feat(ci): skip build if no source changes (cache build output by hash)

.gitea/workflows/build_dashboard.yaml

@@ -23,22 +23,34 @@ jobs:
         with:
           node-version: '24'
 
+      - name: Hash source files
+        id: hash-src
+        run: echo "hash=$(find apps/dashboard-ui -type f \( -name '*.vue' -o -name '*.ts' -o -name '*.js' -o -name '*.css' -o -name '*.json' -o -name '*.html' \) | sort | xargs sha256sum | sha256sum | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
+
+      - uses: actions/cache@v3
+        id: cache-build
+        with:
+          path: apps/dashboard-ui/dist
+          key: build-dashboard-${{ steps.hash-src.outputs.hash }}
+
       - name: Hash package-lock
         id: hash-npm
         run: echo "hash=$(sha256sum apps/dashboard-ui/package-lock.json | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
 
       - uses: actions/cache@v3
+        id: cache-npm
         with:
-          path: |
+          path: ~/.npm
-            ~/.npm
           key: npm-dashboard-${{ steps.hash-npm.outputs.hash }}
           restore-keys: npm-dashboard-
 
       - name: Install
+        if: steps.cache-build.outputs.cache-hit != 'true'
         working-directory: apps/dashboard-ui
         run: npm ci || npm install
 
       - name: Build
+        if: steps.cache-build.outputs.cache-hit != 'true'
         working-directory: apps/dashboard-ui
         run: npm run build
 

.gitea/workflows/build_device_agent.yaml

@@ -24,7 +24,29 @@ jobs:
           go-version: '1.26'
           cache: true
 
+      - uses: https://gitea.com/actions/go-hashfiles@v0.0.1
+        id: hash-src
+        with:
+          patterns: |
+            apps/device-agent/**/*.go
+            apps/device-agent/go.mod
+            apps/device-agent/go.sum
+
+      - uses: actions/cache@v3
+        id: cache-build
+        with:
+          path: apps/device-agent/bin
+          key: build-device-agent-${{ steps.hash-src.outputs.hash }}
+
+      - name: Generate Windows resources (UAC manifest + icon)
+        if: steps.cache-build.outputs.cache-hit != 'true'
+        working-directory: apps/device-agent
+        run: |
+          go install github.com/tc-hib/go-winres@latest
+          go-winres make
+
       - name: Build all platforms
+        if: steps.cache-build.outputs.cache-hit != 'true'
         working-directory: apps/device-agent
         shell: bash
         run: |

.gitea/workflows/build_server_core.yaml

@@ -24,13 +24,22 @@ jobs:
           go-version: '1.26'
           cache: true
 
-      - name: Generate Swagger docs
+      - uses: https://gitea.com/actions/go-hashfiles@v0.0.1
-        working-directory: apps/server-core
+        id: hash-src
-        run: |
+        with:
-          go install github.com/swaggo/swag/cmd/swag@v1.16.6
+          patterns: |
-          swag init -g main.go --parseDependency --parseInternal
+            apps/server-core/**/*.go
+            apps/server-core/go.mod
+            apps/server-core/go.sum
+
+      - uses: actions/cache@v3
+        id: cache-build
+        with:
+          path: apps/server-core/bin
+          key: build-server-core-${{ steps.hash-src.outputs.hash }}
 
       - name: Build
+        if: steps.cache-build.outputs.cache-hit != 'true'
         working-directory: apps/server-core
         run: go build -o bin/server-core .
 

.gitea/workflows/ci.yml

@@ -10,9 +10,11 @@ on:
       - 'v[0-9]*.[0-9]*.[0-9]'
 
 jobs:
-  # --- TESTS (test tags + stable release tags) ---
+  # ====================================================================
+  # TEST TAGS — test only, no build, no docs
+  # ====================================================================
   server-core-test:
-    if: contains(gitea.ref_name, 'test') || (!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta'))
+    if: contains(gitea.ref_name, 'test')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -26,17 +28,13 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version: '1.26'
-      - name: Generate swagger docs
+          cache: true
-        working-directory: apps/server-core
-        run: |
-          go install github.com/swaggo/swag/cmd/swag@v1.16.6
-          swag init -g main.go --parseDependency --parseInternal
       - name: Test (skip nftables - needs root)
         working-directory: apps/server-core
         run: go test $(go list ./... | grep -v internal/firewall) -tags dev -cover -count=1
 
   device-agent-test:
-    if: contains(gitea.ref_name, 'test') || (!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta'))
+    if: contains(gitea.ref_name, 'test')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -50,12 +48,13 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version: '1.26'
+          cache: true
       - name: Test
         working-directory: apps/device-agent
         run: go test ./... -cover
 
   dashboard-test:
-    if: contains(gitea.ref_name, 'test') || (!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta'))
+    if: contains(gitea.ref_name, 'test')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -76,40 +75,68 @@ jobs:
         working-directory: apps/dashboard-ui
         run: npm run build
 
