chore: OCI images

.github/actions/version-matrix/data/cache-states-beta-oci.json

@@ -0,0 +1,10 @@
+{
+	"node:normal": {
+		"hash": "326d8f05d19439edf63961843990b085817b5fe28c92ebe8327706b661b72485",
+		"hashEntries": "APIFY_VERSION=3.5.2;CRAWLEE_VERSION=3.15.3;NODE_VERSION=20,22,24"
+	},
+	"node:playwright": {
+		"hash": "1fa77d34223ee8d292cdbdad250b0fd7db3cec6b31af514b9ccbd8d03a33b7d7",
+		"hashEntries": "APIFY_VERSION=3.5.3;CAMOUFOX_VERSION=0.8.4;CRAWLEE_VERSION=3.15.3;NODE_VERSION=20,22,24;PLAYWRIGHT_VERSION=1.55.0,1.55.1,1.56.0,1.56.1,1.57.0"
+	}
+}

.github/actions/version-matrix/src/matrices/node/playwright.ts

@@ -73,6 +73,12 @@ const imageNames = [
 	'node-playwright-camoufox',
 ] as const;
 
+// Images that require Chrome/Chromium cannot be built for arm64 on Linux
+const arm64UnsupportedImages: ReadonlySet<string> = new Set([
+	'node-playwright',
+	'node-playwright-chrome',
+]);
+
 const matrix = {
 	include: [] as {
 		'image-name': (typeof imageNames)[number];
@@ -83,6 +89,7 @@ const matrix = {
 		'camoufox-version': string;
 		'is-latest': 'true' | 'false';
 		'latest-node-version': string;
+		'supports-arm64': 'true' | 'false';
 	}[],
 };
 
@@ -98,6 +105,7 @@ for (const nodeVersion of supportedNodeVersions) {
 				'camoufox-version': `^${latestCamoufoxVersion}`,
 				'is-latest': playwrightVersion === latestPlaywrightVersion ? 'true' : 'false',
 				'latest-node-version': latestNodeVersion,
+				'supports-arm64': arm64UnsupportedImages.has(imageName) ? 'false' : 'true',
 			});
 		}
 	}

.github/actions/version-matrix/src/matrices/python/playwright.ts

@@ -68,6 +68,12 @@ const imageNames = [
 	'python-playwright-camoufox',
 ] as const;
 
+// Images that require Chrome/Chromium cannot be built for arm64 on Linux
+const arm64UnsupportedImages: ReadonlySet<string> = new Set([
+	'python-playwright',
+	'python-playwright-chrome',
+]);
+
 const matrix = {
 	include: [] as {
 		'image-name': (typeof imageNames)[number];
@@ -76,6 +82,7 @@ const matrix = {
 		'camoufox-version': string;
 		'is-latest': 'true' | 'false';
 		'latest-python-version': string;
+		'supports-arm64': 'true' | 'false';
 	}[],
 };
 
@@ -99,6 +106,7 @@ for (const pythonVersion of supportedPythonVersions) {
 				'camoufox-version': latestCamoufoxVersion,
 				'is-latest': playwrightVersion === latestPlaywrightVersion ? 'true' : 'false',
 				'latest-python-version': latestPythonVersion,
+				'supports-arm64': arm64UnsupportedImages.has(imageName) ? 'false' : 'true',
 			});
 		}
 	}

.github/workflows/release-node-playwright.yaml

@@ -221,7 +221,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build and tag image
+      - name: Build and tag image for testing
         uses: docker/build-push-action@v6
         with:
           context: ./${{ matrix.image-name }}
@@ -230,8 +230,12 @@ jobs:
           build-args: |
             NODE_VERSION=${{ matrix.node-version }}
             PLAYWRIGHT_VERSION=${{ format('v{0}-', matrix.playwright-version) }}
+          platforms: linux/amd64
+          provenance: false
           load: true
           tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.node-version }}-${{ matrix.playwright-version }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.image-name }}-${{ matrix.node-version }}-${{ matrix.playwright-version }}
 
       - name: Test image
         run: docker run ${{ fromJson(steps.prepare-tags.outputs.result).firstImageName }}
@@ -243,6 +247,18 @@ jobs:
           username: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_USERNAME }}
           password: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_TOKEN }}
 
