feat: update application versioning and enhance release management

- Bumped application version to 1.0.0 across all relevant package files, ensuring consistency in versioning.
- Introduced new environment variables for application version and release URL in Dockerfiles, improving deployment transparency.
- Enhanced the health check endpoint to return the current application version, providing better visibility for monitoring.
- Updated CI/CD workflows to include steps for preparing and publishing releases, streamlining the release process.
- Added a new "Releases" section in the application sidebar for easier access to version information.

.gitea/workflows/docker.yml

@@ -8,9 +8,45 @@ on:
 
 env:
   REGISTRY: git.shts.su
+  GITEA_SERVER_URL: https://git.shts.su
 
 jobs:
+  prepare-release:
+    runs-on: ubuntu-latest
+    outputs:
+      should_release: ${{ steps.release.outputs.should_release }}
+      version: ${{ steps.release.outputs.version }}
+      tag: ${{ steps.release.outputs.tag }}
+      bump: ${{ steps.release.outputs.bump }}
+      release_url: ${{ steps.release.outputs.release_url }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Compute release metadata
+        id: release
+        shell: bash
+        env:
+          GITEA_REPOSITORY: ${{ gitea.repository }}
+          GITEA_SERVER_URL: ${{ env.GITEA_SERVER_URL }}
+          BASE_VERSION: "1.0.0"
+          RELEASE_OUTPUT_DIR: .ci/release
+        run: node .ci/scripts/compute-release.mjs
+
+      - name: Upload release artifacts
+        if: steps.release.outputs.should_release == 'true'
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-artifacts
+          path: |
+            .ci/release/release_notes.md
+            .ci/release/release-manifest.json
+
   backend-image:
+    needs: prepare-release
+    if: needs.prepare-release.outputs.should_release == 'true'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -58,24 +94,35 @@ jobs:
           file: backend/Dockerfile
           platforms: linux/amd64
           push: true
+          build-args: |
+            APP_VERSION=${{ needs.prepare-release.outputs.version }}
           tags: |
             ${{ env.IMAGE_NAME }}:latest
             ${{ env.IMAGE_NAME }}:${{ gitea.sha }}
+            ${{ env.IMAGE_NAME }}:${{ needs.prepare-release.outputs.version }}
           cache-from: type=gha,scope=backend
           cache-to: type=gha,mode=max,scope=backend
           labels: |
             org.opencontainers.image.title=mmapp-backend
             org.opencontainers.image.description=MikroTik Manager backend (Fastify)
-            org.opencontainers.image.version=latest
+            org.opencontainers.image.version=${{ needs.prepare-release.outputs.version }}
             org.opencontainers.image.revision=${{ gitea.sha }}
             org.opencontainers.image.created=${{ gitea.event.head_commit.timestamp }}
 
   frontend-image:
+    needs: prepare-release
+    if: needs.prepare-release.outputs.should_release == 'true'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Download release artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: release-artifacts
+          path: .ci/release
+
       - name: Configure frontend image name
         shell: bash
         run: |
@@ -91,7 +138,7 @@ jobs:
           set -euo pipefail
           STAGING=".ci/docker/frontend"
           rm -rf "$STAGING"
-          mkdir -p "$STAGING/packages/contracts"
+          mkdir -p "$STAGING/packages/contracts" "$STAGING/public"
           cp package-lock.json next.config.ts tsconfig.json postcss.config.mjs eslint.config.mjs components.json "$STAGING/"
           node <<'NODE'
           const fs = require("node:fs")
@@ -106,7 +153,7 @@ jobs:
               cp -R "$dir" "$STAGING/"
             fi
           done
-          mkdir -p "$STAGING/public"
+          cp .ci/release/release-manifest.json "$STAGING/public/release-manifest.json"
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -130,19 +177,24 @@ jobs:
             NEXT_PUBLIC_BACKEND_URL=same-origin
             NEXT_PUBLIC_DEFAULT_DATA_SOURCE=live
             NEXT_PUBLIC_ALLOW_MOCK_DATA=false
+            NEXT_PUBLIC_APP_VERSION=${{ needs.prepare-release.outputs.version }}
+            NEXT_PUBLIC_RELEASE_URL=${{ needs.prepare-release.outputs.release_url }}
           tags: |
             ${{ env.IMAGE_NAME }}:latest
             ${{ env.IMAGE_NAME }}:${{ gitea.sha }}
+            ${{ env.IMAGE_NAME }}:${{ needs.prepare-release.outputs.version }}
           cache-from: type=gha,scope=frontend
           cache-to: type=gha,mode=max,scope=frontend
           labels: |
             org.opencontainers.image.title=mmapp-frontend
             org.opencontainers.image.description=MikroTik Manager frontend (Next.js)
-            org.opencontainers.image.version=latest
+            org.opencontainers.image.version=${{ needs.prepare-release.outputs.version }}
             org.opencontainers.image.revision=${{ gitea.sha }}
             org.opencontainers.image.created=${{ gitea.event.head_commit.timestamp }}
 
