.forgejo/workflows/dev.yaml

@@ -21,9 +21,11 @@ jobs:
 
       - name: Dependencies en securitytests
         run: |
-          npm ci
+          docker run --rm \
-          npm test
+            -v "$PWD:/app" \
-          npm audit --omit=dev --audit-level=moderate
+            -v /app/node_modules \
+            -w /app node:22-alpine \
+            sh -lc 'npm ci && npm test && npm audit --omit=dev --audit-level=moderate'
 
       - name: Image-tags bepalen
         id: meta

.forgejo/workflows/release.yaml

@@ -21,9 +21,11 @@ jobs:
 
       - name: Dependencies en securitytests
         run: |
-          npm ci
+          docker run --rm \
-          npm test
+            -v "$PWD:/app" \
-          npm audit --omit=dev --audit-level=moderate
+            -v /app/node_modules \
+            -w /app node:22-alpine \
+            sh -lc 'npm ci && npm test && npm audit --omit=dev --audit-level=moderate'
 
       - name: Image-tags bepalen
         id: meta

VERSION

@@ -1 +1 @@
-0.3.03-beta
+0.3.04-beta

public/js/core.js

@@ -2,7 +2,7 @@
 "use strict";
 /* version — shown until /api/version resolves (or if the fetch fails, e.g. offline).
    Kept in sync by hand with the VERSION file at the repo root on every release. */
-const VERSION = "0.3.03-beta";
+const VERSION = "0.3.04-beta";
 (function(){
   const tag = document.getElementById("verTag");
   tag.textContent = "v"+VERSION;