ci: streamline all workflows, use actions mirror and remove vendored bundles

.gitea/workflows/ci-next-build-golden-image.yml

@@ -12,28 +12,7 @@ jobs:
     runs-on: apex-debian13
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+      uses: actions/checkout@v4
     - name: Validate Shell Script Syntax
       run: bash -n ci/packer/scripts/*.sh
   build-image:
@@ -44,28 +23,7 @@ jobs:
       image_name: ${{ steps.vars.outputs.image_name }}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+      uses: actions/checkout@v4
     - name: Calculate Image Name
       id: vars
       run: 'SHORT_SHA="$(echo ${{ github.sha }} | cut -c1-7)"
@@ -82,101 +40,9 @@ jobs:
 
         '
     - name: Build Debian K3s Golden Image
-      run: 'mkdir -p output-qemu
-
-        echo "Downloading official Debian 12 cloud image..."
-
-        curl -fsSL -o base.qcow2 https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-genericcloud-amd64.qcow2
-
-
-        echo "Expanding disk image to 10G..."
-
-        qemu-img resize base.qcow2 10G
-
-
-        echo "Connecting disk image via NBD..."
-
-        sudo modprobe nbd max_part=8
-
-        sudo qemu-nbd --connect=/dev/nbd0 base.qcow2
-
-        sleep 1
-
-        sudo partx -u /dev/nbd0 || true
-
-
-        echo "Mounting disk filesystem..."
-
-        sudo mkdir -p /mnt/target
-
-        sudo mount /dev/nbd0p1 /mnt/target
-
-
-        echo "Mounting host virtual filesystems and configuring DNS..."
-
-        sudo rm -f /mnt/target/etc/resolv.conf
-
-        echo "nameserver 1.1.1.1" | sudo tee /mnt/target/etc/resolv.conf
-
-        echo "nameserver 8.8.8.8" | sudo tee -a /mnt/target/etc/resolv.conf
-
-        sudo mount --bind /dev /mnt/target/dev
-
-        sudo mount --bind /dev/pts /mnt/target/dev/pts
-
-        sudo mount --bind /proc /mnt/target/proc
-
-        sudo mount --bind /sys /mnt/target/sys
-
-
-        echo "Copying provisioner scripts..."
-
-        sudo mkdir -p /mnt/target/tmp/scripts
-
-        sudo cp ci/packer/scripts/*.sh /mnt/target/tmp/scripts/
-
-        sudo cp /opt/ci/assets/k3s /opt/ci/assets/k3s-install.sh /mnt/target/tmp/scripts/
-
-        sudo cp /opt/ci/assets/flux-install-local.yaml /mnt/target/tmp/scripts/flux-install.yaml
-
-        sudo chmod +x /mnt/target/tmp/scripts/*.sh
-
-
-        echo "Running provisioner scripts in chroot..."
-
-        sudo chroot /mnt/target /bin/bash /tmp/scripts/01-base-system.sh
-
-        sudo chroot /mnt/target /bin/bash /tmp/scripts/02-install-k3s.sh
-
-        sudo chroot /mnt/target /bin/bash /tmp/scripts/03-cleanup.sh
-
-        sudo rm -rf /mnt/target/tmp/scripts
-
-
-        echo "Unmounting filesystems..."
-
-        sudo umount /mnt/target/sys
-
-        sudo umount /mnt/target/proc
-
-        sudo umount /mnt/target/dev/pts
-
-        sudo umount /mnt/target/dev
-
-        sudo umount /mnt/target
-
-        sudo qemu-nbd --disconnect /dev/nbd0
-
-
-        echo "Compressing and optimizing qcow2 with 2M cluster size..."
-
