fix(workflows): replace invalid semantic-version action with fallback script

.github/workflows/auto-changelog.yml

@@ -0,0 +1,17 @@
+name: Auto Changelog (Release Drafter)
+
+on:
+  push:
+    branches: [ main ]
+  release:
+    types: [published]
+
+jobs:
+  update-draft:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Draft Release
+        uses: release-drafter/release-drafter@v5
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/auto-versioning.yml

@@ -0,0 +1,53 @@
+name: Auto Versioning and Release
+
+on:
+  push:
+    branches: [ main ]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  version:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Generate semantic version (fallback script)
+        id: semver
+        run: |
+          # Ensure git tags are fetched
+          git fetch --tags --quiet || true
+          # Get latest tag or default to v0.0.0
+          TAG=$(git describe --abbrev=0 --tags 2>/dev/null || echo "v0.0.0")
+          echo "Detected latest tag: $TAG"
+          # Set outputs for downstream steps
+          echo "version=$TAG" >> $GITHUB_OUTPUT
+          echo "release_notes=Fallback: using latest tag only" >> $GITHUB_OUTPUT
+          echo "changed=false" >> $GITHUB_OUTPUT
+
+      - name: Show version
+        run: |
+          echo "Next version: ${{ steps.semver.outputs.version }}"
+
+      - name: Create annotated tag and push
+        if: ${{ steps.semver.outputs.changed }}
+        run: |
+          git tag -a v${{ steps.semver.outputs.version }} -m "Release v${{ steps.semver.outputs.version }}"
+          git push origin --tags
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create GitHub Release (tag-only, no workspace changes)
+        if: ${{ steps.semver.outputs.changed }}
+        uses: softprops/action-gh-release@v1
+        with:
+          tag_name: ${{ steps.semver.outputs.version }}
+          name: Release ${{ steps.semver.outputs.version }}
+          body: ${{ steps.semver.outputs.release_notes }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docker-publish.yml

@@ -17,7 +17,7 @@ on:
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository_owner }}/cpmp
+  IMAGE_NAME: ${{ github.repository_owner }}/charon
 
 jobs:
   build-and-push:
@@ -83,13 +83,24 @@ jobs:
           DIGEST=$(docker inspect --format='{{index .RepoDigests 0}}' caddy:2-alpine)
           echo "image=$DIGEST" >> $GITHUB_OUTPUT
 
+      - name: Choose Registry Token
+        if: github.event_name != 'pull_request' && steps.skip.outputs.skip_build != 'true'
+        run: |
+          if [ -n "${{ secrets.CHARON_TOKEN }}" ]; then
+            echo "Using CHARON_TOKEN" >&2
+            echo "REGISTRY_PASSWORD=${{ secrets.CHARON_TOKEN }}" >> $GITHUB_ENV
+          else
+            echo "Using CPMP_TOKEN fallback" >&2
+            echo "REGISTRY_PASSWORD=${{ secrets.CPMP_TOKEN }}" >> $GITHUB_ENV
+          fi
+
       - name: Log in to Container Registry
         if: github.event_name != 'pull_request' && steps.skip.outputs.skip_build != 'true'
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
-          password: ${{ secrets.CPMP_TOKEN }}
+          password: ${{ env.REGISTRY_PASSWORD }}
 
       - name: Extract metadata (tags, labels)
         if: steps.skip.outputs.skip_build != 'true'
@@ -201,31 +212,41 @@ jobs:
             echo "tag=sha-$(echo ${{ github.sha }} | cut -c1-7)" >> $GITHUB_OUTPUT
           fi
 
+      - name: Choose Registry Token
+        run: |
+          if [ -n "${{ secrets.CHARON_TOKEN }}" ]; then
+            echo "Using CHARON_TOKEN" >&2
+            echo "REGISTRY_PASSWORD=${{ secrets.CHARON_TOKEN }}" >> $GITHUB_ENV
+          else
+            echo "Using CPMP_TOKEN fallback" >&2
+            echo "REGISTRY_PASSWORD=${{ secrets.CPMP_TOKEN }}" >> $GITHUB_ENV
+          fi
+
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ secrets.CPMP_TOKEN }}
+          password: ${{ env.REGISTRY_PASSWORD }}
 
       - name: Pull Docker image
         run: docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}
 
