2.2.0

.github/workflows/build-and-push.yml

@@ -1,3 +1,4 @@
+---
 name: Build and Publish Docker Image
 
 on:
@@ -22,128 +23,133 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout Repository
-              uses: actions/checkout@v6
+              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
               with:
-                  ref: ${{ github.ref }}
+                ref: ${{ github.ref }}
+                persist-credentials: false
 
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
             - name: Login to DockerHub
-              uses: docker/login-action@v3
+              uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
               with:
-                  username: ${{ secrets.DOCKER_USERNAME }}
-                  password: ${{ secrets.DOCKER_PASSWORD }}
+                username: ${{ secrets.DOCKER_USERNAME }}
+                password: ${{ secrets.DOCKER_PASSWORD }}
 
             - name: Login to GitHub Container Registry
-              uses: docker/login-action@v3
+              uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
               with:
-                  registry: ghcr.io
-                  username: ${{ github.repository_owner }}
-                  password: ${{ secrets.GITHUB_TOKEN }}
+                registry: ghcr.io
+                username: ${{ github.repository_owner }}
+                password: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Extract version information
               id: version_info
               run: |
-                  if [ -f ".last_release" ]; then
-                    PHOTON_VERSION=$(cat .last_release | tr -d '[:space:]')
-
-                    if [[ -z "$PHOTON_VERSION" || ! "$PHOTON_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
-                      echo "Error: .last_release is missing, empty, or contains an invalid version: '$PHOTON_VERSION'"
-                      exit 1
-                    fi
-                    echo "Read photon version from .last_release: $PHOTON_VERSION"
-                  else
-                    PHOTON_VERSION="${{ github.event.inputs.photon_version }}"
-                    if [[ -z "$PHOTON_VERSION" ]]; then
-                      echo "Error: PHOTON_VERSION must be provided when .last_release file is missing"
-                      exit 1
-                    fi
-                  fi
+                if [ -f ".last_release" ]; then
+                  PHOTON_VERSION=$(cat .last_release | tr -d '[:space:]')
 
-                  if [ "${{ github.event_name }}" == "release" ]; then
-                    CONTAINER_VERSION="${{ github.event.release.tag_name }}"
-                    CONTAINER_VERSION="${CONTAINER_VERSION#v}"
-                    IS_PRERELEASE="${{ github.event.release.prerelease }}"
-                  elif [ "${{ github.event_name }}" == "push" ] && [ "${{ github.ref }}" == "refs/heads/dev" ]; then
-                    SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
-                    CONTAINER_VERSION="dev-${SHORT_SHA}"
-                    IS_PRERELEASE="true"
-                  elif [ "${{ github.event_name }}" == "pull_request" ]; then
-                    CONTAINER_VERSION="pr-${{ github.event.pull_request.number }}"
+                  if [[ -z "$PHOTON_VERSION" || ! "$PHOTON_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+                    echo "Error: .last_release is missing, empty, or contains an invalid version: '$PHOTON_VERSION'"
+                    exit 1
+                  fi
+                  echo "Read photon version from .last_release: $PHOTON_VERSION"
+                else
+                  PHOTON_VERSION="${GITHUB_EVENT_INPUTS_PHOTON_VERSION}"
+                  if [[ -z "$PHOTON_VERSION" ]]; then
+                    echo "Error: PHOTON_VERSION must be provided when .last_release file is missing"
+                    exit 1
+                  fi
+                fi
+
+                if [ "${{ github.event_name }}" == "release" ]; then
+                  CONTAINER_VERSION="${GITHUB_EVENT_RELEASE_TAG_NAME}"
+                  CONTAINER_VERSION="${CONTAINER_VERSION#v}"
+                  IS_PRERELEASE="${{ github.event.release.prerelease }}"
+                elif [ "${{ github.event_name }}" == "push" ] && [ "${GITHUB_REF}" == "refs/heads/dev" ]; then
+                  SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
+                  CONTAINER_VERSION="dev-${SHORT_SHA}"
+                  IS_PRERELEASE="true"
+                elif [ "${{ github.event_name }}" == "pull_request" ]; then
+                  CONTAINER_VERSION="pr-${{ github.event.pull_request.number }}"
+                  IS_PRERELEASE="true"
+                else
+                  CONTAINER_VERSION="${GITHUB_EVENT_INPUTS_CONTAINER_VERSION}"
+                  CONTAINER_VERSION="${CONTAINER_VERSION#v}"
+
+                  if [[ "$CONTAINER_VERSION" == *"-beta"* ]]; then
                     IS_PRERELEASE="true"
                   else
-                    CONTAINER_VERSION="${{ github.event.inputs.container_version }}"
-                    CONTAINER_VERSION="${CONTAINER_VERSION#v}"
-
-                    if [[ "$CONTAINER_VERSION" == *"-beta"* ]]; then
-                      IS_PRERELEASE="true"
-                    else
-                      IS_PRERELEASE="false"
-                    fi
+                    IS_PRERELEASE="false"
                   fi
+                fi
 
