Release version 1.1.0

Updated mirrors
fix(ci): grant security-events: write to lint job
2026-04-16 09:16:50 +00:00 · 2026-03-30 10:47:32 +02:00 · 2026-03-30 10:46:39 +02:00 · 2026-03-30 10:18:14 +02:00 · 2026-03-30 10:16:53 +02:00 · 2026-03-30 10:16:30 +02:00
14 changed files with 153 additions and 18 deletions
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,6 +15,10 @@ jobs:
  security:
    name: Run security workflow
    uses: ./.github/workflows/security.yml
+    permissions:
+      contents: read
+      packages: read
+      security-events: write

  tests:
    name: Run test workflow
@@ -23,6 +27,9 @@ jobs:
  lint:
    name: Run lint workflow
    uses: ./.github/workflows/lint.yml
+    permissions:
+      contents: read
+      security-events: write

  publish:
    name: Publish image
--- a/.gitignore
+++ b/.gitignore
@@ -5,6 +5,7 @@ app/static/cache/*
 app/cypress/screenshots/*
 .ruff_cache/
 app/node_modules/
+app/static/vendor/
 hadolint-results.sarif
 build/
 *.egg-info/
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -0,0 +1,13 @@
+# Agent Instructions
+
+## Pre-Commit Validation
+
+- You MUST run `make test` before every commit whenever the staged change includes at least one file that is not `.md` or `.rst`, unless explicitly instructed otherwise.
+- You MUST commit only after all tests pass.
+- You MUST NOT commit automatically without explicit confirmation from the user.
+
+## Vendor Assets
+
+- Browser vendor assets (Bootstrap, Font Awesome, etc.) are managed via npm.
+- Run `npm install` inside `app/` to populate `app/static/vendor/` before starting the dev server or running e2e tests.
+- Never commit `app/node_modules/` or `app/static/vendor/` — both are gitignored and generated at build time.
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,14 @@
+## [1.1.0] - 2026-03-30
+
+* *CI stabilization and modularization*: Split into reusable workflows (lint, security, tests) with correct permissions for CodeQL and SARIF uploads
+* *Modern Python packaging*: Migration to pyproject.toml and updated Dockerfile using Python 3.12
+* *Improved test coverage*: Added unit, integration, lint, security, and E2E tests using act
+* *Local vendor assets*: Replaced external CDNs with npm-based local asset pipeline
+* *Enhanced build workflow*: Extended Makefile with targets for test, lint, security, and CI plus vendor build process
+* *Frontend fix*: Prevented navbar wrapping and improved layout behavior
+* *Developer guidelines*: Introduced AGENTS.md and CLAUDE.md with enforced pre-commit rules
+
+
 ## [1.0.0] - 2026-02-19

 * Official Release🥳
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -0,0 +1,5 @@
+# CLAUDE.md
+
+## Startup
+
+You MUST read `AGENTS.md` and follow all instructions in it at the start of every conversation before doing anything else.
--- a/4
+++ b/4
@@ -4,6 +4,9 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    FLASK_HOST=0.0.0.0

+# hadolint ignore=DL3008
+RUN apt-get update && apt-get install -y --no-install-recommends nodejs npm && rm -rf /var/lib/apt/lists/*
+
 WORKDIR /tmp/build

 COPY pyproject.toml README.md main.py ./
@@ -12,5 +15,6 @@ RUN python -m pip install --no-cache-dir .

 WORKDIR /app
 COPY app/ .
+RUN npm install --prefix /app

 CMD ["python", "app.py"]
--- a/4
+++ b/4
@@ -1,2 +1,4 @@
-https://pypi.org/project/portfolio-ui/
 git@github.com:kevinveenbirkenbach/port-ui.git
+ssh://git@code.infinito.nexus:2201/kevinveenbirkenbach/port-ui.git
+ssh://git@git.veen.world:2201/kevinveenbirkenbach/port-ui.git
+
--- a/2
+++ b/2
@@ -145,7 +145,7 @@ security: install-dev test-security
 	$(PYTHON) -m pip_audit -r /tmp/portfolio-runtime-requirements.txt

