chore(ci): aggiorna action versions, fix auto-release e migrazione self-hosted

- Aggiorna checkout v4→v6, setup-python v5→v5.2.0, setup-android v3→v4
- Aggiorna upload-artifact v3→v4, docker/login-action v3→v4
- Aggiunge needs su auto-release in tutti gli esempi (fix esecuzione parallela)
- Aggiunge token esplicito nel checkout come workaround bug Gitea #31900
- Aggiunge job dependency-outdated mancante in libreria-npm/maintenance.yml
- Aggiorna schedule: libreria-npm mercoledì 02:00, microservizio lunedì 02:00
- Migra tutti i riferimenti da gitea.com/Punga78 a gitea.pzetatouch.it/devops

Fixes #1 @3h

.gitea/workflows/auto-release.yml

@@ -8,9 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
         with:
           fetch-depth: 0
+          token: ${{ gitea.token }}
 
       - name: Generate changelog
         id: changelog

.gitea/workflows/capacitor-android.yml

@@ -39,7 +39,7 @@ jobs:
     runs-on: ${{ inputs.runner }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
@@ -53,7 +53,7 @@ jobs:
           java-version: ${{ inputs.java-version || '17' }}
 
       - name: Setup Android SDK
-        uses: https://github.com/android-actions/setup-android@v3
+        uses: https://github.com/android-actions/setup-android@v4
 
       - name: Cache npm
         uses: https://gitea.com/actions/cache@v4
@@ -145,7 +145,7 @@ jobs:
 
       - name: Upload APK artifact
         if: inputs.output-format == 'apk'
-        uses: https://github.com/actions/upload-artifact@v3
+        uses: https://github.com/actions/upload-artifact@v4
         with:
           name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}-apk
           path: android/app/build/outputs/apk/${{ inputs.build-type }}/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}.apk
@@ -153,7 +153,7 @@ jobs:
 
       - name: Upload AAB artifact
         if: inputs.output-format == 'aab'
-        uses: https://github.com/actions/upload-artifact@v3
+        uses: https://github.com/actions/upload-artifact@v4
         with:
           name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release-aab
           path: android/app/build/outputs/bundle/release/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release.aab
@@ -161,7 +161,7 @@ jobs:
 
       - name: Upload Gradle build reports
         if: always()
-        uses: https://github.com/actions/upload-artifact@v3
+        uses: https://github.com/actions/upload-artifact@v4
         with:
           name: gradle-build-reports
           path: android/build/reports/

.gitea/workflows/dependency-check.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4

.gitea/workflows/dependency-outdated.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4

.gitea/workflows/docker-release.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ${{ inputs.runner }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
@@ -54,7 +54,7 @@ jobs:
         run: npm run test
 
       - name: Login to container registry
-        uses: https://gitea.com/docker/login-action@v3
+        uses: https://gitea.com/docker/login-action@v4
         with:
           registry: gitea.pzetatouch.it
           username: ${{ secrets.G_USER }}

.gitea/workflows/npm-publish.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4

.gitea/workflows/python-auto-release.yml

@@ -16,9 +16,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
         with:
           fetch-depth: 0
+          token: ${{ gitea.token }}
 
       - name: Generate changelog
         id: changelog

.gitea/workflows/python-dependency-check.yml

@@ -22,10 +22,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 

.gitea/workflows/python-dependency-outdated.yml

@@ -22,10 +22,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 

.gitea/workflows/python-docker-release.yml

@@ -30,10 +30,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 
@@ -72,7 +72,7 @@ jobs:
         run: pytest --tb=short -q
 
       - name: Login to container registry
-        uses: https://gitea.com/docker/login-action@v3
+        uses: https://gitea.com/docker/login-action@v4
         with:
           registry: gitea.pzetatouch.it
           username: ${{ secrets.G_USER }}

.gitea/workflows/python-quality-gates.yml

@@ -23,10 +23,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 

.gitea/workflows/quality-gates.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4

examples/capacitor/ci.yml

@@ -19,11 +19,11 @@ on:
       