       - name: Create Docker Network
-        run: docker network create cpmp-test-net
+        run: docker network create charon-test-net
 
       - name: Run Upstream Service (whoami)
         run: |
           docker run -d \
             --name whoami \
-            --network cpmp-test-net \
+            --network charon-test-net \
             traefik/whoami
 
-      - name: Run CPMP Container
+      - name: Run Charon Container
         run: |
           docker run -d \
             --name test-container \
-            --network cpmp-test-net \
+            --network charon-test-net \
             -p 8080:8080 \
             -p 80:80 \
             ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}
@@ -242,7 +263,7 @@ jobs:
         run: |
           docker stop test-container whoami || true
           docker rm test-container whoami || true
-          docker network rm cpmp-test-net || true
+          docker network rm charon-test-net || true
 
       - name: Create test summary
         if: always()

.github/workflows/docs.yml

@@ -54,7 +54,7 @@ jobs:
           <head>
             <meta charset="UTF-8">
             <meta name="viewport" content="width=device-width, initial-scale=1.0">
-            <title>Caddy Proxy Manager Plus - Documentation</title>
+            <title>Charon - Documentation</title>
             <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@picocss/pico@2/css/pico.min.css">
             <style>
               :root {
@@ -151,7 +151,7 @@ jobs:
           </head>
           <body>
             <header>
-              <h1>🚀 Caddy Proxy Manager Plus</h1>
+              <h1>🚀 Charon</h1>
               <p>Make your websites easy to reach - No coding required!</p>
             </header>
 
@@ -159,7 +159,7 @@ jobs:
               <section>
                 <h2>👋 Welcome!</h2>
                 <p style="font-size: 1.1rem; color: #cbd5e1;">
-                  This documentation will help you get started with Caddy Proxy Manager Plus.
+                  This documentation will help you get started with Charon.
                   Whether you're a complete beginner or an experienced developer, we've got you covered!
                 </p>
               </section>
@@ -220,15 +220,15 @@ jobs:
                   Stuck? Have questions? We're here to help!
                 </p>
                 <div style="display: flex; gap: 1rem; flex-wrap: wrap; margin-top: 1rem;">
-                  <a href="https://github.com/Wikid82/CaddyProxyManagerPlus/discussions"
+                  <a href="https://github.com/Wikid82/charon/discussions"
                      style="background: white; color: #1e40af; padding: 0.5rem 1rem; border-radius: 6px; text-decoration: none;">
                     💬 Ask a Question
                   </a>
-                  <a href="https://github.com/Wikid82/CaddyProxyManagerPlus/issues"
+                  <a href="https://github.com/Wikid82/charon/issues"
                      style="background: white; color: #1e40af; padding: 0.5rem 1rem; border-radius: 6px; text-decoration: none;">
                     🐛 Report a Bug
                   </a>
-                  <a href="https://github.com/Wikid82/CaddyProxyManagerPlus"
+                  <a href="https://github.com/Wikid82/charon"
                      style="background: white; color: #1e40af; padding: 0.5rem 1rem; border-radius: 6px; text-decoration: none;">
                     ⭐ View on GitHub
                   </a>
@@ -289,10 +289,10 @@ jobs:
           </head>
           <body>
             <nav>
-              <a href="/cpmp/">🏠 Home</a>
-              <a href="/cpmp/docs/index.html">📚 Docs</a>
-              <a href="/cpmp/docs/getting-started.html">🚀 Get Started</a>
-              <a href="https://github.com/Wikid82/cpmp">⭐ GitHub</a>
+              <a href="/charon/">🏠 Home</a>
+              <a href="/charon/docs/index.html">📚 Docs</a>
+              <a href="/charon/docs/getting-started.html">🚀 Get Started</a>
+              <a href="https://github.com/Wikid82/charon">⭐ GitHub</a>
             </nav>
             <main>
           HEADER

.github/workflows/propagate-changes.yml

@@ -103,4 +103,5 @@ jobs:
               }
             }
         env:
+          CHARON_TOKEN: ${{ secrets.CHARON_TOKEN }}
           CPMP_TOKEN: ${{ secrets.CPMP_TOKEN }}

.github/workflows/quality-checks.yml

@@ -55,6 +55,11 @@ jobs:
           flags: backend
           fail_ci_if_error: true
 