-                  echo "CONTAINER_VERSION=$CONTAINER_VERSION" >> "$GITHUB_ENV"
-                  echo "PHOTON_VERSION=$PHOTON_VERSION" >> "$GITHUB_ENV"
-                  echo "IS_PRERELEASE=$IS_PRERELEASE" >> "$GITHUB_ENV"
+                echo "CONTAINER_VERSION=$CONTAINER_VERSION" >> "$GITHUB_ENV"
+                echo "PHOTON_VERSION=$PHOTON_VERSION" >> "$GITHUB_ENV"
+                echo "IS_PRERELEASE=$IS_PRERELEASE" >> "$GITHUB_ENV"
 
-                  echo "Container Version: $CONTAINER_VERSION"
-                  echo "Photon Version: $PHOTON_VERSION"
-                  echo "Is Prerelease: $IS_PRERELEASE"
+                echo "Container Version: $CONTAINER_VERSION"
+                echo "Photon Version: $PHOTON_VERSION"
+                echo "Is Prerelease: $IS_PRERELEASE"
+              env:
+                GITHUB_EVENT_INPUTS_PHOTON_VERSION: ${{ github.event.inputs.photon_version }}
+                GITHUB_EVENT_RELEASE_TAG_NAME: ${{ github.event.release.tag_name }}
+                GITHUB_EVENT_INPUTS_CONTAINER_VERSION: ${{ github.event.inputs.container_version }}
 
             - name: Generate Docker tags with semver support
               id: generate_tags
               run: |
-                  CONTAINER_VERSION="${{ env.CONTAINER_VERSION }}"
-                  IS_PRERELEASE="${{ env.IS_PRERELEASE }}"
-
-                  REPO_NAME="${{ github.repository }}"
-                  DOCKERHUB_REPO="${REPO_NAME,,}"
-                  GHCR_REPO="ghcr.io/${REPO_NAME,,}"
-
-                  TAGS="$DOCKERHUB_REPO:$CONTAINER_VERSION,$GHCR_REPO:$CONTAINER_VERSION"
-
-                  if [ "${{ github.event_name }}" == "push" ] && [ "${{ github.ref }}" == "refs/heads/dev" ]; then
-                    TAGS="$TAGS,$DOCKERHUB_REPO:dev,$GHCR_REPO:dev"
-                  elif [ "$IS_PRERELEASE" == "true" ]; then
-                    TAGS="$TAGS,$DOCKERHUB_REPO:beta,$GHCR_REPO:beta"
+                CONTAINER_VERSION="${CONTAINER_VERSION}"
+                IS_PRERELEASE="${IS_PRERELEASE}"
+
+                REPO_NAME="${{ github.repository }}"
+                DOCKERHUB_REPO="${REPO_NAME,,}"
+                GHCR_REPO="ghcr.io/${REPO_NAME,,}"
+
+                TAGS="$DOCKERHUB_REPO:$CONTAINER_VERSION,$GHCR_REPO:$CONTAINER_VERSION"
+
+                if [ "${{ github.event_name }}" == "push" ] && [ "${GITHUB_REF}" == "refs/heads/dev" ]; then
+                  TAGS="$TAGS,$DOCKERHUB_REPO:dev,$GHCR_REPO:dev"
+                elif [ "$IS_PRERELEASE" == "true" ]; then
+                  TAGS="$TAGS,$DOCKERHUB_REPO:beta,$GHCR_REPO:beta"
+                else
+                  if [[ "$CONTAINER_VERSION" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+)$ ]]; then
+                    MAJOR="${BASH_REMATCH[1]}"
+                    MINOR="${BASH_REMATCH[2]}"
+                    PATCH="${BASH_REMATCH[3]}"
+
+                    TAGS="$TAGS,$DOCKERHUB_REPO:$MAJOR,$GHCR_REPO:$MAJOR"
+                    TAGS="$TAGS,$DOCKERHUB_REPO:$MAJOR.$MINOR,$GHCR_REPO:$MAJOR.$MINOR"
+                    TAGS="$TAGS,$DOCKERHUB_REPO:$MAJOR.$MINOR.$PATCH,$GHCR_REPO:$MAJOR.$MINOR.$PATCH"
+                    TAGS="$TAGS,$DOCKERHUB_REPO:latest,$GHCR_REPO:latest"
+
+                    echo "Generated semver tags for version $MAJOR.$MINOR.$PATCH"
                   else
-                    if [[ "$CONTAINER_VERSION" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+)$ ]]; then
-                      MAJOR="${BASH_REMATCH[1]}"
-                      MINOR="${BASH_REMATCH[2]}"
-                      PATCH="${BASH_REMATCH[3]}"
-
-                      TAGS="$TAGS,$DOCKERHUB_REPO:$MAJOR,$GHCR_REPO:$MAJOR"
-                      TAGS="$TAGS,$DOCKERHUB_REPO:$MAJOR.$MINOR,$GHCR_REPO:$MAJOR.$MINOR"
-                      TAGS="$TAGS,$DOCKERHUB_REPO:$MAJOR.$MINOR.$PATCH,$GHCR_REPO:$MAJOR.$MINOR.$PATCH"
-                      TAGS="$TAGS,$DOCKERHUB_REPO:latest,$GHCR_REPO:latest"
-
-                      echo "Generated semver tags for version $MAJOR.$MINOR.$PATCH"
-                    else
-                      echo "Version doesn't match semver pattern, skipping semver tags"
-                      TAGS="$TAGS,$DOCKERHUB_REPO:latest,$GHCR_REPO:latest"
-                    fi
+                    echo "Version doesn't match semver pattern, skipping semver tags"
+                    TAGS="$TAGS,$DOCKERHUB_REPO:latest,$GHCR_REPO:latest"
                   fi
+                fi
 