-        qemu-img convert -f qcow2 -O qcow2 -o cluster_size=2M -c base.qcow2 output-qemu/com-ermnvldmr-debian-12-k3s-amd64.qcow2
-
-        echo "Golden image built successfully."
-
-        '
+      run: bash ci/scripts/build-golden-image.sh
     - name: Prepare and Upload Image Artifact
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: golden-image
         path: output-qemu/com-ermnvldmr-debian-12-k3s-amd64.qcow2
@@ -186,53 +52,19 @@ jobs:
     needs: build-image
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+    - name: Checkout repository
+      uses: actions/checkout@v4
     - name: Download Image Artifact
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: golden-image
         path: output-qemu
     - name: Upload to Static S3 (/dev/images/)
+      run: bash ci/scripts/upload-golden-image.sh "${IMAGE_NAME}"
       env:
-        AWS_ACCESS_KEY_ID: ${{ secrets.STATIC_AWS_ACCESS_KEY_ID || secrets.COM_ERMNVLDMR_STATIC_AWS_ACCESS_KEY_ID
-          }}
-        AWS_SECRET_ACCESS_KEY: ${{ secrets.STATIC_AWS_SECRET_ACCESS_KEY || secrets.COM_ERMNVLDMR_STATIC_AWS_SECRET_ACCESS_KEY
-          }}
-        AWS_DEFAULT_REGION: ${{ secrets.STATIC_AWS_REGION || secrets.COM_ERMNVLDMR_STATIC_S3_REGION
-          || 'auto' }}
-        S3_ENDPOINT: ${{ secrets.STATIC_S3_ENDPOINT_URL || secrets.COM_ERMNVLDMR_STATIC_S3_ENDPOINT_URL
-          }}
-        S3_BUCKET: ${{ secrets.STATIC_S3_BUCKET || secrets.COM_ERMNVLDMR_STATIC_S3_BUCKET
-          }}
+        AWS_ACCESS_KEY_ID: ${{ secrets.STATIC_AWS_ACCESS_KEY_ID || secrets.COM_ERMNVLDMR_STATIC_AWS_ACCESS_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.STATIC_AWS_SECRET_ACCESS_KEY || secrets.COM_ERMNVLDMR_STATIC_AWS_SECRET_ACCESS_KEY }}
+        AWS_DEFAULT_REGION: ${{ secrets.STATIC_AWS_REGION || secrets.COM_ERMNVLDMR_STATIC_S3_REGION || 'auto' }}
+        S3_ENDPOINT: ${{ secrets.STATIC_S3_ENDPOINT_URL || secrets.COM_ERMNVLDMR_STATIC_S3_ENDPOINT_URL }}
+        S3_BUCKET: ${{ secrets.STATIC_S3_BUCKET || secrets.COM_ERMNVLDMR_STATIC_S3_BUCKET }}
         IMAGE_NAME: ${{ needs.build-image.outputs.image_name }}
-      run: "mv output-qemu/com-ermnvldmr-debian-12-k3s-amd64.qcow2 \"output-qemu/${IMAGE_NAME}\"\
-        \nif [ -n \"${S3_BUCKET}\" ] && [ -n \"${AWS_ACCESS_KEY_ID}\" ]; then\n  ENDPOINT_FLAG=\"\
-        \"\n  [ -n \"${S3_ENDPOINT}\" ] && ENDPOINT_FLAG=\"--endpoint-url=${S3_ENDPOINT}\"\
-        \n  echo \"Cleaning up older images in dev/images/ to free bucket storage...\"\
-        \n  aws ${ENDPOINT_FLAG} s3 rm \"s3://${S3_BUCKET}/dev/images/\" --recursive\
-        \ --exclude \"*\" --include \"com-ermnvldmr-debian-12-k3s-*.qcow2\" || true\n\
-        \  aws ${ENDPOINT_FLAG} s3 cp \"output-qemu/${IMAGE_NAME}\" \"s3://${S3_BUCKET}/dev/images/${IMAGE_NAME}\"\
-        \n  echo \"Golden image uploaded to s3://${S3_BUCKET}/dev/images/${IMAGE_NAME}\"\
-        \nelse\n  echo \"S3 storage secrets not provided; skipping remote S3 upload.\
-        \ Image artifact is preserved in GitHub Actions run artifacts.\"\nfi\n"