-      - name: Push images
+      - name: Build and push OCI image
         if: github.event_name != 'pull_request'
-        run: docker push apify/actor-${{ matrix.image-name }} --all-tags
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.image-name }}
+          file: ./${{ matrix.image-name }}/Dockerfile
+          build-args: |
+            NODE_VERSION=${{ matrix.node-version }}
+            PLAYWRIGHT_VERSION=${{ format('v{0}-', matrix.playwright-version) }}
+          platforms: ${{ matrix.supports-arm64 == 'true' && 'linux/amd64,linux/arm64' || 'linux/amd64' }}
+          provenance: true
+          push: true
+          tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          outputs: type=image,oci-mediatypes=true
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.node-version }}-${{ matrix.playwright-version }}

.github/workflows/release-node-puppeteer.yaml

@@ -203,14 +203,18 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build and tag image
+      - name: Build and tag image for testing
         uses: docker/build-push-action@v6
         with:
           context: ./${{ matrix.image-name }}
           file: ./${{ matrix.image-name }}/Dockerfile
           build-args: NODE_VERSION=${{ matrix.node-version }}
+          platforms: linux/amd64
+          provenance: false
           load: true
           tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.node-version }}-${{ matrix.puppeteer-version }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.image-name }}-${{ matrix.node-version }}-${{ matrix.puppeteer-version }}
 
       - name: Test image
         run: docker run ${{ fromJson(steps.prepare-tags.outputs.result).firstImageName }}
@@ -222,6 +226,16 @@ jobs:
           username: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_USERNAME }}
           password: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_TOKEN }}
 
-      - name: Push images
+      - name: Build and push OCI image
         if: github.event_name != 'pull_request'
-        run: docker push apify/actor-${{ matrix.image-name }} --all-tags
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.image-name }}
+          file: ./${{ matrix.image-name }}/Dockerfile
+          build-args: NODE_VERSION=${{ matrix.node-version }}
+          platforms: linux/amd64
+          provenance: true
+          push: true
+          tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          outputs: type=image,oci-mediatypes=true
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.node-version }}-${{ matrix.puppeteer-version }}

.github/workflows/release-node.yaml

@@ -197,14 +197,18 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build and tag image
+      - name: Build and tag image for testing
         uses: docker/build-push-action@v6
         with:
           context: ./${{ matrix.image-name }}
           file: ./${{ matrix.image-name }}/Dockerfile
           build-args: NODE_VERSION=${{ matrix.node-version }}
+          platforms: linux/amd64
+          provenance: false
           load: true
           tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.node-version }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.image-name }}-${{ matrix.node-version }}
 
       - name: Test image
         run: docker run ${{ fromJson(steps.prepare-tags.outputs.result).firstImageName }}
@@ -216,6 +220,16 @@ jobs:
           username: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_USERNAME }}
           password: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_TOKEN }}
 
-      - name: Push images
+      - name: Build and push OCI image
         if: github.event_name != 'pull_request'
-        run: docker push apify/actor-${{ matrix.image-name }} --all-tags
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.image-name }}
+          file: ./${{ matrix.image-name }}/Dockerfile
+          build-args: NODE_VERSION=${{ matrix.node-version }}
+          platforms: linux/amd64,linux/arm64
+          provenance: true
+          push: true
+          tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          outputs: type=image,oci-mediatypes=true
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.node-version }}

.github/workflows/release-python-playwright.yaml

@@ -180,7 +180,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build and tag image
+      - name: Build and tag image for testing
         uses: docker/build-push-action@v6
         with:
           context: ./${{ matrix.image-name }}
@@ -189,8 +189,12 @@ jobs:
             PYTHON_VERSION=${{ matrix.python-version }}
             PLAYWRIGHT_VERSION=${{ matrix.playwright-version }}
             CAMOUFOX_VERSION=${{ matrix.camoufox-version }}
+          platforms: linux/amd64
+          provenance: false
           load: true
           tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.python-version }}-${{ matrix.playwright-version }}-${{ matrix.camoufox-version }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.image-name }}-${{ matrix.python-version }}-${{ matrix.playwright-version }}-${{ matrix.camoufox-version }}
 