-                  echo "DOCKER_TAGS=$TAGS" >> "$GITHUB_ENV"
-                  echo "Generated tags: $TAGS"
+                echo "DOCKER_TAGS=$TAGS" >> "$GITHUB_ENV"
+                echo "Generated tags: $TAGS"
 
             - name: Build and push Docker image
-              uses: docker/build-push-action@v6
+              uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
               with:
-                  build-args: |
-                      PHOTON_VERSION=${{ env.PHOTON_VERSION }}
-                  push: true
-                  tags: ${{ env.DOCKER_TAGS }}
-                  platforms: linux/amd64,linux/arm64
-                  cache-from: type=gha
-                  cache-to: type=gha,mode=max
+                build-args: |
+                    PHOTON_VERSION=${{ env.PHOTON_VERSION }}
+                push: true
+                tags: ${{ env.DOCKER_TAGS }}
+                platforms: linux/amd64,linux/arm64
+                cache-from: type=gha
+                cache-to: type=gha,mode=max
 
             - name: Output summary
               run: |
-                  echo "## Docker Build Summary" >> $GITHUB_STEP_SUMMARY
-                  echo "- **Event:** ${{ github.event_name }}" >> $GITHUB_STEP_SUMMARY
-                  echo "- **Container Version:** ${{ env.CONTAINER_VERSION }}" >> $GITHUB_STEP_SUMMARY
-                  echo "- **Photon Version:** ${{ env.PHOTON_VERSION }}" >> $GITHUB_STEP_SUMMARY
-                  echo "- **Is Prerelease:** ${{ env.IS_PRERELEASE }}" >> $GITHUB_STEP_SUMMARY
-                  echo "- **Tags:** ${{ env.DOCKER_TAGS }}" >> $GITHUB_STEP_SUMMARY
+                echo "## Docker Build Summary" >> $GITHUB_STEP_SUMMARY
+                echo "- **Event:** ${{ github.event_name }}" >> $GITHUB_STEP_SUMMARY
+                echo "- **Container Version:** ${CONTAINER_VERSION}" >> $GITHUB_STEP_SUMMARY
+                echo "- **Photon Version:** ${PHOTON_VERSION}" >> $GITHUB_STEP_SUMMARY
+                echo "- **Is Prerelease:** ${IS_PRERELEASE}" >> $GITHUB_STEP_SUMMARY
+                echo "- **Tags:** ${DOCKER_TAGS}" >> $GITHUB_STEP_SUMMARY