chore(release): 3.9.0 [skip ci]

# [3.9.0](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.8.0...3.9.0) (2026-03-13)

### Features

* copy package.json ([0bef13c](0bef13c414))

.gitea/workflows/release-image.yaml

@@ -8,44 +8,7 @@ on:
   workflow_dispatch:
 
 jobs:
-  semantic-release:
-    runs-on: ubuntu-js
-    outputs:
-      new-release-published: ${{ steps.semantic.outputs.new-release-published }}
-      new-release-version: ${{ steps.semantic.outputs.new-release-version }}
-      new-release-git-tag: ${{ steps.semantic.outputs.new-release-git-tag }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-          token: ${{ secrets.BOT_TOKEN }}
-
-      - name: Set up Node
-        uses: actions/setup-node@v6
-        with:
-          node-version: 24.14.0
-
-      - name: Set up Bun
-        uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: 1.3.10
-
-      - name: Install Dependencies
-        run: bun install --frozen-lockfile
-
-      - name: Run Semantic Release
-        id: semantic
-        env:
-          GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
-          GITHUB_TOKEN: ${{ secrets.BOT_TOKEN }}
-          NODE_PATH: ${{ github.workspace }}/node_modules
-        run: |
-          bun run semantic-release
-
   build:
-    needs: semantic-release
-    if: ${{ needs.semantic-release.outputs.new-release-published == 'true' }}
     runs-on: ubuntu-js
     steps:
       - name: Checkout
@@ -98,8 +61,6 @@ jobs:
           image: true
 
   guarddog:
-    needs: semantic-release
-    if: ${{ needs.semantic-release.outputs.new-release-published == 'true' }}
     runs-on: ubuntu-js
     steps:
       - name: Checkout
@@ -136,9 +97,45 @@ jobs:
           actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-profile/actions?workflow=release-image.yaml", "clear": true}]'
           image: true
 
+  semantic-release:
+    needs: [ build, guarddog ]
+    runs-on: ubuntu-js
+    outputs:
+      new-release-published: ${{ steps.semantic.outputs.new-release-published }}
+      new-release-version: ${{ steps.semantic.outputs.new-release-version }}
+      new-release-git-tag: ${{ steps.semantic.outputs.new-release-git-tag }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.BOT_TOKEN }}
+
+      - name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24.14.0
+
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.10
+
+      - name: Install Dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Run Semantic Release
+        id: semantic
+        env:
+          GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.BOT_TOKEN }}
+          NODE_PATH: ${{ github.workspace }}/node_modules
+        run: |
+          bun run semantic-release
+
   release-harbor:
     runs-on: ubuntu-js
-    needs: [semantic-release, build, guarddog, ]
+    needs: semantic-release
     if: ${{ needs.semantic-release.outputs.new-release-published == 'true' }}
     steps:
       - name: Checkout
@@ -240,13 +237,10 @@ jobs:
 
   release-gitea:
     runs-on: ubuntu-js
-    needs: [ semantic-release, build, guarddog, release-harbor ]
+    needs: [ semantic-release, release-harbor ]
     if: |
       always() && 
-      needs.semantic-release.result == 'success' &&
-      needs.semantic-release.outputs.new-release-published == 'true' &&
-      needs.build.result == 'success' &&
-      needs.guarddog.result == 'success'
+      needs.semantic-release.outputs.new-release-published == 'true'
     steps:
       - name: Checkout
         uses: actions/checkout@v6

CHANGELOG.md

@@ -1,3 +1,18 @@
+# [3.9.0](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.8.0...3.9.0) (2026-03-13)
+
+
+### Features
+
+* copy package.json ([0bef13c](https://gitea.alexlebens.dev/alexlebens/site-profile/commit/0bef13c414a00f5f7750d1db1db28d29b791394f))
+
+# [3.8.0](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.7.0...3.8.0) (2026-03-12)
+
+
+### Features
+
+* disable security feature ([0dfcc25](https://gitea.alexlebens.dev/alexlebens/site-profile/commit/0dfcc2598401765a1899d407a8bc34e8c105adcf))
+* use alpine-dev for bun builder ([4c8665e](https://gitea.alexlebens.dev/alexlebens/site-profile/commit/4c8665ebe2527ff605f82451b2173dd0473aa840))
+
 # [3.7.0](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.6.0...3.7.0) (2026-03-12)
 
 

Dockerfile

@@ -1,4 +1,6 @@
-FROM dhi.io/bun:1.3.10-debian13-dev AS builder
+ARG REGISTRY=dhi.io
+FROM ${REGISTRY}/bun:1.3.10-alpine3.22-dev AS builder
+
 WORKDIR /app
 
 COPY package.json bun.lock ./
@@ -15,10 +17,11 @@ FROM build-deps AS build
 COPY . .
 RUN bun run build
 
-FROM dhi.io/bun:1.3.10-alpine3.22 AS runtime
+FROM ${REGISTRY}/bun:1.3.10-alpine3.22 AS runtime
 WORKDIR /app
 COPY --from=prod-deps /app/node_modules /app/node_modules
 COPY --from=build /app/dist /app/dist
+COPY --from=builder /app/package.json ./
 
 ARG APP_VERSION=latest
 ARG APP_VERSION

astro.config.mjs

@@ -13,8 +13,6 @@ import { getSiteURL } from './src/support/url';
 export default defineConfig({
   site: getSiteURL(),
 
-  security: { csp: true },
-
   image: {
     remotePatterns: [
       { protocol: 'https', hostname: '*.alexlebens.net' },

package.json

@@ -1,7 +1,7 @@
 {
   "name": "site-profile",
   "type": "module",
-  "version": "3.7.0",
+  "version": "3.9.0",
   "homepage": "https://www.alexlebens.dev",
   "bugs": {
     "url": "https://gitea.alexlebens.dev/alexlebens/site-profile/issues",