Merge branch 'master' into fix-1909

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,38 @@
+---
+name: Bug Report
+about: Create a report to help us improve Anthias
+title: '[BUG] '
+labels: bug
+assignees: ''
+---
+
+**Describe the bug**
+
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+
+If applicable, add screenshots to help explain your problem.
+
+**Environment (please complete the following information):**
+
+- Device: [e.g., Raspberry Pi 5, Raspberry Pi 4, PC]
+- OS: [e.g., balenaOS, Raspberry Pi OS 64-bit Bookworm]
+- Anthias Version: [e.g., v0.19.0]
+- Installation Method: [e.g., balenaHub, Release Image, Manual Installation]
+
+**Additional context**
+
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Anthias Website
+    url: https://anthias.screenly.io
+    about: Visit our official website for general information and documentation
+  - name: Anthias Forum
+    url: https://forums.screenly.io
+    about: Join our community forum for help, discussions, and sharing experiences
+  - name: GitHub Discussions
+    url: https://github.com/Screenly/Anthias/discussions
+    about: For general questions and discussions about Anthias

.github/ISSUE_TEMPLATE/dependency_upgrade.md

@@ -0,0 +1,56 @@
+---
+name: Dependency Upgrade
+about: Propose a dependency upgrade or migration
+title: '[DEPENDENCY] '
+labels: dependencies
+assignees: ''
+---
+
+## Dependency Details
+
+**Component:** <!-- e.g., Frontend, Backend, Build System -->
+**Current Version:** <!-- e.g., Django 4.2.x, CoffeeScript 1.12.7 -->
+**Target Version:** <!-- e.g., Django 5.0.x, TypeScript 5.x -->
+
+## Motivation
+
+<!-- Why should we upgrade? E.g., security fixes, new features, technical debt -->
+
+## Scope
+
+- [ ] Direct dependency upgrade
+- [ ] Requires additional dependency updates
+- [ ] Breaking changes expected
+- [ ] Database migrations required
+- [ ] Configuration changes needed
+
+## Research
+
+<!-- What investigation have you done? Links to changelogs, migration guides, etc. -->
+
+### Potential Breaking Changes
+
+<!-- List any known breaking changes -->
+
+### Required Steps
+
+<!-- High-level steps needed for this upgrade -->
+
+1.
+2.
+3.
+
+### Affected Components
+
+<!-- Which parts of Anthias will be affected? -->
+
+- [ ] Frontend
+- [ ] Backend
+- [ ] WebView
+- [ ] Build System
+- [ ] Documentation
+- [ ] Tests
+
+## Additional Context
+
+<!-- Any other relevant information about this upgrade -->

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,27 @@
+---
+name: Feature Request
+about: Suggest an idea for Anthias
+title: '[FEATURE] '
+labels: enhancement
+assignees: ''
+---
+
+**Is your feature request related to a problem? Please describe.**
+
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+
+Add any other context or screenshots about the feature request here.
+
+**Would you be willing to contribute to this feature?**
+
+Let us know if you'd be interested in helping implement this feature.

.github/pull_request_template.md

@@ -0,0 +1,19 @@
+### Issues Fixed
+
+Include a list of issues that this pull request fixes. If this pull request is not associated with any issue, you can remove this section or include a brief description of the issue that you are fixing.
+
+### Description
+
+Provide a brief description of the changes that you have made.
+
+### Checklist
+
+- [ ] I have performed a self-review of my own code.
+- [ ] New and existing unit tests pass locally and on CI with my changes.
+- [ ] I have done an end-to-end test for Raspberry Pi devices.
+- [ ] I have tested my changes for x86 devices.
+- [ ] I added a documentation for the changes I have made (when necessary).
+
+### Additional Information
+
+Include any additional information that you think is necessary for this pull request, including screenshots of the changes that you have made.

.github/workflows/ansible-lint.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: Run ansible-lint
         uses: ansible-community/ansible-lint-action@main

.github/workflows/build-balena-disk-image.yaml

@@ -1,17 +1,38 @@
 name: Build Balena Disk Images
-on: workflow_dispatch
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to be used for the release'
+        required: true
+        type: string
+      commit:
+        description: 'Commit or branch name'
+        required: false
+        type: string
+        default: 'master'
 
 jobs:
+  generate-openapi-schema:
+    uses: ./.github/workflows/generate-openapi-schema.yml
+    permissions:
+      contents: write
+    with:
+      release: true
+      tag: ${{ inputs.tag }}
+      commit: ${{ inputs.commit }}
   balena-build-images:
     strategy:
       matrix:
-        board: ['pi1', 'pi2', 'pi3', 'pi4']
+        board: ['pi1', 'pi2', 'pi3', 'pi4', 'pi5']
     runs-on: ubuntu-20.04
     permissions:
       contents: write
+      id-token: write
+      attestations: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v2.3.4
+        uses: actions/checkout@v4
 
       - name: Get base board
         run: |
@@ -23,6 +44,8 @@ jobs:
             echo "BALENA_IMAGE=raspberrypi3" >> $GITHUB_ENV
           elif [ "${{ matrix.board }}" == 'pi4' ]; then
             echo "BALENA_IMAGE=raspberrypi4-64" >> $GITHUB_ENV
+          elif [ "${{ matrix.board }}" == 'pi5' ]; then
+            echo "BALENA_IMAGE=raspberrypi5" >> $GITHUB_ENV
           fi
 
       - name: balena CLI Action - download
@@ -43,6 +66,7 @@ jobs:
             preload \
               "$BALENA_IMAGE.img" \
               --fleet screenly_ose/anthias-${{ matrix.board }} \
+              --pin-device-to-release \
               --splash-image ansible/roles/splashscreen/files/splashscreen.png \
               --commit latest
           balena_cli_version: 18.1.2
@@ -92,3 +116,10 @@ jobs:
           allowUpdates: true
           prerelease: true
           artifacts: "*raspberry*.zip,*raspberry*.sha256,*raspberry*.json"
+          tag: ${{ inputs.tag }}
+          commit: ${{ inputs.commit }}
+
+      - name: Attest
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: '${{ github.workspace }}/*raspberry*.zip'

.github/workflows/build-webview.yaml

@@ -14,18 +14,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
-      - name: Login to DockerHub
+      - name: Login to Docker Hub
         if: success() && github.event_name != 'pull_request'
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -56,17 +56,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Cache build layers
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         id: cache
         with:
           path: /tmp/.cache
@@ -84,17 +84,21 @@ jobs:
           ls -lah /tmp/.cache
 
       - name: Start compilation
+        shell: 'script -q -e -c "bash {0}"'
         run: |
           cd webview
-          docker run --rm -t \
+          docker run -itd \
+            --name qt-builder \
             -v ~/tmp/qt-src:/src:Z \
             -v /tmp/.cache/ccache:/src/ccache:Z \
             -v ~/tmp/qt-build:/build:Z \
             -v $(pwd):/webview:ro \
             -e TARGET=${{ matrix.board }} \
             screenly/ose-qt-builder:latest
+          docker exec -it qt-builder /webview/build_qt5.sh
+          docker rm -f qt-builder
 
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: Release files
           path: ~/tmp/qt-build/

.github/workflows/codeql-analysis.yaml

@@ -25,6 +25,11 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
 
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
     strategy:
       fail-fast: false
       matrix:
@@ -35,11 +40,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -50,7 +55,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -64,4 +69,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3