       - name: Test image
         run: docker run ${{ fromJson(steps.prepare-tags.outputs.result).firstImageName }}
@@ -202,6 +206,19 @@ jobs:
           username: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_USERNAME }}
           password: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_TOKEN }}
 
-      - name: Push images
+      - name: Build and push OCI image
         if: github.event_name != 'pull_request'
-        run: docker push apify/actor-${{ matrix.image-name }} --all-tags
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.image-name }}
+          file: ./${{ matrix.image-name }}/Dockerfile
+          build-args: |
+            PYTHON_VERSION=${{ matrix.python-version }}
+            PLAYWRIGHT_VERSION=${{ matrix.playwright-version }}
+            CAMOUFOX_VERSION=${{ matrix.camoufox-version }}
+          platforms: ${{ matrix.supports-arm64 == 'true' && 'linux/amd64,linux/arm64' || 'linux/amd64' }}
+          provenance: true
+          push: true
+          tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          outputs: type=image,oci-mediatypes=true
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.python-version }}-${{ matrix.playwright-version }}-${{ matrix.camoufox-version }}

.github/workflows/release-python-selenium.yaml

@@ -157,16 +157,20 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build and tag image
+      - name: Build and tag image for testing
         uses: docker/build-push-action@v6
         with:
           context: ./${{ matrix.image-name }}
           file: ./${{ matrix.image-name }}/Dockerfile
           build-args: |
             PYTHON_VERSION=${{ matrix.python-version }}
             SELENIUM_VERSION=${{ matrix.selenium-version }}
+          platforms: linux/amd64
+          provenance: false
           load: true
           tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.python-version }}-${{ matrix.selenium-version }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.image-name }}-${{ matrix.python-version }}-${{ matrix.selenium-version }}
 
       - name: Test image
         run: docker run ${{ fromJson(steps.prepare-tags.outputs.result).firstImageName }}
@@ -178,6 +182,18 @@ jobs:
           username: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_USERNAME }}
           password: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_TOKEN }}
 
-      - name: Push images
+      - name: Build and push OCI image
         if: github.event_name != 'pull_request'
-        run: docker push apify/actor-${{ matrix.image-name }} --all-tags
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.image-name }}
+          file: ./${{ matrix.image-name }}/Dockerfile
+          build-args: |
+            PYTHON_VERSION=${{ matrix.python-version }}
+            SELENIUM_VERSION=${{ matrix.selenium-version }}
+          platforms: linux/amd64
+          provenance: true
+          push: true
+          tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          outputs: type=image,oci-mediatypes=true
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.python-version }}-${{ matrix.selenium-version }}

.github/workflows/release-python.yaml

@@ -156,15 +156,19 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build and tag image
+      - name: Build and tag image for testing
         uses: docker/build-push-action@v6
         with:
           context: ./${{ matrix.image-name }}
           file: ./${{ matrix.image-name }}/Dockerfile
           build-args: |
             PYTHON_VERSION=${{ matrix.python-version }}
+          platforms: linux/amd64
+          provenance: false
           load: true
           tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.python-version }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.image-name }}-${{ matrix.python-version }}
 
       - name: Test image
         run: docker run ${{ fromJson(steps.prepare-tags.outputs.result).firstImageName }}
@@ -176,6 +180,17 @@ jobs:
           username: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_USERNAME }}
           password: ${{ secrets.APIFY_SERVICE_ACCOUNT_DOCKERHUB_TOKEN }}
 
-      - name: Push images
+      - name: Build and push OCI image
         if: github.event_name != 'pull_request'
-        run: docker push apify/actor-${{ matrix.image-name }} --all-tags
+        uses: docker/build-push-action@v6
+        with:
+          context: ./${{ matrix.image-name }}
+          file: ./${{ matrix.image-name }}/Dockerfile
+          build-args: |
+            PYTHON_VERSION=${{ matrix.python-version }}
+          platforms: linux/amd64,linux/arm64
+          provenance: true
+          push: true
+          tags: ${{ fromJson(steps.prepare-tags.outputs.result).allTags }}
+          outputs: type=image,oci-mediatypes=true
+          cache-from: type=gha,scope=${{ matrix.image-name }}-${{ matrix.python-version }}