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit
 
   android-debug:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
     secrets: inherit
     with:
       build-type: debug

examples/capacitor/maintenance.yml

@@ -18,19 +18,19 @@ on:
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
   dependency-audit:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
     secrets: inherit
 
   dependency-outdated:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit

examples/capacitor/release.yml

@@ -18,8 +18,8 @@
 #     }
 #   }
 #
-# NOTA: i job girano in parallelo (no needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: gitea-release attende entrambe le build Android via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -30,19 +30,20 @@ on:
 
 jobs:
   android-apk:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
     secrets: inherit
     with:
       build-type: release
       output-format: apk
 
   android-aab:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
     secrets: inherit
     with:
       build-type: release
       output-format: aab
 
   gitea-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [android-apk, android-aab]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit

examples/libreria-npm/ci.yml

@@ -16,5 +16,5 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit

examples/libreria-npm/maintenance.yml

@@ -1,5 +1,9 @@
 # Copia in: .gitea/workflows/maintenance.yml
-# Combina branch-cleanup (PR merge) e dependency-check (settimanale)
+# Trigger:
+#   - PR merged           → cleanup branch sorgente
+#   - Ogni lunedì 08:00   → security audit vulnerabilità (settimanale)
+#   - Ogni 1° del mese    → controllo pacchetti obsoleti (mensile)
+#   - Manuale             → workflow_dispatch (esegue tutti i job di manutenzione)
 
 name: Maintenance
 
@@ -7,16 +11,26 @@ on:
   pull_request:
     types: [closed]
   schedule:
-    - cron: '0 8 * * 1'
+    - cron: '0 2 * * 3'    # ogni mercoledì alle 02:00 → security audit
+    - cron: '0 2 1 * *'    # ogni 1° del mese alle 02:00 → outdated check
   workflow_dispatch:
 
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
-  dependency-check:
-    if: gitea.event_name == 'schedule' || gitea.event_name == 'workflow_dispatch'
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+  dependency-audit:
+    if: >
+      gitea.event_name == 'workflow_dispatch' ||
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 3')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
+    secrets: inherit
+
+  dependency-outdated:
+    if: >
+      gitea.event_name == 'workflow_dispatch' ||
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 1 * *')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit

examples/libreria-npm/release.yml

@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → pubblica su npm + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende npm-publish via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -13,9 +13,10 @@ on:
 
 jobs:
   npm-publish:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/npm-publish.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/npm-publish.yml@v1
     secrets: inherit
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [npm-publish]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit

examples/microservizio/ci.yml

@@ -16,7 +16,7 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit
     # with:
     #   node-version: '22.17'   # opzionale, default già impostato

examples/microservizio/maintenance.yml

@@ -11,26 +11,26 @@ on:
   pull_request:
     types: [closed]
   schedule:
-    - cron: '0 8 * * 1'    # ogni lunedì alle 08:00 → security audit
-    - cron: '0 8 1 * *'    # ogni 1° del mese alle 08:00 → outdated check
+    - cron: '0 2 * * 1'    # ogni lunedì alle 02:00 → security audit
+    - cron: '0 4 1 * *'    # ogni 1° del mese alle 04:00 → outdated check
   workflow_dispatch:
 
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
   dependency-audit:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
-      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 1')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
     secrets: inherit
 
   dependency-outdated:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
-      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 4 1 * *')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit

examples/microservizio/release.yml

@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → build Docker + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende docker-release via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -14,11 +14,12 @@ on:
 jobs:
   docker-release:
     runs-on: catthehacker-latest  # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/docker-release.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/docker-release.yml@v1
     secrets: inherit
     with:
       runner: catthehacker-latest  # runner con Docker pre-installato
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [docker-release]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit

examples/python/ci.yml

@@ -24,7 +24,7 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-quality-gates.yml@v1
     secrets: inherit
     # with:
     #   python-version: '3.11'   # opzionale, default già impostato

examples/python/maintenance.yml

@@ -18,14 +18,14 @@ on:
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
   dependency-audit:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-dependency-check.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-dependency-check.yml@v1
     secrets: inherit
     # with:
     #   python-version: '3.11'
@@ -35,7 +35,7 @@ jobs:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-dependency-outdated.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-dependency-outdated.yml@v1
     secrets: inherit
     # with:
     #   python-version: '3.11'

examples/python/release.yml

@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → build Docker + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende docker-release via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di python-auto-release.yml.
 #
 # Prerequisiti:
 #   - Dockerfile presente nella root del progetto
@@ -19,7 +19,7 @@ on:
 jobs:
   docker-release:
     runs-on: catthehacker-latest  # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-docker-release.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-docker-release.yml@v1
     secrets: inherit
     with:
       runner: catthehacker-latest  # runner con Docker pre-installato
@@ -27,5 +27,6 @@ jobs:
       # install-extras: 'dev'     # opzionale
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-auto-release.yml@v1
+    needs: [docker-release]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-auto-release.yml@v1
     secrets: inherit