   updater-image:
+    needs: prepare-release
+    if: needs.prepare-release.outputs.should_release == 'true'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -177,20 +229,103 @@ jobs:
           tags: |
             ${{ env.IMAGE_NAME }}:latest
             ${{ env.IMAGE_NAME }}:${{ gitea.sha }}
+            ${{ env.IMAGE_NAME }}:${{ needs.prepare-release.outputs.version }}
           cache-from: type=gha,scope=updater
           cache-to: type=gha,mode=max,scope=updater
           labels: |
             org.opencontainers.image.title=mmapp-updater
             org.opencontainers.image.description=MikroTik Manager autonomous Docker updater
-            org.opencontainers.image.version=latest
+            org.opencontainers.image.version=${{ needs.prepare-release.outputs.version }}
             org.opencontainers.image.revision=${{ gitea.sha }}
             org.opencontainers.image.created=${{ gitea.event.head_commit.timestamp }}
 
-  notify-webhook:
-    if: ${{ secrets.DEPLOY_WEBHOOK_URL != '' }}
+  publish-release:
     needs:
+      - prepare-release
       - backend-image
       - frontend-image
+      - updater-image
+    if: needs.prepare-release.outputs.should_release == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Download release artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: release-artifacts
+          path: .ci/release
+
+      - name: Configure git author
+        shell: bash
+        run: |
+          set -euo pipefail
+          git config user.name "gitea-actions[bot]"
+          git config user.email "gitea-actions[bot]@users.noreply.gitea"
+
+      - name: Create and push release tag
+        shell: bash
+        env:
+          TAG: ${{ needs.prepare-release.outputs.tag }}
+        run: |
+          set -euo pipefail
+          if git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "Tag $TAG already exists, skipping tag push"
+            exit 0
+          fi
+          git tag -a "$TAG" -m "Release $TAG"
+          git push origin "$TAG"
+
+      - name: Publish Gitea release
+        shell: bash
+        env:
+          TAG: ${{ needs.prepare-release.outputs.tag }}
+          VERSION: ${{ needs.prepare-release.outputs.version }}
+          REPOSITORY: ${{ gitea.repository }}
+          TOKEN: ${{ secrets.ACTIONS_PAT }}
+        run: |
+          set -euo pipefail
+          owner="${REPOSITORY%%/*}"
+          repo="${REPOSITORY#*/}"
+          payload=$(node <<'NODE'
+          const fs = require("node:fs")
+          const body = fs.readFileSync(".ci/release/release_notes.md", "utf8")
+          const payload = {
+            tag_name: process.env.TAG,
+            target_commitish: "main",
+            name: process.env.VERSION,
+            body,
+            draft: false,
+            prerelease: false,
+          }
+          process.stdout.write(JSON.stringify(payload))
+          NODE
+          )
+          status=$(curl --silent --show-error --output /tmp/gitea-release.json --write-out "%{http_code}" \
+            --request POST \
+            --header "Authorization: token ${TOKEN}" \
+            --header "Content-Type: application/json" \
+            --data "$payload" \
+            "${{ env.GITEA_SERVER_URL }}/api/v1/repos/${owner}/${repo}/releases")
+          if [ "$status" = "409" ] || [ "$status" = "422" ]; then
+            echo "Release for ${TAG} already exists (${status}), skipping"
+            exit 0
+          fi
+          if [ "$status" -lt 200 ] || [ "$status" -ge 300 ]; then
+            cat /tmp/gitea-release.json
+            exit 1
+          fi
+
+  notify-webhook:
+    if: ${{ secrets.DEPLOY_WEBHOOK_URL != '' && needs.prepare-release.outputs.should_release == 'true' }}
+    needs:
+      - prepare-release
+      - backend-image
+      - frontend-image
+      - publish-release
     runs-on: ubuntu-latest
     steps:
       - name: Notify deploy webhook
@@ -201,5 +336,5 @@ jobs:
           set -euo pipefail
           curl --fail --silent --show-error --request POST \
             --header "Content-Type: application/json" \
-            --data "{\"repository\":\"${{ gitea.repository }}\",\"sha\":\"${{ gitea.sha }}\",\"ref\":\"${{ gitea.ref }}\"}" \
+            --data "{\"repository\":\"${{ gitea.repository }}\",\"sha\":\"${{ gitea.sha }}\",\"ref\":\"${{ gitea.ref }}\",\"version\":\"${{ needs.prepare-release.outputs.version }}\",\"tag\":\"${{ needs.prepare-release.outputs.tag }}\",\"releaseUrl\":\"${{ needs.prepare-release.outputs.release_url }}\"}" \
             "$WEBHOOK_URL"