fix(ci): Re-enable QA for tags and use global Turborepo cache key to allow hits across branches/tags

.gitea/workflows/ci.yml

@@ -50,12 +50,15 @@ jobs:
         uses: actions/cache@v4
         with:
           path: .turbo
-          key: ${{ runner.os }}-turbo-${{ github.sha }}
+          key: ${{ runner.os }}-turbo-global-${{ github.sha }}
           restore-keys: |
+            ${{ runner.os }}-turbo-global-
             ${{ runner.os }}-turbo-
 
       - name: 🧪 QA Checks
-        run: npx turbo run check:mdx lint typecheck test
+        env:
+          TURBO_TELEMETRY_DISABLED: "1"
+        run: npx turbo run check:mdx lint typecheck test --cache-dir=".turbo"
 
       - name: 🏗️ Build
         run: pnpm build

.gitea/workflows/deploy.yml

@@ -175,15 +175,18 @@ jobs:
         uses: actions/cache@v4
         with:
           path: .turbo
-          key: ${{ runner.os }}-turbo-${{ github.sha }}
+          key: ${{ runner.os }}-turbo-global-${{ github.sha }}
           restore-keys: |
+            ${{ runner.os }}-turbo-global-
             ${{ runner.os }}-turbo-
 
       - name: 🔒 Security Audit
         run: pnpm audit --audit-level high
       - name: 🧪 QA Checks
         if: github.event.inputs.skip_checks != 'true'
-        run: npx turbo run lint check:spell typecheck test
+        env:
+          TURBO_TELEMETRY_DISABLED: "1"
+        run: npx turbo run lint check:spell typecheck test --cache-dir=".turbo"
 
   # ──────────────────────────────────────────────────────────────────────────────
   # JOB 3: Build & Push
@@ -209,6 +212,8 @@ jobs:
           push: true
           provenance: false
           platforms: linux/arm64
+          cache-from: type=gha,scope=nextjs-build-${{ needs.prepare.outputs.target }}
+          cache-to: type=gha,mode=max,scope=nextjs-build-${{ needs.prepare.outputs.target }}
           build-args: |
             NEXT_PUBLIC_BASE_URL=${{ needs.prepare.outputs.next_public_url }}
             NEXT_PUBLIC_TARGET=${{ needs.prepare.outputs.target }}

middleware.ts

@@ -10,10 +10,38 @@ const intlMiddleware = createMiddleware({
   defaultLocale: 'en',
 });
 
-export default function middleware(request: NextRequest) {
+const imgproxyStatus = { isDown: false, lastCheck: 0 };
+
+async function isImgproxyDown() {
+  const now = Date.now();
+  if (now - imgproxyStatus.lastCheck > 60000) {
+    try {
+      const imgproxyUrl = process.env.IMGPROXY_URL || 'https://img.infra.mintel.me';
+      const checkUrl = imgproxyUrl.startsWith('http') ? imgproxyUrl : `https://${imgproxyUrl}`;
+      const res = await fetch(checkUrl, { signal: AbortSignal.timeout(2000) });
+      imgproxyStatus.isDown = res.status >= 500;
+    } catch (e) {
+      imgproxyStatus.isDown = true;
+    }
+    imgproxyStatus.lastCheck = now;
+  }
+  return imgproxyStatus.isDown;
+}
+
+export default async function middleware(request: NextRequest) {
   const { method, url, headers } = request;
   const { pathname } = request.nextUrl;
 
+  if (pathname.startsWith('/_img/')) {
+    if (await isImgproxyDown()) {
+      const originalUrl = request.nextUrl.searchParams.get('url');
+      if (originalUrl) {
+        return NextResponse.redirect(originalUrl);
+      }
+    }
+    return NextResponse.next();
+  }
+
   // Explicit bypass for infrastructure routes to avoid locale redirects/interception
   if (
     pathname.startsWith('/stats') ||
@@ -97,7 +125,7 @@ export default function middleware(request: NextRequest) {
 
 export const config = {
   matcher: [
-    '/((?!api|_next/static|_next/image|_img|favicon.ico|manifest.webmanifest|.*\\.(?:svg|png|jpg|jpeg|gif|webp|pdf|txt|vcf|xml|webm|mp4|map)$).*)',
+    '/((?!api|_next/static|_next/image|favicon.ico|manifest.webmanifest|.*\\.(?:svg|png|jpg|jpeg|gif|webp|pdf|txt|vcf|xml|webm|mp4|map)$).*)',
     '/(de|en)/:path*',
     '/(de|en)/:path*',
   ],

package.json

@@ -126,7 +126,7 @@
     "prepare": "husky",
     "preinstall": "npx only-allow pnpm"
   },
-  "version": "1.0.0",
+  "version": "1.0.1-rc.0",
   "pnpm": {
     "overrides": {
       "next": "16.1.6",