From 5780c266b7971a25182f06cc3caf5a5f14df224f Mon Sep 17 00:00:00 2001
From: Harald <harald@pansi.eu>
Date: Tue, 6 Oct 2026 12:24:33 +0200
Subject: [PATCH] =?UTF-8?q?ci(gitea):=20Strikte=20Quality-Gates=20und=20si?=
 =?UTF-8?q?chere=20Token-=C3=9Cbergabe=20in=20Release-Workflow?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/release.yaml | 27 ++++++++++++++++++++++-----
 1 file changed, 22 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index f9f81c1..c8a35a2 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -9,15 +9,25 @@ on:
 jobs:
   release:
     name: Build Packages & Publish to Gitea
+    # Hinweis zum Gitea act_runner:
+    # Standardmäßig 'ubuntu-latest'. Falls Ihr Runner unter einem anderen Label registriert ist
+    # (z. B. 'linux', 'ubuntu-24.04' oder 'host'), passen Sie dieses Label an.
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.2.2
 
       - name: Install System Packaging Tools
         run: |
-          sudo apt-get update
-          sudo apt-get install -y --no-install-recommends \
+          export DEBIAN_FRONTEND=noninteractive
+          SUDO=""
+          if [ "$(id -u)" -ne 0 ]; then
+            if command -v sudo >/dev/null 2>&1; then
+              SUDO="sudo"
+            fi
+          fi
+          $SUDO apt-get update -y
+          $SUDO apt-get install -y --no-install-recommends \
             build-essential \
             pkg-config \
             libx11-dev \
@@ -31,11 +41,17 @@ jobs:
             python3
 
       - name: Setup Rust Toolchain
-        uses: actions-rust-lang/setup-rust-toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@v1.11.0
         with:
           toolchain: stable
           cache: true
 
+      - name: Code Quality & Testing (Quality Gates)
+        run: |
+          cargo fmt --check
+          cargo clippy --all-targets -- -D warnings
+          cargo test
+
       - name: Build Release Artifacts (.deb, .AppImage, SHA256SUMS.txt)
         run: |
           chmod +x scripts/*.sh
@@ -43,8 +59,9 @@ jobs:
 
       - name: Publish Release to Gitea
         run: |
-          ./scripts/publish-gitea-release.sh "${{ secrets.GITEA_TOKEN || secrets.GITHUB_TOKEN }}"
+          ./scripts/publish-gitea-release.sh
         env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN || secrets.GITHUB_TOKEN }}
           GITEA_SERVER: ${{ github.server_url }}
           REPO_OWNER: ${{ github.repository_owner }}
           REPO_NAME: ${{ github.event.repository.name }}