 .PHONY: test-e2e
-test-e2e:
+test-e2e: npm-install
 	# Run Cypress end-to-end tests via act (stop portfolio container to free port first).
 	-docker stop portfolio 2>/dev/null || true
 	$(ACT) workflow_dispatch -W .github/workflows/tests.yml -j e2e
--- a/README.md
+++ b/README.md
@@ -1,9 +1,6 @@
 # PortUI 🖥️✨

-[![GitHub Sponsors](https://img.shields.io/badge/Sponsor-GitHub%20Sponsors-blue?logo=github)](https://github.com/sponsors/kevinveenbirkenbach)  
-[![Patreon](https://img.shields.io/badge/Support-Patreon-orange?logo=patreon)](https://www.patreon.com/c/kevinveenbirkenbach)  
-[![Buy Me a Coffee](https://img.shields.io/badge/Buy%20me%20a%20Coffee-Funding-yellow?logo=buymeacoffee)](https://buymeacoffee.com/kevinveenbirkenbach)  
-[![PayPal](https://img.shields.io/badge/Donate-PayPal-blue?logo=paypal)](https://s.veen.world/paypaldonate)
+[![GitHub Sponsors](https://img.shields.io/badge/Sponsor-GitHub%20Sponsors-blue?logo=github)](https://github.com/sponsors/kevinveenbirkenbach) [![Patreon](https://img.shields.io/badge/Support-Patreon-orange?logo=patreon)](https://www.patreon.com/c/kevinveenbirkenbach) [![Buy Me a Coffee](https://img.shields.io/badge/Buy%20me%20a%20Coffee-Funding-yellow?logo=buymeacoffee)](https://buymeacoffee.com/kevinveenbirkenbach) [![PayPal](https://img.shields.io/badge/Donate-PayPal-blue?logo=paypal)](https://s.veen.world/paypaldonate)

 A lightweight, Docker-powered portfolio/landing-page generator—fully customizable via YAML! Showcase your projects, skills, and online presence in minutes.  