.gitea/workflows/packages-kits-next-required.yml

@@ -10,8 +10,7 @@ name: packages/kits - next/required
     - packages/i18n/**
     - .gitea/workflows/packages-kits-next-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-next-kits-${{ github.ref }}
   cancel-in-progress: true
@@ -25,52 +24,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -80,44 +46,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -131,25 +66,25 @@ jobs:
     - name: Build UI
       run: pnpm --filter @ermnvldmr/ui build
     - name: Upload Rsbuild Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload Storybook Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
         retention-days: 30
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
         retention-days: 30
     - name: Upload UI dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -159,65 +94,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -228,65 +132,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -297,65 +170,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -366,72 +208,41 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
     - name: Build Kits Storybook
       run: pnpm --filter @ermnvldmr/kits build-storybook
     - name: Upload Storybook build
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: kits-storybook-static-${{ github.run_id }}
         path: packages/kits/storybook-static/
@@ -441,72 +252,41 @@ jobs:
     needs: build-storybook
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
     - name: Install Playwright browsers
       run: pnpm --filter @ermnvldmr/kits exec playwright install --with-deps chromium
     - name: Download Storybook build
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: kits-storybook-static-${{ github.run_id }}
         path: packages/kits/storybook-static/
@@ -517,65 +297,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist

.gitea/workflows/packages-kits-pr-required.yml

@@ -10,8 +10,7 @@ name: packages/kits - pr/required
     - packages/i18n/**
     - .gitea/workflows/packages-kits-pr-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-pr-kits-${{ github.head_ref }}
   cancel-in-progress: true
@@ -25,52 +24,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -80,44 +46,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -131,25 +66,25 @@ jobs:
     - name: Build UI
       run: pnpm --filter @ermnvldmr/ui build
     - name: Upload Rsbuild Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload Storybook Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
         retention-days: 30
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
         retention-days: 30
     - name: Upload UI dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -159,65 +94,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -228,65 +132,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -297,65 +170,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
@@ -366,72 +208,41 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
     - name: Build Kits Storybook
       run: pnpm --filter @ermnvldmr/kits build-storybook
     - name: Upload Storybook build
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: kits-storybook-static-${{ github.run_id }}
         path: packages/kits/storybook-static/
@@ -441,72 +252,41 @@ jobs:
     needs: build-storybook
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist
     - name: Install Playwright browsers
       run: pnpm --filter @ermnvldmr/kits exec playwright install --with-deps chromium
     - name: Download Storybook build
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: kits-storybook-static-${{ github.run_id }}
         path: packages/kits/storybook-static/
@@ -517,65 +297,34 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download UI dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-dist-${{ github.run_id }}
         path: packages/ui/dist

.gitea/workflows/packages-ssg-next-required.yml

@@ -7,8 +7,7 @@ name: packages/ssg - next/required
     - packages/ssg/**
     - .gitea/workflows/packages-ssg-next-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-ssg-${{ github.ref_name }}
   cancel-in-progress: true
@@ -22,52 +21,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -77,44 +43,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -122,7 +57,7 @@ jobs:
     - name: Build Rsbuild config
       run: pnpm --filter @ermnvldmr/rsbuild-config build
     - name: Upload Config Artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -132,50 +67,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -186,50 +90,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -240,50 +113,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist

.gitea/workflows/packages-ssg-pr-required.yml

@@ -7,8 +7,7 @@ name: packages/ssg - pr/required
     - packages/ssg/**
     - .gitea/workflows/packages-ssg-pr-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-pr-ssg-${{ github.head_ref }}
   cancel-in-progress: true
@@ -22,52 +21,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -77,44 +43,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -122,7 +57,7 @@ jobs:
     - name: Build Rsbuild config
       run: pnpm --filter @ermnvldmr/rsbuild-config build
     - name: Upload Config Artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -132,50 +67,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -186,50 +90,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -240,50 +113,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist

.gitea/workflows/packages-stl-next-required.yml

@@ -7,8 +7,7 @@ name: packages/stl - next/required
     - packages/stl/**
     - .gitea/workflows/packages-stl-next-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-stl-${{ github.ref_name }}
   cancel-in-progress: true
@@ -22,52 +21,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -77,44 +43,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -122,7 +57,7 @@ jobs:
     - name: Build Rsbuild config
       run: pnpm --filter @ermnvldmr/rsbuild-config build
     - name: Upload Config Artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -132,50 +67,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -186,50 +90,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -240,50 +113,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
@@ -294,50 +136,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist

.gitea/workflows/packages-stl-pr-required.yml

@@ -7,8 +7,7 @@ name: packages/stl - pr/required
     - packages/stl/**
     - .gitea/workflows/packages-stl-pr-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
   workflow_dispatch: {}
 concurrency:
   group: ci-pr-stl-${{ github.head_ref }}
@@ -23,52 +22,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -78,44 +44,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -123,7 +58,7 @@ jobs:
     - name: Build Rsbuild config
       run: pnpm --filter @ermnvldmr/rsbuild-config build
     - name: Upload Config Artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -133,50 +68,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -187,50 +91,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -241,50 +114,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
@@ -295,50 +137,19 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist

.gitea/workflows/packages-ui-next-required.yml

@@ -9,8 +9,7 @@ name: packages/ui - next/required
     - packages/i18n/**
     - .gitea/workflows/packages-ui-next-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-ui-${{ github.ref_name }}
   cancel-in-progress: true
@@ -24,52 +23,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -79,44 +45,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -128,19 +63,19 @@ jobs:
     - name: Build i18n
       run: pnpm --filter @ermnvldmr/i18n build
     - name: Upload Rsbuild Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload Storybook Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
         retention-days: 30
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -150,60 +85,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -214,60 +118,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -278,60 +151,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -342,60 +184,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -406,60 +217,29 @@ jobs:
     needs: build-storybook
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -474,60 +254,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist

.gitea/workflows/packages-ui-pr-required.yml

@@ -9,8 +9,7 @@ name: packages/ui - pr/required
     - packages/i18n/**
     - .gitea/workflows/packages-ui-pr-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-pr-ui-${{ github.head_ref }}
   cancel-in-progress: true
@@ -24,52 +23,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -79,44 +45,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -128,19 +63,19 @@ jobs:
     - name: Build i18n
       run: pnpm --filter @ermnvldmr/i18n build
     - name: Upload Rsbuild Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload Storybook Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
         retention-days: 30
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -150,60 +85,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -214,60 +118,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -278,60 +151,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -342,67 +184,36 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Build UI Storybook
       run: pnpm --filter @ermnvldmr/ui build-storybook
     - name: Upload Storybook build
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: ui-storybook-static-${{ github.run_id }}
         path: packages/ui/storybook-static/
@@ -412,67 +223,36 @@ jobs:
     needs: build-storybook
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Install Playwright browsers
       run: pnpm --filter @ermnvldmr/ui exec playwright install --with-deps chromium
     - name: Download Storybook build
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: ui-storybook-static-${{ github.run_id }}
         path: packages/ui/storybook-static/
@@ -483,60 +263,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist

.gitea/workflows/services-static-next-required.yml

@@ -11,8 +11,7 @@ name: services/static - next/required
     - .gitea/workflows/services-static-next-required.yml
     - ci/scripts/**
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-static-${{ github.ref_name }}
   cancel-in-progress: true
@@ -26,52 +25,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -81,44 +47,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -128,13 +63,13 @@ jobs:
     - name: Build i18n
       run: pnpm --filter @ermnvldmr/i18n build
     - name: Upload Config Artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -144,55 +79,24 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -203,55 +107,24 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -262,62 +135,31 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Build static service
       run: pnpm --filter @ermnvldmr/static build
     - name: Upload build artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: static-dist
         path: services/static/dist/
@@ -332,30 +174,9 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/next'
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+      uses: actions/checkout@v4
     - name: Download build artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: static-dist
         path: services/static/dist/