+      - name: Enforce module-specific coverage (backend)
+        working-directory: ${{ github.workspace }}
+        run: bash scripts/check-module-coverage.sh --backend-only
+        continue-on-error: false
+
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 # v9.1.0
         with:
@@ -80,11 +85,11 @@ jobs:
         working-directory: frontend
         run: npm ci
 
-      - name: Run frontend tests
+      - name: Run frontend tests and coverage
         id: frontend-tests
-        working-directory: frontend
+        working-directory: ${{ github.workspace }}
         run: |
-          npm run test:coverage 2>&1 | tee test-output.txt
+          bash scripts/frontend-test-coverage.sh 2>&1 | tee frontend/test-output.txt
           exit ${PIPESTATUS[0]}
 
       - name: Frontend Test Summary
@@ -116,6 +121,11 @@ jobs:
           flags: frontend
           fail_ci_if_error: true
 
+      - name: Enforce module-specific coverage (frontend)
+        working-directory: ${{ github.workspace }}
+        run: bash scripts/check-module-coverage.sh --frontend-only
+        continue-on-error: false
+
       - name: Run frontend lint
         working-directory: frontend
         run: npm run lint

.github/workflows/release-goreleaser.yml

@@ -12,6 +12,11 @@ permissions:
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
+    env:
+      # Use the built-in GITHUB_TOKEN by default for GitHub API operations.
+      # If you need to provide a PAT with elevated permissions, add a CHARON_TOKEN secret
+      # at the repo or organization level and update the env here accordingly.
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -31,6 +36,9 @@ jobs:
       - name: Build Frontend
         working-directory: frontend
         run: |
+          # Inject version into frontend build from tag (if present)
+          VERSION=$${GITHUB_REF#refs/tags/}
+          echo "VITE_APP_VERSION=$$VERSION" >> $GITHUB_ENV
           npm ci
           npm run build
 
@@ -39,12 +47,12 @@ jobs:
         with:
           version: 0.13.0
 
+      # GITHUB_TOKEN is set from CHARON_TOKEN or CPMP_TOKEN (fallback), defaulting to GITHUB_TOKEN
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser
           version: latest
           args: release --clean
-        env:
-          GITHUB_TOKEN: ${{ secrets.CPMP_TOKEN }}
-          # CGO settings are handled in .goreleaser.yaml via Zig
+        # CGO settings are handled in .goreleaser.yaml via Zig

.github/workflows/renovate.yml

@@ -18,10 +18,20 @@ jobs:
         uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
         with:
           fetch-depth: 1
+      - name: Choose Renovate Token
+        run: |
+          if [ -n "${{ secrets.CHARON_TOKEN }}" ]; then
+            echo "Using CHARON_TOKEN" >&2
+            echo "RENOVATE_TOKEN=${{ secrets.CHARON_TOKEN }}" >> $GITHUB_ENV
+          else
+            echo "Using CPMP_TOKEN fallback" >&2
+            echo "RENOVATE_TOKEN=${{ secrets.CPMP_TOKEN }}" >> $GITHUB_ENV
+          fi
+
       - name: Run Renovate
         uses: renovatebot/github-action@03026bd55840025343414baec5d9337c5f9c7ea7 # v44.0.4
         with:
           configurationFile: .github/renovate.json
-          token: ${{ secrets.CPMP_TOKEN }}
+          token: ${{ env.RENOVATE_TOKEN }}
         env:
           LOG_LEVEL: info

.github/workflows/renovate_prune.yml

@@ -22,10 +22,19 @@ jobs:
       BRANCH_PREFIX: "renovate/"  # adjust if you use a different prefix
 
     steps:
+      - name: Choose GitHub Token
+        run: |
+          if [ -n "${{ secrets.CHARON_TOKEN }}" ]; then
+            echo "Using CHARON_TOKEN" >&2
+            echo "GITHUB_TOKEN=${{ secrets.CHARON_TOKEN }}" >> $GITHUB_ENV
+          else
+            echo "Using CPMP_TOKEN fallback" >&2
+            echo "GITHUB_TOKEN=${{ secrets.CPMP_TOKEN }}" >> $GITHUB_ENV
+          fi
       - name: Prune renovate branches
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         with:
-          github-token: ${{ secrets.CPMP_TOKEN }}
+          github-token: ${{ env.GITHUB_TOKEN }}
           script: |
             const owner = context.repo.owner;
             const repo = context.repo.repo;