mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
kevinveenbirkenbachandClaude Opus 5.5
b055eece05
The workflows pin `runs-on: ubuntu-NN.NN`, so no job moves to a new Ubuntu release behind our back, but nothing raised the pin either. A sixth job of `🔄 Update versions` closes that: `utils/update/runner.py` reads the image table of actions/runner-images, takes the newest x64 Ubuntu label whose image carries no preview or beta badge, and raises every older bare `runs-on: ubuntu-NN.NN` to it; arch-suffixed labels stay untouched. The job opens the change as one PR over `.github/workflows`, so its CI run tests the new image before it reaches main. This commit carries the updater's first result: every job now runs on ubuntu-26.04 (49 `runs-on`). actionlint 1.7.12, the newest release, does not know `ubuntu-26.04` yet (rhysd/actionlint#682, fix proposed in rhysd/actionlint#743), so `.github/actionlint.yaml` declares the label until a release knows it. act maps each `ubuntu-NN.NN` label the workflows use to the local platform image, derived from `.github/workflows`, instead of a fixed list that did not know ubuntu-26.04. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
83 lines
2.3 KiB
YAML
83 lines
2.3 KiB
YAML
name: "🚀 Release missing tag"
|
|
run-name: "${{ github.event_name == 'schedule' && '⏰ ' || '' }}🚀 Release missing tag"
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 0 * * *"
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: infinito-release
|
|
cancel-in-progress: false
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
env:
|
|
REGISTRY: ghcr.io
|
|
|
|
jobs:
|
|
check-and-trigger:
|
|
name: 🔎 Backfill highest missing release tag
|
|
runs-on: ubuntu-26.04
|
|
permissions:
|
|
contents: read
|
|
packages: read
|
|
actions: write
|
|
|
|
steps:
|
|
- name: ⬇️ Checkout repository (with tags)
|
|
uses: actions/checkout@v7.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
fetch-tags: true
|
|
|
|
- name: 🔍 Resolve image metadata
|
|
id: vars
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
source scripts/meta/env/load.sh
|
|
owner="$(scripts/meta/resolve/repository/owner.sh)"
|
|
repo_prefix="$(scripts/meta/resolve/repository/name.sh)"
|
|
{
|
|
echo "owner=${owner}"
|
|
echo "repo_prefix=${repo_prefix}"
|
|
echo "distros=${INFINITO_DISTROS}"
|
|
} >> "$GITHUB_OUTPUT"
|
|
|
|
- name: 🔑 Login to GHCR (for manifest checks)
|
|
uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
|
|
with:
|
|
registry: ${{ env.REGISTRY }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: 🤔 Determine highest version tag with missing release image
|
|
id: pick
|
|
shell: bash
|
|
env:
|
|
OWNER: ${{ steps.vars.outputs.owner }}
|
|
REPO_PREFIX: ${{ steps.vars.outputs.repo_prefix }}
|
|
INFINITO_DISTROS: ${{ steps.vars.outputs.distros }}
|
|
run: |
|
|
set -euo pipefail
|
|
tag="$(scripts/meta/resolve/missing/highest_release_tag.sh)"
|
|
echo "tag=${tag}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: ✅ Ensure GitHub CLI is available
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
if command -v gh >/dev/null 2>&1; then
|
|
exit 0
|
|
fi
|
|
./scripts/install/apt.sh gh
|
|
|
|
- name: ⚡ Trigger release workflow for missing tag
|
|
if: ${{ steps.pick.outputs.tag != '' }}
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
TAG: ${{ steps.pick.outputs.tag }}
|
|
run: gh workflow run call-release-version.yml -f tag="${TAG}"
|