Update our repo with latest changes from Bryntum

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    labels:
+      - dependencies
+    groups:
+      actions:
+        patterns:
+          - "*"

.github/release.yml

@@ -1,20 +1,36 @@
-# .github/release.yml
+# Configures GitHub's auto-generated release notes.
+# https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes
 
 changelog:
   exclude:
     labels:
       - ignore-for-release
+      - skip-changelog
     authors:
-      - octocat
+      - dependabot
+      - dependabot[bot]
   categories:
-    - title: Breaking Changes
+    - title: Breaking changes
       labels:
-        - Semver-Major
+        - breaking
         - breaking-change
-    - title: Exciting New Features
+    - title: Features
       labels:
-        - Semver-Minor
+        - feature
         - enhancement
-    - title: Changes
+    - title: Bug fixes
+      labels:
+        - bug
+        - fix
+    - title: Documentation
+      labels:
+        - documentation
+        - docs
+    - title: Maintenance
+      labels:
+        - chore
+        - refactor
+        - dependencies
+    - title: Other changes
       labels:
         - "*"

.github/workflows/ci.yml

@@ -0,0 +1,56 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+# Cancel in-progress runs for the same ref when a new commit lands.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Test (Node ${{ matrix.node-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        # MuhammaraJS does not ship prebuilt binaries for the very latest Node;
+        # docker uses its own bundled Node, so we test on the supported LTS pair.
+        node-version: [20.x, 24.x]
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+
+      - run: npm ci
+
+      - run: npm test
+
+  docker-build:
+    name: Docker build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Build image
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: false
+          load: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/docker-image.yml

@@ -1,34 +1,76 @@
-name: Build Docker Image
+name: Docker Image
 
+# Manually triggered from the GitHub UI (Actions → Docker Image → Run workflow).
+# Rebuilds the Docker image from the current source and pushes it to DockerHub.
+# No version bump, no git commit/tag, no GitHub Release — the image is tagged with
+# the version already present in package.json (plus `latest`).
 on:
-  release:
-    types:
-      - published
+  workflow_dispatch:
+    inputs:
+      latest:
+        description: 'Also push the `latest` tag'
+        required: false
+        type: boolean
+        default: true
+      dry-run:
+        description: 'Dry run (build only, no push)'
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
 
 jobs:
   docker:
+    name: Build and push image
     runs-on: ubuntu-latest
     steps:
-      -
-        name: Set up labels
-        id: meta
-        uses: docker/metadata-action@v4
-        with:
-          tags: |
-            bryntum/pdf-export-server:${{ github.event.release.tag_name }}
-            bryntum/pdf-export-server:latest
-      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
-      -
-        name: Login to DockerHub
-        uses: docker/login-action@v2
+      - uses: actions/checkout@v7
+
+      - name: Read version from package.json
+        id: version
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+
+      - name: Compute image tags
+        id: tags
+        run: |
+          {
+            echo 'value<<EOF'
+            echo "bryntum/pdf-export-server:${{ steps.version.outputs.version }}"
+            if [ "${{ inputs.latest }}" = "true" ]; then
+              echo "bryntum/pdf-export-server:latest"
+            fi
+            echo 'EOF'
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to DockerHub
+        if: ${{ !inputs.dry-run }}
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      -
-        name: Build and push
-        uses: docker/build-push-action@v3
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v7
         with:
-          push: true
-          tags: ${{ steps.meta.output.tags }}
+          context: .
+          push: ${{ !inputs.dry-run }}
+          tags: ${{ steps.tags.outputs.value }}
+
+      - name: Summary
+        if: ${{ always() }}
+        run: |
+          {
+            echo "## Docker Image Summary"
+            echo ""
+            echo "- **Version:** ${{ steps.version.outputs.version }}"
+            echo "- **Pushed \`latest\`:** ${{ inputs.latest }}"
+            echo "- **Dry run:** ${{ inputs.dry-run }}"
+            echo "- **Image:** bryntum/pdf-export-server:${{ steps.version.outputs.version }}"
+          } >> "$GITHUB_STEP_SUMMARY"