Merge pull request 'fix: standardize workflow versions to htpasswd pattern' (#14 ) from fix/workflow-standard into master

Reviewed-on: #14
fix: restructure tag.yaml - add test before build-push
2026-06-13 16:06:53 -04:00 · 2026-06-13 16:03:26 -04:00 · 2026-06-13 16:03:24 -04:00 · 2026-06-13 16:02:33 -04:00 · 2026-06-13 16:01:41 -04:00 · 2026-06-13 16:01:39 -04:00
6 changed files with 161 additions and 73 deletions
@@ -0,0 +1,49 @@
+name: Nightly Rebuild
+on:
+  schedule:
+    - cron: '0 0 * * *'
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        with:
+          dockerfile: Dockerfile
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  build-push:
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: get-latest-tag
+        run: |
+          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/awscli
+          tags: |
+            type=raw,value=${{ steps.get-latest-tag.outputs.tag }}-latest,enable=${{ steps.get-latest-tag.outputs.tag != '' }}
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true
@@ -1,71 +0,0 @@
-name: Docker Build and Push
-
-on:
-  pull_request:
-  push:
-    branches: [master]
-  schedule:
-    - cron: '30 3 * * 3'
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - name: Hadolint
-        uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf
-
-  build:
-    runs-on: ubuntu-latest
-    needs: lint
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - name: Build image
-        run: docker build -t ci-image:${{ github.sha }} .
-      - name: Save image
-        run: docker save ci-image:${{ github.sha }} > image.tar
-      - name: Upload artifact
-        uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2
-        with:
-          name: docker-image
-          path: image.tar
-
-  test:
-    runs-on: ubuntu-latest
-    needs: build
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - name: Download artifact
-        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7
-        with:
-          name: docker-image
-      - name: Load image
-        run: docker load < image.tar
-      - name: Run tests
-        run: bash tests/test.sh ci-image:${{ github.sha }}
-
-  push:
-    runs-on: ubuntu-latest
-    if: github.event_name != 'pull_request'
-    needs: test
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
-      - name: Download artifact
-        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7
-        with:
-          name: docker-image
-      - name: Load image
-        run: docker load < image.tar
-      - name: Login to Docker Hub
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Tag and push
-        run: |
-          docker tag ci-image:${{ github.sha }} jcabillot/awscli:latest
-          docker push jcabillot/awscli:latest
@@ -0,0 +1,44 @@
+name: Main Release
+on:
+  push:
+    branches: [master]
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        with:
+          dockerfile: Dockerfile
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  build:
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t jcabillot/awscli:${{ github.sha }} .
+  tag:
+    needs: [build]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - name: Configure git auth
+        run: |
+          git remote set-url origin "https://x-access-token:${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}@scm.cabillot.eu/perso/awscli.git"
+      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}
+          DEFAULT_BUMP: patch
+          RELEASE_BRANCHES: master
+          WITH_V: true
+          GIT_API_TAGGING: false
@@ -0,0 +1,22 @@
+name: PR Checks
+
+on:
+  pull_request:
+    branches: [master]
+
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        with:
+          dockerfile: Dockerfile
+
+  build-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
@@ -0,0 +1,44 @@
+name: Tag Release
+on:
+  push:
+    tags: ['*']
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        with:
+          dockerfile: Dockerfile