--- a/app/package.json
+++ b/app/package.json
@@ -1,5 +1,16 @@
 {
+  "dependencies": {
+    "@fortawesome/fontawesome-free": "^6.7.2",
+    "bootstrap": "5.2.2",
+    "bootstrap-icons": "1.9.1",
+    "jquery": "3.6.0",
+    "marked": "^4.3.0"
+  },
  "devDependencies": {
    "cypress": "^14.5.1"
+  },
+  "scripts": {
+    "build": "node scripts/copy-vendor.js",
+    "postinstall": "node scripts/copy-vendor.js"
  }
 }
--- a/app/scripts/copy-vendor.js
+++ b/app/scripts/copy-vendor.js
@@ -0,0 +1,71 @@
+'use strict';
+/**
+ * Copies third-party browser assets from node_modules into static/vendor/
+ * so Flask can serve them without any CDN dependency.
+ * Runs automatically via the "postinstall" npm hook.
+ */
+const fs   = require('fs');
+const path = require('path');
+
+const NM     = path.join(__dirname, '..', 'node_modules');
+const VENDOR = path.join(__dirname, '..', 'static', 'vendor');
+
+function copyFile(src, dest) {
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.copyFileSync(src, dest);
+}
+
+function copyDir(src, dest) {
+  fs.mkdirSync(dest, { recursive: true });
+  for (const entry of fs.readdirSync(src, { withFileTypes: true })) {
+    const s = path.join(src, entry.name);
+    const d = path.join(dest, entry.name);
+    entry.isDirectory() ? copyDir(s, d) : fs.copyFileSync(s, d);
+  }
+}
+
+// Bootstrap CSS + JS bundle
+copyFile(
+  path.join(NM, 'bootstrap', 'dist', 'css', 'bootstrap.min.css'),
+  path.join(VENDOR, 'bootstrap', 'css', 'bootstrap.min.css')
+);
+copyFile(
+  path.join(NM, 'bootstrap', 'dist', 'js', 'bootstrap.bundle.min.js'),
+  path.join(VENDOR, 'bootstrap', 'js', 'bootstrap.bundle.min.js')
+);
+
+// Bootstrap Icons CSS + embedded fonts
+copyFile(
+  path.join(NM, 'bootstrap-icons', 'font', 'bootstrap-icons.css'),
+  path.join(VENDOR, 'bootstrap-icons', 'font', 'bootstrap-icons.css')
+);
+copyDir(
+  path.join(NM, 'bootstrap-icons', 'font', 'fonts'),
+  path.join(VENDOR, 'bootstrap-icons', 'font', 'fonts')
+);
+
+// Font Awesome Free CSS + webfonts
+copyFile(
+  path.join(NM, '@fortawesome', 'fontawesome-free', 'css', 'all.min.css'),
+  path.join(VENDOR, 'fontawesome', 'css', 'all.min.css')
+);
+copyDir(
+  path.join(NM, '@fortawesome', 'fontawesome-free', 'webfonts'),
+  path.join(VENDOR, 'fontawesome', 'webfonts')
+);
+
+// marked – browser UMD build (path varies by version)
+const markedCandidates = [
+  path.join(NM, 'marked', 'marked.min.js'),              // v4.x
+  path.join(NM, 'marked', 'lib', 'marked.umd.min.js'),   // v5.x
+  path.join(NM, 'marked', 'dist', 'marked.min.js'),      // v9+
+];
+const markedSrc = markedCandidates.find(p => fs.existsSync(p));
+if (!markedSrc) throw new Error('marked: no browser UMD build found in node_modules');
+copyFile(markedSrc, path.join(VENDOR, 'marked', 'marked.min.js'));
+
+// jQuery
+copyFile(
+  path.join(NM, 'jquery', 'dist', 'jquery.min.js'),
+  path.join(VENDOR, 'jquery', 'jquery.min.js')
+);
--- a/app/static/css/default.css
+++ b/app/static/css/default.css
@@ -111,6 +111,19 @@ div#navbarNavfooter li.nav-item {
  margin-right: 6px;
 }

+/* Prevent nav items from wrapping to a second line */
+div#navbarNavheader .navbar-nav,
+div#navbarNavfooter .navbar-nav {
+  flex-wrap: nowrap;
+  overflow-x: auto;
+  scrollbar-width: none; /* Firefox */
+}
+
+div#navbarNavheader .navbar-nav::-webkit-scrollbar,
+div#navbarNavfooter .navbar-nav::-webkit-scrollbar {
+  display: none; /* Chrome/Safari */
+}
+
 main, footer, header, nav {
  position: relative;
  box-shadow: 
@@ -168,13 +181,16 @@ iframe{
 }

 #navbar_logo {
-  /* start invisible but in the layout (d-none will actually hide it) */
  opacity: 0;
-  transition: opacity var(--anim-duration) ease-in-out;
+  max-width: 0;
+  overflow: hidden;
+  transition: opacity var(--anim-duration) ease-in-out,
+              max-width var(--anim-duration) ease-in-out;
 }

