fix: align OCI workflow with storefront release pattern #4
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/align-with-storefront-release-flow"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Mirrors the storefront repo's release flow so contributors share one mental model across the org. The previous fix narrowed the build trigger to v* tags only and removed the rolling latest tag; both decisions reverted here.
Restores main + tag + paths trigger so every relevant push to main produces an updated :latest image (validation + tip-of-main deploys), and v* tag pushes additionally produce a pinned :vX.Y.Z image. Path filter matches the previous list (src, migrations, .cargo, Cargo.{toml,lock}, oci-build, the workflow file).
Restores get-tags.nu to storefront-style logic: tagged or post-tag commits emit [vX.Y.Z, latest]; untagged commits emit [latest] only. The "empty list = skip push" path is gone.
Reverts the hardcoded REGISTRY_USER/IMAGE_REGISTRY values back to deriving from github.repository_owner so this stays portable if the repo moves.
Switches the build cache from a separate :buildcache tag to the storefront pattern: --cache-from points at the :latest registry tag and --cache-to is type=inline. Matches the storefront workflow exactly.
Keeps the image name as mokosh-api (so it lines up with template/mokosh-api/compose.yml in NiceGuyIT/docker rather than the repo name mokosh-server).
Keeps the GIT_SHA --build-arg and the org.opencontainers.image.revision label that surfaces it on the runtime image. Storefront does not have this; preserved here as a strict win for traceability.
The existing create-release.yml is already correct (storefront-style with pull_request/closed trigger and the if-condition at the job level), so it is unchanged.
Mirrors the storefront repo's release flow so contributors share one mental model across the org. The previous fix narrowed the build trigger to v* tags only and removed the rolling latest tag; both decisions reverted here. - Restores main + tag + paths trigger so every relevant push to main produces an updated :latest image (validation + tip-of-main deploys), and v* tag pushes additionally produce a pinned :vX.Y.Z image. Path filter matches the previous list (src, migrations, .cargo, Cargo.{toml,lock}, oci-build, the workflow file). - Restores get-tags.nu to storefront-style logic: tagged or post-tag commits emit [vX.Y.Z, latest]; untagged commits emit [latest] only. The "empty list = skip push" path is gone. - Reverts the hardcoded REGISTRY_USER/IMAGE_REGISTRY values back to deriving from github.repository_owner so this stays portable if the repo moves. - Switches the build cache from a separate :buildcache tag to the storefront pattern: --cache-from points at the :latest registry tag and --cache-to is type=inline. Matches the storefront workflow exactly. - Keeps the image name as mokosh-api (so it lines up with template/mokosh-api/compose.yml in NiceGuyIT/docker rather than the repo name mokosh-server). - Keeps the GIT_SHA --build-arg and the org.opencontainers.image.revision label that surfaces it on the runtime image. Storefront does not have this; preserved here as a strict win for traceability. The existing create-release.yml is already correct (storefront-style with pull_request/closed trigger and the if-condition at the job level), so it is unchanged.