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  build-push:
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/awscli
+          tags: |
+            type=ref,event=tag
+            type=ref,event=tag,suffix=-latest
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true
@@ -1,7 +1,7 @@
-FROM python:3.9-alpine
+FROM python:3.14-alpine
 LABEL maintainer="Julien Cabillot <dockerimages@cabillot.eu>"

-ARG CLI_VERSION=1.16.148
+ARG CLI_VERSION=1.45.27

 # hadolint ignore=DL3018,DL3013
 RUN apk --no-cache upgrade && \
Author	SHA1	Message	Date
jcabillot	c906b2e4a1	Merge pull request 'fix: standardize workflow versions to htpasswd pattern' (#14 ) from fix/workflow-standard into master Main Release / hadolint (push) Successful in 7s Details Main Release / test (push) Successful in 13s Details Main Release / build (push) Successful in 10s Details Main Release / tag (push) Successful in 11s Details Tag Release / hadolint (push) Successful in 6s Details Tag Release / test (push) Successful in 13s Details Tag Release / build-push (push) Successful in 1m1s Details Reviewed-on: #14	2026-06-13 16:06:53 -04:00
cloudix_mcp_server	932fa3c2df	fix: restructure tag.yaml - add test before build-push PR Checks / build-test (pull_request) Successful in 15s Details PR Checks / hadolint (pull_request) Successful in 7s Details	2026-06-13 16:03:26 -04:00
cloudix_mcp_server	bcee546c0e	fix: restructure cron.yaml - add test job, remove :latest tag	2026-06-13 16:03:24 -04:00
cloudix_mcp_server	32c0fed028	fix: restructure main.yaml - test mandatory before build, no Docker push on master PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 14s Details	2026-06-13 16:02:33 -04:00
cloudix_mcp_server	9bf1b2d71d	fix: standardize workflow versions to htpasswd pattern PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 12s Details	2026-06-13 16:01:41 -04:00
cloudix_mcp_server	41a39dde88	fix: standardize workflow versions to htpasswd pattern, keep original cron schedule	2026-06-13 16:01:39 -04:00
cloudix_mcp_server	0fa6925126	fix: standardize workflow versions to htpasswd pattern (v6 without patch)	2026-06-13 16:01:25 -04:00
jcabillot	3169d3844c	Merge pull request 'feat(ci): refactor pipelines — hadolint, PR checks, tag releases, nightly rebuild' (#13 ) from feat/ci-migration into master Main Release / hadolint (push) Successful in 7s Details Main Release / test (push) Successful in 14s Details Main Release / tag (push) Successful in 13s Details Main Release / build-push (push) Successful in 1m2s Details Reviewed-on: #13	2026-06-12 15:27:48 -04:00
cloudix_mcp_server	475506e043	fix(ci): correct action SHAs in cron.yaml PR Checks / build-test (pull_request) Successful in 17s Details PR Checks / hadolint (pull_request) Successful in 7s Details	2026-06-12 15:17:33 -04:00
cloudix_mcp_server	aedeebf964	fix(ci): correct action SHAs in tag.yaml PR Checks / hadolint (pull_request) Successful in 11s Details PR Checks / build-test (pull_request) Successful in 45s Details	2026-06-12 15:17:27 -04:00
cloudix_mcp_server	9b5acc06bc	fix(ci): correct action SHAs in main.yaml	2026-06-12 15:17:21 -04:00
cloudix_mcp_server	15a62d1267	fix(ci): correct actions/checkout and setup-buildx SHAs in pr.yaml PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Successful in 38s Details	2026-06-12 15:16:55 -04:00
cloudix_mcp_server	f5b33b731d	feat(ci): remove old single-file workflow PR Checks / build-test (pull_request) Failing after 2s Details PR Checks / hadolint (pull_request) Failing after 9s Details	2026-06-12 15:10:59 -04:00
cloudix_mcp_server	bc208b712e	feat(ci): add nightly rebuild workflow	2026-06-12 15:10:53 -04:00
cloudix_mcp_server	b5c00eda74	feat(ci): add tag release workflow	2026-06-12 15:10:45 -04:00
cloudix_mcp_server	5b84a35169	feat(ci): add main release workflow	2026-06-12 15:10:44 -04:00
cloudix_mcp_server	6207e6c9ae	feat(ci): add PR checks workflow	2026-06-12 15:10:42 -04:00
