Merge pull request 'chore(deps): update docker/build-push-action action to v7.3.0' (#16 ) from renovate/docker-build-push-action-7.x into master

Reviewed-on: #16
chore(deps): update docker/build-push-action action to v7.3.0
2026-07-01 16:23:16 -04:00 · 2026-07-01 14:54:07 +00:00 · 2026-06-22 11:45:06 -04:00 · 2026-06-18 15:29:32 +00:00 · 2026-06-13 14:55:00 -04:00 · 2026-06-13 14:54:57 -04:00
4 changed files with 42 additions and 40 deletions
@@ -6,15 +6,23 @@ jobs:
  hadolint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
-  build-push:
+  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  build-push:
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          fetch-depth: 0
      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
@@ -31,9 +39,8 @@ jobs:
        with:
          images: jcabillot/offlineimap
          tags: |
-            type=raw,value=latest
-            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+            type=raw,value=${{ steps.get-latest-tag.outputs.tag }}-latest,enable=${{ steps.get-latest-tag.outputs.tag != '' }}
+      - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: .
          push: true
@@ -6,52 +6,38 @@ jobs:
  hadolint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
-        with:
-          images: jcabillot/offlineimap
-          tags: |
-            type=raw,value=latest
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
      - run: docker build -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
-  tag:
+  build:
+    needs: [test]
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t jcabillot/offlineimap:${{ github.sha }} .
+  tag:
+    needs: [build]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
        with:
          fetch-depth: 0
      - name: Configure git auth
        run: |
-          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/offlineimap.git"
+          git remote set-url origin "https://x-access-token:${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}@scm.cabillot.eu/perso/offlineimap.git"
      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}
          DEFAULT_BUMP: patch
          RELEASE_BRANCHES: master
          WITH_V: true
@@ -6,7 +6,7 @@ jobs:
  hadolint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        continue-on-error: true
        with:
@@ -14,7 +14,7 @@ jobs:
  build-test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
      - run: docker build -t ci-image:${{ github.sha }} .
      - run: bash tests/test.sh ci-image:${{ github.sha }}
@@ -6,15 +6,23 @@ jobs:
  hadolint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
        continue-on-error: true
        with:
          dockerfile: Dockerfile
-  build-push:
+  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  build-push:
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
        with:
@@ -26,7 +34,8 @@ jobs:
          images: jcabillot/offlineimap
          tags: |
            type=ref,event=tag
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+            type=ref,event=tag,suffix=-latest
+      - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: .
          push: true
Author	SHA1	Message	Date
jcabillot	6bf03ec83f	Merge pull request 'chore(deps): update docker/build-push-action action to v7.3.0' (#16 ) from renovate/docker-build-push-action-7.x into master Main Release / hadolint (push) Successful in 11s Details Main Release / test (push) Successful in 33s Details Main Release / build (push) Successful in 27s Details Main Release / tag (push) Successful in 13s Details Tag Release / hadolint (push) Successful in 7s Details Tag Release / test (push) Successful in 19s Details Tag Release / build-push (push) Successful in 56s Details Reviewed-on: #16	2026-07-01 16:23:16 -04:00
renovate	8dc41997b7	chore(deps): update docker/build-push-action action to v7.3.0 PR Checks / hadolint (pull_request) Successful in 8s Details PR Checks / build-test (pull_request) Successful in 22s Details	2026-07-01 14:54:07 +00:00