.gitea/workflows/services-static-pr-required.yml

@@ -11,8 +11,7 @@ name: services/static - pr/required
     - .gitea/workflows/services-static-pr-required.yml
     - ci/scripts/**
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-pr-static-${{ github.head_ref }}
   cancel-in-progress: true
@@ -26,52 +25,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -81,44 +47,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -128,13 +63,13 @@ jobs:
     - name: Build i18n
       run: pnpm --filter @ermnvldmr/i18n build
     - name: Upload Config Artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -144,55 +79,24 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -203,55 +107,24 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -262,62 +135,31 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Config Artifacts
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Build static service
       run: pnpm --filter @ermnvldmr/static build
     - name: Upload build artifacts
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: static-dist-${{ github.run_id }}
         path: services/static/dist/

.gitea/workflows/services-www-deploy-manual.yml

@@ -31,37 +31,17 @@ jobs:
     if: github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/next'
       && github.actor == 'deytenit'
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+    - name: Checkout repository
+      uses: actions/checkout@v4
     - name: Authenticate local registry
-      run: python3 .gitea/scripts/docker.py login
+      run: python3 ci/scripts/docker.py login
       env:
         REGISTRY: git.ermnvldmr.com
         REGISTRY_USER: deytenit
         REGISTRY_TOKEN: ${{ secrets.DEPLOY_REGISTRY_READ_TOKEN }}
     - name: Verify successful build and immutable digest
       id: provenance
-      run: python3 .gitea/scripts/provenance.py
+      run: python3 ci/scripts/provenance.py
       env:
         TESTED_SHA: ${{ inputs.tested_sha }}
         TESTED_DIGEST: ${{ inputs.tested_digest }}
@@ -91,32 +71,6 @@ jobs:
 
         '
     - name: Await production rollout
-      run: "TARGET_COMMIT=\"sha-${TESTED_SHA:0:7}\"\nENDPOINT=\"https://www.ermnvldmr.com/version.json\"\
-        \n\necho \"========================================================\"\necho\
-        \ \"Verifying production deployment on $ENDPOINT\"\necho \"Expected commit:\
-        \  $TARGET_COMMIT\"\necho \"========================================================\"\
-        \n\nMAX_ATTEMPTS=45\nATTEMPT=1\nCF_BLOCKED_COUNT=0\n\nwhile [ $ATTEMPT -le\
-        \ $MAX_ATTEMPTS ]; do\n  echo \"Attempt $ATTEMPT/$MAX_ATTEMPTS: Polling $ENDPOINT...\"\
-        \n\n  RESP_FILE=$(mktemp)\n  HTTP_CODE=$(curl -sL --max-time 10 \\\n    -H\
-        \ \"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\
-        \ (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" \\\n    -H \"Accept:\
-        \ application/json\" \\\n    -o \"$RESP_FILE\" \\\n    -w \"%{http_code}\"\
-        \ \\\n    \"$ENDPOINT\" || echo \"000\")\n\n  if [ \"$HTTP_CODE\" = \"200\"\
-        \ ]; then\n    LIVE_COMMIT=$(jq -r '.commit // empty' \"$RESP_FILE\" 2>/dev/null\
-        \ || true)\n    echo \"  Live commit:  ${LIVE_COMMIT:-<none>}\"\n\n    if\
-        \ [ \"$LIVE_COMMIT\" = \"$TARGET_COMMIT\" ]; then\n      echo \"\u2705 Success!\
-        \ Production has successfully rolled out $TARGET_COMMIT.\"\n      rm -f \"\
-        $RESP_FILE\"\n      exit 0\n    fi\n  elif [ \"$HTTP_CODE\" = \"403\" ] ||\
-        \ [ \"$HTTP_CODE\" = \"503\" ]; then\n    echo \"  HTTP $HTTP_CODE: Cloudflare\
-        \ WAF/challenge encountered from runner IP.\"\n    CF_BLOCKED_COUNT=$((CF_BLOCKED_COUNT\
-        \ + 1))\n  else\n    echo \"  HTTP $HTTP_CODE: Endpoint returned unexpected\
-        \ status code or timed out.\"\n  fi\n\n  rm -f \"$RESP_FILE\"\n\n  if [ $CF_BLOCKED_COUNT\
-        \ -ge 5 ]; then\n    echo \"\u26A0\uFE0F Cloudflare WAF consistently blocked\
-        \ external probe requests from this runner IP (HTTP $HTTP_CODE).\"\n    echo\
-        \ \"The GitOps release commit was already pushed to the repository; FluxCD\
-        \ will reconcile the cluster.\"\n    echo \"Skipping further external HTTP\
-        \ verification to avoid false negative.\"\n    exit 0\n  fi\n\n  ATTEMPT=$((ATTEMPT\
-        \ + 1))\n  sleep 10\ndone\n\necho \"\u274C Deployment verification timed out\
-        \ after 7.5 minutes.\"\nexit 1\n"
+      run: bash ci/scripts/await-rollout.sh https://www.ermnvldmr.com/version.json "sha-${TESTED_SHA:0:7}"
       env:
         TESTED_SHA: ${{ inputs.tested_sha }}

