ci: reach the package registry over https for authenticated apt; bump 0.3.3

.gitea/workflows/release.yml

@@ -45,7 +45,7 @@ jobs:
       - name: Attach to release
         env:
           GITEA_TOKEN: ${{ secrets.PUBLISH_TOKEN }}
-          SERVER: ${{ github.server_url }}
+          SERVER: https://dev.lirent.ru
           REPO: ${{ github.repository }}
           TAG: ${{ github.ref_name }}
         run: |
@@ -84,13 +84,24 @@ jobs:
 
       - name: Install toolchain + vmie (external dependency)
         env:
-          SERVER: ${{ github.server_url }}
+          SERVER: https://dev.lirent.ru
           OWNER: ${{ github.repository_owner }}
+          ACTOR: ${{ github.actor }}
+          TOKEN: ${{ secrets.PUBLISH_TOKEN }}
         run: |
           set -euo pipefail
           apt-get update
           apt-get install -y --no-install-recommends \
             cmake make gcc libc6-dev dpkg-dev file ca-certificates curl
+          # The Gitea Debian registry is private: apt needs HTTP Basic Auth. [trusted=yes]
+          # only skips GPG verification, NOT authentication — hence the prior 401. The token
+          # is written to auth.conf.d (never echoed to the log).
+          # machine MUST carry the scheme (https://) — apt refuses to send credentials over an
+          # unencrypted/unannotated endpoint (the prior 401 over the plain-http internal IP).
+          install -d -m 0700 /etc/apt/auth.conf.d
+          printf 'machine %s login %s password %s\n' "$SERVER" "$ACTOR" "$TOKEN" \
+            > /etc/apt/auth.conf.d/gitea.conf
+          chmod 600 /etc/apt/auth.conf.d/gitea.conf
           echo "deb [trusted=yes] ${SERVER}/api/packages/${OWNER}/debian stable main" \
             > /etc/apt/sources.list.d/gitea.list
           apt-get update
@@ -104,7 +115,7 @@ jobs:
       - name: Publish to Debian registry
         env:
           TOKEN: ${{ secrets.PUBLISH_TOKEN }}   # requires scope: package:write
-          SERVER: ${{ github.server_url }}
+          SERVER: https://dev.lirent.ru
           OWNER: ${{ github.repository_owner }}
           DISTRIBUTION: stable
           COMPONENT: main

CMakeLists.txt

@@ -1,5 +1,5 @@
 cmake_minimum_required(VERSION 3.16)
-project(vmsig VERSION 0.3.1 LANGUAGES C)
+project(vmsig VERSION 0.3.3 LANGUAGES C)
 
 set(CMAKE_C_STANDARD 17)
 set(CMAKE_C_STANDARD_REQUIRED ON)