jcabillot	7e2d57d7a0	Merge pull request 'chore(deps): update actions/checkout action to v7' (#15 ) from renovate/actions-checkout-7.x into master Main Release / test (push) Successful in 18s Details Main Release / build (push) Successful in 13s Details Main Release / tag (push) Successful in 19s Details Tag Release / hadolint (push) Successful in 11s Details Tag Release / test (push) Successful in 24s Details Tag Release / build-push (push) Successful in 48s Details Main Release / hadolint (push) Has been cancelled Details Reviewed-on: #15	2026-06-22 11:45:06 -04:00
renovate	5e631d80a7	chore(deps): update actions/checkout action to v7 PR Checks / build-test (pull_request) Successful in 21s Details PR Checks / hadolint (pull_request) Successful in 6s Details	2026-06-18 15:29:32 +00:00
cloudix_mcp_server	fff3c9f6e2	fix: restore tag.yaml from base64 corruption to proper YAML Main Release / hadolint (push) Successful in 7s Details Main Release / test (push) Successful in 12s Details Main Release / build (push) Successful in 12s Details Main Release / tag (push) Successful in 13s Details Tag Release / test (push) Failing after 13m46s Details Tag Release / hadolint (push) Failing after 13m47s Details Tag Release / build-push (push) Has been skipped Details tag: test before build-push, keeps vX.Y.Z and vX.Y.Z-latest tags	2026-06-13 14:55:00 -04:00
cloudix_mcp_server	bbb6e677de	fix: restore cron.yaml from base64 corruption to proper YAML Main Release / hadolint (push) Successful in 9s Details Main Release / test (push) Successful in 15s Details Main Release / build (push) Successful in 14s Details Main Release / tag (push) Successful in 14s Details cron: test before build-push, removed :latest, keeps $TAG-latest	2026-06-13 14:54:57 -04:00
cloudix_mcp_server	d260b56c5b	fix: restore main.yaml from base64 corruption to proper YAML Main Release / hadolint (push) Successful in 6s Details Main Release / test (push) Successful in 13s Details Main Release / build (push) Successful in 12s Details Main Release / tag (push) Successful in 12s Details main: no Docker push, build only, test mandatory before build, tag follows	2026-06-13 14:54:55 -04:00
jcabillot	7d37ef7bcb	Merge pull request 'CI: tests obligatoires avant push, abandon du tag :latest sur master' (#14 ) from fix/workflow-test-before-push into master Reviewed-on: #14	2026-06-13 14:28:56 -04:00
cloudix_mcp_server	88cac8d90c	tag: add test job before build-push PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Successful in 13s Details - Add test job (build + run tests) - build-push now needs: [test] - Tests must pass before pushing tagged release to DockerHub	2026-06-13 14:25:55 -04:00
cloudix_mcp_server	ae49ab2f80	cron: add test job before build-push, remove :latest tag - Add test job (build + run tests) - build-push now needs: [test] - Remove type=raw,value=latest tag - Keep type=raw,value=$TAG-latest for the latest versioned tag	2026-06-13 14:25:53 -04:00
cloudix_mcp_server	ceb840bfe5	main: remove Docker push, keep only build+test+tag - Remove docker/login-action, docker/metadata-action, docker/build-push-action - Rename build-push to build (just docker build, no push) - Tag job now depends on build - Push to DockerHub is handled solely by tag.yaml now	2026-06-13 14:25:50 -04:00
jcabillot	2e9cb26503	Merge pull request 'tweak: tag strategy (stable + -latest) and sequential job deps on main' (#13 ) from tweak/tag-strategy-and-job-deps into master Main Release / hadolint (push) Successful in 6s Details Main Release / test (push) Successful in 12s Details Main Release / build-push (push) Successful in 36s Details Main Release / tag (push) Successful in 10s Details Tag Release / hadolint (push) Successful in 6s Details Tag Release / build-push (push) Successful in 36s Details Reviewed-on: #13	2026-06-13 14:13:57 -04:00
cloudix_mcp_server	0cf0060855	feat(main): sequential job deps — test → build-push → tag (mandatory) PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 12s Details	2026-06-13 14:12:37 -04:00