 #navbar_logo.visible {
  opacity: 1 !important;
+  max-width: 300px;
 }


--- a/app/templates/moduls/base.html.j2
+++ b/app/templates/moduls/base.html.j2
@@ -9,22 +9,19 @@
            href="{% if platform.favicon.cache %}{{ url_for('static', filename=platform.favicon.cache) }}{% endif %}"
        >
        <!-- Bootstrap CSS only -->
-        <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-Zenh87qX5JnK2Jl0vWa8Ck2rdkQ2Bzep5IDxbcnCeuOxjzrPF/et3URy9Bv1WTRi" crossorigin="anonymous">
+        <link href="{{ url_for('static', filename='vendor/bootstrap/css/bootstrap.min.css') }}" rel="stylesheet">
        <!-- Bootstrap JavaScript Bundle with Popper -->
-        <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.2.2/dist/js/bootstrap.bundle.min.js" integrity="sha384-OERcA2EqjJCMA+/3y+gxIOqMEjwtxJY7qPCqsdltbNJuaOe923+mo//f6V8Qbsw3" crossorigin="anonymous"></script>
+        <script src="{{ url_for('static', filename='vendor/bootstrap/js/bootstrap.bundle.min.js') }}"></script>
        <!-- Bootstrap Icons -->
-        <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.9.1/font/bootstrap-icons.css">
+        <link rel="stylesheet" href="{{ url_for('static', filename='vendor/bootstrap-icons/font/bootstrap-icons.css') }}">
        <!-- Fontawesome -->
-        <script src="https://kit.fontawesome.com/56f96da298.js" crossorigin="anonymous"></script>
+        <link rel="stylesheet" href="{{ url_for('static', filename='vendor/fontawesome/css/all.min.css') }}">
        <!-- Markdown -->
-        <script src="https://cdn.jsdelivr.net/npm/marked/marked.min.js"></script>
+        <script src="{{ url_for('static', filename='vendor/marked/marked.min.js') }}"></script>
        <link rel="stylesheet" href="{{ url_for('static', filename='css/default.css') }}">
        <link rel="stylesheet" href="{{ url_for('static', filename='css/custom_scrollbar.css') }}">
        <!-- JQuery -->
-        <script
-        src="https://code.jquery.com/jquery-3.6.0.min.js"
-        crossorigin="anonymous">
-        </script>
+        <script src="{{ url_for('static', filename='vendor/jquery/jquery.min.js') }}"></script>
    </head>
    <body
      {% if apod_bg %}
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"

 [project]
 name = "portfolio-ui"
-version = "0.0.0"
+version = "1.1.0"
 description = "A lightweight YAML-driven portfolio and landing-page generator."
 readme = "README.md"
 requires-python = ">=3.12"
Author	SHA1	Message	Date
Kevin Veen-Birkenbach	3132aab2a5	Release version 1.1.0	2026-03-30 10:47:32 +02:00
Kevin Veen-Birkenbach	3d1db1f8ba	Updated mirrors	2026-03-30 10:46:39 +02:00
Kevin Veen-Birkenbach	58872ced81	fix(ci): grant security-events: write to lint job The lint-docker job in lint.yml requires security-events: write for SARIF upload; must be explicitly granted to the caller job. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-30 10:18:14 +02:00
Kevin Veen-Birkenbach	13b3af3330	Entered and removed whitespaces in README.md	2026-03-30 10:16:53 +02:00
Kevin Veen-Birkenbach	eca7084f4e	fix(ci): grant security-events and packages permissions to security job Reusable workflow calls inherit only explicitly granted permissions. The nested security job requires packages: read and security-events: write for CodeQL analysis. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-30 10:16:30 +02:00
Kevin Veen-Birkenbach	6861b2c0eb	fix(nav): prevent navbar items from wrapping to second line - Set flex-wrap: nowrap on navbar-nav to keep all items in one row - Add hidden overflow-x scroll (no visible scrollbar) as fallback - Fix #navbar_logo taking up space when invisible via max-width transition Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-30 10:10:55 +02:00
Kevin Veen-Birkenbach	66b1f0d029	feat(agents): add AGENTS.md and CLAUDE.md with pre-commit rules - Add AGENTS.md: require make test before every non-doc commit and document the npm vendor asset workflow - Add CLAUDE.md: instruct agents to read AGENTS.md at conversation start - Add npm-install dependency to test-e2e Makefile target Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-30 09:59:09 +02:00
Kevin Veen-Birkenbach	a29a0b1862	feat(vendor): replace CDN dependencies with local npm packages Introduces a vendor build pipeline so all third-party browser assets (Bootstrap, Bootstrap Icons, Font Awesome, marked, jQuery) are served from local static files instead of external CDNs. - Add app/package.json with vendor deps and postinstall/build scripts - Add app/scripts/copy-vendor.js to copy assets to static/vendor/ - Update base.html.j2 to use url_for('static', ...) for all vendor assets - Update Dockerfile to install Node.js/npm and run npm install - Update .gitignore to exclude app/node_modules/ and app/static/vendor/ Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-30 09:29:28 +02:00