-  # --- BUILD + RELEASE (dev/beta/release tags) ---
+  # ====================================================================
-  build-server-core:
+  # DEV/BETA TAGS — build only, no docs, no test
-    if: always() && !contains(gitea.ref_name, 'test') && !failure()
+  # ====================================================================
-    needs: [server-core-test, device-agent-test, dashboard-test]
+  build-server-core-dev:
+    if: contains(gitea.ref_name, 'dev') || contains(gitea.ref_name, 'beta')
     runs-on: ubuntu-latest
     uses: ./.gitea/workflows/build_server_core.yaml
     secrets: inherit
 
-  build-device-agent:
+  build-device-agent-dev:
-    if: always() && !contains(gitea.ref_name, 'test') && !failure()
+    if: contains(gitea.ref_name, 'dev') || contains(gitea.ref_name, 'beta')
-    needs: [server-core-test, device-agent-test, dashboard-test]
     runs-on: ubuntu-latest
     uses: ./.gitea/workflows/build_device_agent.yaml
     secrets: inherit
 
-  build-dashboard:
+  build-dashboard-dev:
-    if: always() && !contains(gitea.ref_name, 'test') && !failure()
+    if: contains(gitea.ref_name, 'dev') || contains(gitea.ref_name, 'beta')
-    needs: [server-core-test, device-agent-test, dashboard-test]
     runs-on: ubuntu-latest
     uses: ./.gitea/workflows/build_dashboard.yaml
     secrets: inherit
 
-  build-docs:
+  release-dev:
-    if: always() && !contains(gitea.ref_name, 'test') && !failure()
+    if: (contains(gitea.ref_name, 'dev') || contains(gitea.ref_name, 'beta')) && !failure()
-    needs: [server-core-test, device-agent-test, dashboard-test]
+    needs: [build-server-core-dev, build-device-agent-dev, build-dashboard-dev]
-    runs-on: ubuntu-latest
-    uses: ./.gitea/workflows/docs_call.yaml
-    secrets: inherit
-
-  release:
-    if: always() && !contains(gitea.ref_name, 'test') && !failure()
-    needs: [build-server-core, build-device-agent, build-dashboard, build-docs]
     uses: ./.gitea/workflows/release_call.yaml
     with:
       prerelease: ${{ contains(gitea.ref_name, 'dev') }}
       draft: ${{ contains(gitea.ref_name, 'beta') }}
     secrets: inherit
+
+  # ====================================================================
+  # RELEASE TAGS — build all + docs + release
+  # ====================================================================
+  build-server-core-release:
+    if: "!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta') && !contains(gitea.ref_name, 'test')"
+    runs-on: ubuntu-latest
+    uses: ./.gitea/workflows/build_server_core.yaml
+    secrets: inherit
+
+  build-device-agent-release:
+    if: "!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta') && !contains(gitea.ref_name, 'test')"
+    runs-on: ubuntu-latest
+    uses: ./.gitea/workflows/build_device_agent.yaml
+    secrets: inherit
+
+  build-dashboard-release:
+    if: "!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta') && !contains(gitea.ref_name, 'test')"
+    runs-on: ubuntu-latest
+    uses: ./.gitea/workflows/build_dashboard.yaml
+    secrets: inherit
+
+  build-docs-release:
+    if: "!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta') && !contains(gitea.ref_name, 'test')"
+    runs-on: ubuntu-latest
+    uses: ./.gitea/workflows/docs_call.yaml
+    secrets: inherit
+
+  release-stable:
+    if: "!contains(gitea.ref_name, 'dev') && !contains(gitea.ref_name, 'beta') && !contains(gitea.ref_name, 'test') && !failure()
+    needs: [build-server-core-release, build-device-agent-release, build-dashboard-release, build-docs-release]
+    uses: ./.gitea/workflows/release_call.yaml
+    with:
+      prerelease: false
+      draft: false
+    secrets: inherit

.gitea/workflows/docs_call.yaml

@@ -21,6 +21,17 @@ jobs:
         with:
           node-version: '24'
 
+      - name: Hash package-lock
+        id: hash-npm
+        run: echo "hash=$(sha256sum apps/docs/package-lock.json 2>/dev/null || echo 'none') | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
+
+      - uses: actions/cache@v3
+        with:
+          path: |
+            ~/.npm
+          key: npm-docs-${{ steps.hash-npm.outputs.hash }}
+          restore-keys: npm-docs-
+
       - name: Install
         working-directory: apps/docs
         run: npm ci || npm install