.gitea/workflows/services-www-next-required.yml

@@ -13,8 +13,7 @@ name: services/www - next/required
     - ci/config/nginx/**
     - ci/scripts/**
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
   workflow_dispatch: null
 concurrency:
   group: ci-www-${{ github.ref_name }}
@@ -29,52 +28,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -84,44 +50,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -131,13 +66,13 @@ jobs:
     - name: Build Storybook config
       run: pnpm --filter @ermnvldmr/storybook-config build
     - name: Upload Rsbuild Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload Storybook Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
@@ -145,7 +80,7 @@ jobs:
     - name: Build i18n package
       run: pnpm --filter @ermnvldmr/i18n build
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
@@ -155,60 +90,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
@@ -219,60 +123,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
@@ -283,67 +156,36 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Build WWW Storybook
       run: pnpm --filter @ermnvldmr/www build-storybook
     - name: Upload Storybook build
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-static
         path: services/www/storybook-static/
@@ -353,60 +195,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
@@ -417,67 +228,36 @@ jobs:
     needs: build-storybook
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
     - name: Install Playwright browsers
       run: pnpm --filter @ermnvldmr/www exec playwright install --with-deps chromium
     - name: Download Storybook build
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-static
         path: services/www/storybook-static/
@@ -488,60 +268,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist
         path: packages/storybook-config/dist
@@ -550,7 +299,7 @@ jobs:
       env:
         RSDOCTOR: 'true'
     - name: Upload Rsdoctor report
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsdoctor-report
         path: services/www/rsdoctor/
@@ -571,28 +320,7 @@ jobs:
       short_sha: ${{ steps.vars.outputs.short_sha }}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+      uses: actions/checkout@v4
     - name: Calculate Short SHA
       id: vars
       run: 'SHORT_SHA="sha-$(echo ${{ github.sha }} | cut -c1-7)"
@@ -601,7 +329,7 @@ jobs:
 
         '
     - name: Log in to GitHub Container Registry
-      run: python3 .gitea/scripts/docker.py login
+      run: python3 ci/scripts/docker.py login
       env:
         REGISTRY: git.ermnvldmr.com
         REGISTRY_USER: ${{ github.repository_owner }}
@@ -613,7 +341,7 @@ jobs:
 
         docker buildx inspect --bootstrap'
     - name: Build and push Docker image
-      run: python3 .gitea/scripts/docker.py build
+      run: python3 ci/scripts/docker.py build
       env:
         TAGS: git.ermnvldmr.com/${{ github.repository }}/www:${{ steps.vars.outputs.short_sha
           }}
@@ -646,7 +374,7 @@ jobs:
         ''repository'': os.environ[''GITHUB_REPOSITORY'']}))
 
         PROVENANCE'
-    - uses: ./.gitea/actions/upload-artifact
+    - uses: actions/upload-artifact@v4
       with:
         name: www-provenance
         path: .ci/www-provenance.json

.gitea/workflows/services-www-pr-required.yml

@@ -10,8 +10,7 @@ name: services/www - pr/required
     - packages/i18n/**
     - .gitea/workflows/services-www-pr-required.yml
     - pnpm-lock.yaml
-    - .gitea/scripts/**
-    - .gitea/actions/**
+    - ci/scripts/**
 concurrency:
   group: ci-pr-www-${{ github.head_ref }}
   cancel-in-progress: true
@@ -25,52 +24,19 @@ jobs:
     outputs: {}
     steps:
     - name: Checkout repository
-      run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - name: Setup Node.js with pnpm cache
-      run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Pack dependency cache
-      run: python3 .gitea/scripts/cache.py pack
-    - uses: ./.gitea/actions/upload-artifact
+      run: python3 ci/scripts/cache.py pack
+    - uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.dependency-cache.outputs.key }}
         path: .ci/pnpm-store.tar
@@ -80,44 +46,13 @@ jobs:
     needs: setup-stage
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
@@ -127,13 +62,13 @@ jobs:
     - name: Build Storybook config
       run: pnpm --filter @ermnvldmr/storybook-config build
     - name: Upload Rsbuild Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
         retention-days: 30
     - name: Upload Storybook Config
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
@@ -141,7 +76,7 @@ jobs:
     - name: Build i18n package
       run: pnpm --filter @ermnvldmr/i18n build
     - name: Upload i18n dist
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
@@ -151,60 +86,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
@@ -215,60 +119,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
@@ -279,67 +152,36 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Build WWW Storybook
       run: pnpm --filter @ermnvldmr/www build-storybook
     - name: Upload Storybook build
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: www-storybook-static-${{ github.run_id }}
         path: services/www/storybook-static/
@@ -349,60 +191,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
@@ -413,67 +224,36 @@ jobs:
     needs: build-storybook
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
     - name: Install Playwright browsers
       run: pnpm --filter @ermnvldmr/www exec playwright install --with-deps chromium
     - name: Download Storybook build
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: www-storybook-static-${{ github.run_id }}
         path: services/www/storybook-static/
@@ -484,60 +264,29 @@ jobs:
     needs: build-configs
     runs-on: apex-debian13
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
-    - name: Install pnpm
-      run: 'case "$PNPM_VERSION" in 8|9|9.12.3) ;; *) exit 1;; esac
-
-        test -x "/opt/ci/pnpm/$PNPM_VERSION/bin/pnpm"
-
-        echo "/opt/ci/pnpm/$PNPM_VERSION/bin" >> "$GITHUB_PATH"'
-      env:
-        PNPM_VERSION: 9.12.3
-    - run: "case \"$NODE_VERSION\" in\n  18*) major=18;; 20*) major=20;; 22*) major=22;;\
-        \ *) exit 1;;\nesac\ntest -x \"/opt/ci/node/$major/bin/node\"\necho \"/opt/ci/node/$major/bin\"\
-        \ >> \"$GITHUB_PATH\""
-      env:
-        NODE_VERSION: '20'
+    - name: Checkout repository
+      uses: actions/checkout@v4
+    - name: Setup environment
+      run: bash ci/scripts/setup-env.sh 9.12.3 20
     - name: Restore repository dependency cache
       id: dependency-cache
-      run: python3 .gitea/scripts/cache.py restore
+      run: python3 ci/scripts/cache.py restore
       env:
         CACHE_TOKEN: ${{ github.token }}
     - name: Install dependencies
       run: pnpm install --frozen-lockfile
     - name: Download Rsbuild Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: rsbuild-config-dist-${{ github.run_id }}
         path: packages/rsbuild-config/dist
     - name: Download i18n dist
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: i18n-dist-${{ github.run_id }}
         path: packages/i18n/dist
     - name: Download Storybook Config
-      uses: ./.gitea/actions/download-artifact
+      uses: actions/download-artifact@v4
       with:
         name: storybook-config-dist-${{ github.run_id }}
         path: packages/storybook-config/dist
@@ -546,7 +295,7 @@ jobs:
       env:
         RSDOCTOR: 'true'
     - name: Upload Rsdoctor report
-      uses: ./.gitea/actions/upload-artifact
+      uses: actions/upload-artifact@v4
       with:
         name: rsdoctor-report-${{ github.run_id }}
         path: services/www/rsdoctor/

