Skip to content
This repository was archived by the owner on Aug 7, 2026. It is now read-only.

chore(deps): Update docker-all #609

chore(deps): Update docker-all

chore(deps): Update docker-all #609

# Docker Build & Test
#
# This workflow handles Docker image building for CI/testing purposes.
# Production and beta releases use the unified release-pipeline.yml,
# which includes Docker building and publishing as stages.
#
# Triggers:
# - PR changes to Docker-related files: Build only (no push)
# - Manual dispatch: Build only (no push)
#
# For releases, use:
# - create-beta.yml (beta releases)
# - release.yml (production releases)
name: "04 Build: Docker"
on:
pull_request:
paths:
- "Dockerfile"
- "docker-compose.yml"
- ".dockerignore"
- "frontend/**"
- "*.py"
- "core/**"
- "services/**"
- "state/**"
- "requirements/**"
- ".github/workflows/04-build-docker.yml"
workflow_dispatch:
inputs:
push:
description: 'Push to registry (use with caution)'
required: false
type: boolean
default: false
env:
REGISTRY: ghcr.io
IMAGE_NAME: ${{ github.repository }}
permissions: read-all
jobs:
build:
runs-on: ${{ vars.RUNNER_PROVIDER == 'namespace' && 'ubuntu-2204-x64-4x16' || 'ubuntu-latest' }}
timeout-minutes: 30
permissions:
contents: read
packages: write
steps:
- name: Checkout
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
- name: Set up QEMU
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
- name: Login to GHCR
if: inputs.push == true
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Generate metadata
id: meta
run: |
IMAGE=$(echo "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}" | tr '[:upper:]' '[:lower:]')
SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
echo "image=$IMAGE" >> $GITHUB_OUTPUT
echo "tag=$IMAGE:ci-$SHORT_SHA" >> $GITHUB_OUTPUT
- name: Build Docker image
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
with:
context: .
platforms: linux/amd64,linux/arm64
push: ${{ inputs.push == true }}
tags: ${{ steps.meta.outputs.tag }}
build-args: |
BUILD_TIME=${{ github.event.head_commit.timestamp }}
GIT_SHA=${{ github.sha }}
VERSION=ci-${{ github.sha }}
RELEASE_CHANNEL=dev
cache-from: type=gha
cache-to: type=gha,mode=max
- name: Build Summary
run: |
echo "### Docker Build Complete" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "- **Image:** \`${{ steps.meta.outputs.tag }}\`" >> $GITHUB_STEP_SUMMARY
echo "- **Platforms:** linux/amd64, linux/arm64" >> $GITHUB_STEP_SUMMARY
if [[ "${{ inputs.push }}" == "true" ]]; then
echo "- **Pushed:** Yes" >> $GITHUB_STEP_SUMMARY
else
echo "- **Pushed:** No (build-only)" >> $GITHUB_STEP_SUMMARY
fi