jcabillot	49b56619c3	Merge pull request 'ci: add automatic semver tagging on merge to master' (#12 ) from feat/semver-tag-action into master Docker Build and Push / lint (push) Successful in 6s Details Docker Build and Push / build (push) Successful in 56s Details Docker Build and Push / test (push) Successful in 19s Details Docker Build and Push / push (push) Failing after 43s Details Reviewed-on: #12	2026-06-12 13:45:02 -04:00
cloudix_mcp_server	91d751570a	ci: add automatic semver tagging on merge to master Docker Build and Push / lint (pull_request) Successful in 5s Details Docker Build and Push / build (pull_request) Successful in 1m11s Details Docker Build and Push / test (pull_request) Successful in 17s Details Docker Build and Push / push (pull_request) Has been skipped Details	2026-06-12 13:14:18 -04:00
jcabillot	7537595b3d	Merge pull request 'chore(deps): update hadolint/hadolint-action action to v3.3.0' (#11 ) from renovate/hadolint-hadolint-action-3.x into master Docker Build and Push / lint (push) Successful in 5s Details Docker Build and Push / build (push) Successful in 1m3s Details Docker Build and Push / test (push) Successful in 19s Details Docker Build and Push / push (push) Successful in 27s Details Reviewed-on: #11	2026-06-12 07:52:34 -04:00
renovate	9dc2840717	chore(deps): update hadolint/hadolint-action action to v3.3.0 Docker Build and Push / lint (pull_request) Successful in 7s Details Docker Build and Push / build (pull_request) Successful in 27s Details Docker Build and Push / test (pull_request) Successful in 17s Details Docker Build and Push / push (pull_request) Has been skipped Details	2026-06-12 01:15:39 +00:00
jcabillot	36dbc52026	Merge pull request 'fix: add version comments to Gitea Actions workflow' (#10 ) from fix/action-version-comments into master Docker Build and Push / lint (push) Successful in 5s Details Docker Build and Push / build (push) Successful in 58s Details Docker Build and Push / test (push) Successful in 18s Details Docker Build and Push / push (push) Successful in 28s Details Reviewed-on: #10	2026-06-11 21:13:19 -04:00
cloudix_mcp_server	c3104c6881	fix: rewrite workflow with correct YAML (was double-encoded) Docker Build and Push / lint (pull_request) Successful in 6s Details Docker Build and Push / build (pull_request) Successful in 59s Details Docker Build and Push / test (pull_request) Successful in 21s Details Docker Build and Push / push (pull_request) Has been skipped Details	2026-06-11 19:24:27 -04:00
cloudix_mcp_server	97c2a8f4bd	fix: add version comments to Gitea Actions workflow	2026-06-11 18:47:27 -04:00
cloudix_mcp_server	69f1b75e14	Merge pull request 'fix: update awscli to v1.45.27 for Python 3.12+ compatibility' (#9 ) from fix/update-awscli-v1 into master Docker Build and Push / lint (push) Successful in 6s Details Docker Build and Push / build (push) Successful in 47s Details Docker Build and Push / test (push) Successful in 11s Details Docker Build and Push / push (push) Successful in 31s Details	2026-06-10 20:24:32 -04:00
Sagent	9a1561d2ad	fix: bump Python 3.9→3.14 and awscli 1.16.148→1.45.27 Docker Build and Push / lint (pull_request) Successful in 6s Details Docker Build and Push / build (pull_request) Successful in 46s Details Docker Build and Push / test (pull_request) Successful in 17s Details Docker Build and Push / push (pull_request) Has been skipped Details - Python 3.14 image for latest Python compatibility - awscli 1.45.27 drops vendored urllib3 with 'from collections import Mapping' (removed in Python 3.12+) and supports Python >=3.10	2026-06-10 23:50:37 +00:00
Sagent	83f8fc197f	fix: update awscli to v1.45.27 for Python 3.12+ compatibility Docker Build and Push / lint (pull_request) Successful in 5s Details Docker Build and Push / build (pull_request) Failing after 15s Details Docker Build and Push / test (pull_request) Has been skipped Details Docker Build and Push / push (pull_request) Has been skipped Details	2026-06-10 23:44:00 +00:00