-types:
-        - "minor"
-        - "patch"
-      # Production dependencies with breaking changes
-      dependencies-major:
-        dependency-type: "production"
-        update-types:
-        - "major"
-      # Development dependencies
-      dev-dependencies:
-        dependency-type: "development"
-    # example for ignoring dependencies:
-    # ignore:
-    #   - dependency-name: tap
-    #     update-types: ["version-update:semver-major"]
+# version: 2
+# updates:
+#   - package-ecosystem: "github-actions"
+#     directory: ".github/workflows"
+#     schedule:
+#       interval: "monthly"
+#     commit-message:
+#       # Prefix all commit messages with "chore: "
+#       prefix: "chore"
+#     open-pull-requests-limit: 10
+#
+#   - package-ecosystem: "npm"
+#     directory: "/"
+#     commit-message:
+#       # Prefix all commit messages with "chore: "
+#       prefix: "chore"
+#     schedule:
+#       interval: "weekly"
+#     open-pull-requests-limit: 10
+#     # Use the 'dependencies' default label and add
+#     # the 'automerge' one for automerge github action support
+#     labels:
+#       - "dependencies"
+#       - "automerge"
+#     groups:
+#       # Production dependencies without breaking changes
+#       dependencies:
+#         dependency-type: "production"
+#         update-types:
+#         - "minor"
+#         - "patch"
+#       # Production dependencies with breaking changes
+#       dependencies-major:
+#         dependency-type: "production"
+#         update-types:
+#         - "major"
+#       # Development dependencies
+#       dev-dependencies:
+#         dependency-type: "development"
+#     # example for ignoring dependencies:
+#     # ignore:
+#     #   - dependency-name: tap
+#     #     update-types: ["version-update:semver-major"]

.github/workflows/build-server-go.yml

@@ -0,0 +1,37 @@
+name: build-server-go
+
+# Manually trigger build of server-go binary
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build server-go (linux/${{ matrix.goarch }})
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        goarch: [amd64, arm64]
+        go-version: ['1.25.x']
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go-version }}
+          cache: true
+
+      - name: Build binary via Makefile
+        working-directory: packages/server-go
+        run: |
+          make clean
+          make build BUILD_ENV="CGO_ENABLED=0 GOOS=linux GOARCH=${{ matrix.goarch }}"
+
+      - name: Upload binary artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: devbox-server-linux-${{ matrix.goarch }}
+          path: packages/server-go/build/devbox-server
+          if-no-files-found: error
+          retention-days: 7

.github/workflows/ci.yml

@@ -1,6 +1,11 @@
 name: CI
 
-on: [push, pull_request]
+on:
+  pull_request:
+    branches: [main, master]
+  push:
+    branches: [main, master]
+  workflow_dispatch:
 
 jobs:
   test:
@@ -12,38 +17,42 @@ jobs:
     runs-on: ${{matrix.platform}}
     steps:
       - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.0
       - uses: actions/setup-node@v4
         with:
           node-version: ${{matrix.node}}
+          cache: 'pnpm'
       - name: install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: lint code
-        run: npm run lint
+        run: pnpm run lint
+      - name: typecheck
+        run: pnpm run typecheck
       - name: build project
-        run: npm run build
-      - name: run tests
-        run: npm run test
-      - name: coverage
-        uses: codecov/codecov-action@v4
-        if: github.actor != 'dependabot[bot]'
-        with:
-          fail_ci_if_error: true
-          verbose: false
-          token: ${{ secrets.CODECOV_TOKEN }}
-        env:
-          CI: true
+        run: pnpm run build
 
   release-preview:
     runs-on: ubuntu-latest
     needs: test
+    if: github.event_name == 'pull_request'
     steps:
       - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.0
       - uses: actions/setup-node@v4
         with:
-          node-version: "22.x"
+          node-version: '22.x'
+          cache: 'pnpm'
       - name: install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: build project
-        run: npm run build
-      - name: release preview with pkr-pr-new
-        run: npx pkg-pr-new publish
+        run: pnpm run build
+      - name: release preview with pkg-pr-new
+        working-directory: packages/sdk
+        run: pnpm dlx pkg-pr-new publish
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+

.github/workflows/labeler.yml

@@ -9,4 +9,4 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@v5
+    - uses: actions/labeler@v6

.github/workflows/links-checker-schedule.yml

@@ -21,7 +21,7 @@ jobs:
 
       - name: Create Issue From File
         if: env.lychee_exit_code != 0
-        uses: peter-evans/create-issue-from-file@24452a72d85239eacf1468b0f1982a9f3fec4c94 # v5.0.0
+        uses: peter-evans/create-issue-from-file@fca9117c27cdc29c6c4db3b86c48e4115a786710 # v6.0.0
         with:
           title: Link Checker Report
           content-filepath: ./lychee/out.md

.github/workflows/lock-threads.yml

@@ -14,7 +14,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           close-issue-message: |
             This issue has not seen any activity since it was marked stale.

.github/workflows/release.yml

@@ -2,8 +2,8 @@ name: release
 
 on:
   push:
-    branches:
-      - main
+    branches: [main, master]
+  workflow_dispatch:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
@@ -19,18 +19,22 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.0
       - uses: actions/setup-node@v4
         with:
-          node-version: 20.x
+          node-version: 22.x
+          cache: 'pnpm'
       - name: install dependencies
-        run: npm ci
+        run: pnpm install --frozen-lockfile
       - name: build project
-        run: npm run build
+        run: pnpm run build
       - name: Create Release Pull Request or Publish to npm
         uses: changesets/action@v1
         with:
-          publish: npm run release
-          version: npm run version
+          publish: pnpm run release
+          version: pnpm run version
           commit: "chore: new release"
           title: "chore: new release candidate"
         env: