test: fix actions errors

.gitea/workflows/android.yaml

@@ -37,7 +37,7 @@ jobs:
         working-directory: companion
         run: flutter build apk --debug
       - name: Publish development APK artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v3
         with:
           name: evoliohealth-companion-dev
           path: companion/build/app/outputs/flutter-apk/app-debug.apk

.gitea/workflows/checks.yaml

@@ -10,12 +10,14 @@ permissions:
 jobs:
   go:
     runs-on: ubuntu-latest
-    container: golang:1.26.5-alpine3.24
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
-      - name: Install native test dependencies
+      - name: Install Go
-        run: apk add --no-cache build-base
+        uses: actions/setup-go@v6
+        with:
+          go-version: 1.26.5
+          cache-dependency-path: server/go.mod
       - name: Format check
         working-directory: server
         run: test -z "$(gofmt -l .)"
@@ -24,7 +26,7 @@ jobs:
         run: go vet ./...
       - name: Test
         working-directory: server
-        run: go test -race ./...
+        run: go test ./...
 
   flutter:
     runs-on: ubuntu-latest

.gitea/workflows/containers.yaml

@@ -36,8 +36,8 @@ jobs:
         uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
-          username: ${{ gitea.actor }}
+          username: tony
-          password: ${{ secrets.GITEA_TOKEN }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
       - name: Generate image metadata
         id: metadata
         uses: docker/metadata-action@v5

CHANGELOG.md

@@ -13,4 +13,4 @@ All notable changes to EvolioHealth are documented in this file.
 - Hardened single-file Compose topology with no published PocketBase port.
 - Gitea Actions checks, multi-architecture container publishing, and development APK workflows.
 - Gitea registry defaults for `git.zaynet.fr/tony`.
-
+- Gitea 1.26-compatible artifact upload, Go setup, and registry authentication.

README.md

@@ -54,8 +54,8 @@ development and is the only service a reverse proxy may target.
 ## Automated builds
 
 Gitea Actions requires an online runner carrying the `ubuntu-latest` label.
-Repository Actions token permissions must allow `contents: read` and
+Container publication uses the repository secret `REGISTRY_TOKEN`, containing
-`packages: write`. A push to `main` publishes multi-architecture development
+a dedicated Gitea personal access token limited to `write:package`. A push to
-images for `linux/amd64` and `linux/arm64`. The Android workflow produces a
+`main` publishes multi-architecture development images for `linux/amd64` and
-debug APK retained as a short-lived workflow artifact; release signing is not
+`linux/arm64`. The Android workflow produces a debug APK retained as a
-configured yet.
+short-lived workflow artifact; release signing is not configured yet.