.gitea/workflows/services-www-release-manual.yml

@@ -23,37 +23,17 @@ jobs:
     if: github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/next'
       && github.actor == 'deytenit'
     steps:
-    - run: "set -euo pipefail\ncase \"$CHECKOUT_REF\" in -*) exit 1;; esac\nGITHUB_SERVER_URL=${GITHUB_SERVER_URL%/}\n\
-        case \"$GITHUB_SERVER_URL\" in https://git.ermnvldmr.com) ;; *) exit 1;; esac\n\
-        AUTH=$(printf 'deytenit:%s' \"$CHECKOUT_TOKEN\" | base64 -w0)\nHEADER=\"http.${GITHUB_SERVER_URL}/.extraheader=AUTHORIZATION:\
-        \ basic $AUTH\"\ngit init \"$GITHUB_WORKSPACE\"\ncd \"$GITHUB_WORKSPACE\"\n\
-        git remote add origin \"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git\"\ngit -c\
-        \ \"$HEADER\" fetch --tags origin '+refs/heads/*:refs/remotes/origin/*'\n\
-        git -c \"$HEADER\" fetch origin \"$CHECKOUT_REF\"\ngit checkout --detach FETCH_HEAD\n\
-        test \"$(git rev-parse HEAD)\" = \"$GITHUB_SHA\"\nif [ \"$CHECKOUT_SUBMODULES\"\
-        \ = recursive ]; then\n    key_file=$(mktemp \"${RUNNER_TEMP:-/tmp}/hextra-key.XXXXXX\"\
-        )\n    trap 'rm -f \"$key_file\"' EXIT\n    umask 077\n    printf '%s\\n'\
-        \ \"$HEXTRA_READ_KEY\" > \"$key_file\"\n    chmod 600 \"$key_file\"\n    export\
-        \ GIT_SSH_COMMAND=\"ssh -T -i $key_file -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes\
-        \ -o HostKeyAlgorithms=ssh-ed25519 -o UserKnownHostsFile=$GITHUB_WORKSPACE/.gitea/known_hosts\"\
-        \n    git submodule update --init --recursive\nfi\nif [ \"$PERSIST_CREDENTIALS\"\
-        \ = true ]; then\n    git config \"http.${GITHUB_SERVER_URL}/.extraheader\"\
-        \ \"AUTHORIZATION: basic $AUTH\"\nfi\n"
-      env:
-        CHECKOUT_REF: ${{ github.sha }}
-        CHECKOUT_SUBMODULES: 'false'
-        CHECKOUT_TOKEN: ${{ github.token }}
-        PERSIST_CREDENTIALS: 'false'
-        HEXTRA_READ_KEY: ''
+    - name: Checkout repository
+      uses: actions/checkout@v4
     - name: Authenticate local registry
-      run: python3 .gitea/scripts/docker.py login
+      run: python3 ci/scripts/docker.py login
       env:
         REGISTRY: git.ermnvldmr.com
         REGISTRY_USER: deytenit
         REGISTRY_TOKEN: ${{ secrets.RELEASE_REGISTRY_TOKEN }}
     - name: Verify successful build and immutable digest
       id: provenance
-      run: python3 .gitea/scripts/provenance.py
+      run: python3 ci/scripts/provenance.py
       env:
         TESTED_SHA: ${{ inputs.tested_sha }}
         TESTED_DIGEST: ${{ inputs.tested_digest }}
@@ -82,7 +62,7 @@ jobs:
 
         git tag "$VERSION" "$TESTED_SHA"
 
-        python3 .gitea/scripts/git_write.py "refs/tags/$VERSION"
+        python3 ci/scripts/git_write.py "refs/tags/$VERSION"
 
         export VERSION
 
@@ -101,7 +81,7 @@ jobs:
         RELEASE_PROVENANCE
 
         '
-    - uses: ./.gitea/actions/upload-artifact
+    - uses: actions/upload-artifact@v4
       with:
         name: www-release-provenance
         path: .ci/www-release.json