mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
b055eece05
The workflows pin `runs-on: ubuntu-NN.NN`, so no job moves to a new Ubuntu release behind our back, but nothing raised the pin either. A sixth job of `🔄 Update versions` closes that: `utils/update/runner.py` reads the image table of actions/runner-images, takes the newest x64 Ubuntu label whose image carries no preview or beta badge, and raises every older bare `runs-on: ubuntu-NN.NN` to it; arch-suffixed labels stay untouched. The job opens the change as one PR over `.github/workflows`, so its CI run tests the new image before it reaches main. This commit carries the updater's first result: every job now runs on ubuntu-26.04 (49 `runs-on`). actionlint 1.7.12, the newest release, does not know `ubuntu-26.04` yet (rhysd/actionlint#682, fix proposed in rhysd/actionlint#743), so `.github/actionlint.yaml` declares the label until a release knows it. act maps each `ubuntu-NN.NN` label the workflows use to the local platform image, derived from `.github/workflows`, instead of a fixed list that did not know ubuntu-26.04. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
89 lines
2.6 KiB
YAML
89 lines
2.6 KiB
YAML
name: "🧹 Images: Cleanup GHCR"
|
|
run-name: "🧹 Images: Cleanup GHCR (Private)"
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
ghcr_namespace:
|
|
description: "🏛️ GHCR namespace/org (default: repository owner)"
|
|
required: false
|
|
type: string
|
|
default: ""
|
|
ghcr_prefix:
|
|
description: "🏷️ Package name prefix to delete (default: mirror)"
|
|
required: false
|
|
type: string
|
|
default: "mirror"
|
|
visibility:
|
|
description: "👁️ Visibility filter: only these packages are deleted"
|
|
required: false
|
|
type: choice
|
|
default: "private"
|
|
options:
|
|
- private
|
|
- public
|
|
- internal
|
|
dry_run:
|
|
description: "🧪 Dry-run: list what would be deleted without deleting it"
|
|
required: false
|
|
type: boolean
|
|
default: true
|
|
token:
|
|
description: "🔑 Classic PAT with delete:packages. Empty: the default GITHUB_TOKEN"
|
|
required: false
|
|
type: string
|
|
default: ""
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
cleanup:
|
|
name: 🗑️ Delete private GHCR mirror packages
|
|
runs-on: ubuntu-26.04
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
steps:
|
|
- name: ⬇️ Checkout
|
|
uses: actions/checkout@v7.0.0
|
|
|
|
- name: 🔍 Resolve GHCR namespace and repository
|
|
id: vars
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
ghcr_namespace="${{ inputs.ghcr_namespace }}"
|
|
if [[ -z "${ghcr_namespace}" ]]; then
|
|
ghcr_namespace="$(scripts/meta/resolve/repository/owner.sh)"
|
|
fi
|
|
ghcr_repository="$(scripts/meta/resolve/repository/name.sh)"
|
|
echo "ghcr_namespace=${ghcr_namespace,,}" >> "$GITHUB_OUTPUT"
|
|
echo "ghcr_repository=${ghcr_repository}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: 🔧 Setup Python
|
|
uses: actions/setup-python@v6
|
|
with:
|
|
python-version: "3.12"
|
|
cache: pip
|
|
cache-dependency-path: pyproject.toml
|
|
|
|
- name: ▶️ Run mirror cleanup
|
|
shell: bash
|
|
env:
|
|
GITHUB_TOKEN: ${{ inputs.token != '' && inputs.token || secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
EXTRA_ARGS=()
|
|
if [[ "${{ inputs.dry_run }}" == "true" ]]; then
|
|
EXTRA_ARGS+=( --dry-run )
|
|
fi
|
|
|
|
python -m cli.contributing.mirror.cleanup \
|
|
--ghcr-namespace "${{ steps.vars.outputs.ghcr_namespace }}" \
|
|
--ghcr-prefix "${{ steps.vars.outputs.ghcr_repository }}/${{ inputs.ghcr_prefix }}" \
|
|
--visibility "${{ inputs.visibility }}" \
|
|
"${EXTRA_ARGS[@]}"
|