cloudix_mcp_server	58db03ad49	feat(cron): rebuild :vx.y.z-latest instead of :vx.y.z (stable stays at tag time)	2026-06-13 14:12:34 -04:00
cloudix_mcp_server	6acb8f0302	feat(tag): push both :vx.y.z and :vx.y.z-latest on tag event	2026-06-13 14:12:31 -04:00
jcabillot	a907089ed5	Merge pull request 'fix: correct anothrNick/github-tag-action checksum (d0→da)' (#12 ) from fix/github-tag-action-checksum into master Main Release / hadolint (push) Successful in 7s Details Main Release / tag (push) Successful in 9s Details Main Release / test (push) Successful in 13s Details Tag Release / hadolint (push) Successful in 8s Details Main Release / build-push (push) Successful in 38s Details Tag Release / build-push (push) Successful in 42s Details Reviewed-on: #12	2026-06-13 14:04:16 -04:00
cloudix_mcp_server	65f8e4b5f0	fix: correct anothrNick/github-tag-action SHA (d0→da, corrupted since PR #8 ) PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 11s Details Verified with git ls-remote: Tag 1.75.0 → 4ed44965e0db8dab2b466a16da04aec3cc312fd8 File had: 4ed44965e0db8dab2b466a16d04aec3cc312fd8 (wrong)	2026-06-13 14:02:48 -04:00
jcabillot	085b290a13	Merge pull request 'fix: correct docker/setup-buildx-action SHA (tag v4, 40 chars)' (#11 ) from fix/setup-buildx-checksum-v2 into master Main Release / tag (push) Failing after 2s Details Main Release / hadolint (push) Successful in 6s Details Main Release / test (push) Successful in 15s Details Main Release / build-push (push) Successful in 40s Details Reviewed-on: #11	2026-06-13 14:00:13 -04:00
cloudix_mcp_server	cc637ef241	fix: correct setup-buildx-action SHA (tag v4 is 40 chars, file had 42/45) PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 20s Details The SHA was corrupted since the original pipeline creation (PR #8). Verified with `git ls-remote` that the correct SHA is: d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5	2026-06-13 13:59:33 -04:00
jcabillot	828cc447e0	Merge pull request 'fix: restore correct docker/setup-buildx-action checksum' (#10 ) from fix/restore-setup-buildx-checksum into master Main Release / tag (push) Failing after 3s Details Main Release / hadolint (push) Successful in 6s Details Main Release / test (push) Failing after 24s Details Main Release / build-push (push) Failing after 25s Details Reviewed-on: #10	2026-06-13 13:55:00 -04:00
cloudix_mcp_server	fb3216a876	fix: restore correct setup-buildx-action checksum (was corrupted in PR #9 ) PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 21s Details	2026-06-13 13:54:08 -04:00
jcabillot	9312c89ee9	Merge pull request 'fix(ci): use PAT instead of GITHUB_TOKEN for tag push to trigger tag.yaml' (#9 ) from fix/use-pat-for-tag-push into master Main Release / hadolint (push) Successful in 5s Details Main Release / build-push (push) Failing after 2s Details Main Release / test (push) Failing after 2s Details Main Release / tag (push) Failing after 2s Details Reviewed-on: #9	2026-06-13 13:51:25 -04:00
cloudix_mcp_server	58eb7fa4fb	fix: restore correct action checksums (metadata-action + build-push-action) PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 12s Details	2026-06-13 13:50:51 -04:00
cloudix_mcp_server	b00c43ee2d	fix: DEFAULT_BULB → DEFAULT_BUMP (typo) PR Checks / hadolint (pull_request) Successful in 5s Details PR Checks / build-test (pull_request) Successful in 11s Details	2026-06-13 13:48:00 -04:00
cloudix_mcp_server	594550dc6d	fix(ci): use PAT instead of GITHUB_TOKEN for tag push to trigger tag.yaml workflow PR Checks / hadolint (pull_request) Successful in 6s Details PR Checks / build-test (pull_request) Successful in 12s Details GITHUB_TOKEN is the internal actions runner token — pushes made with it don't trigger new workflow runs (by design, prevents infinite loops). Using a real user PAT (SA_TOKEN_ACTION_PUSH_TAGS) makes the tag push trigger the tag.yaml workflow correctly. Fixes the issue where tag pushes from the 'tag' job didn't launch the 'Tag Release' pipeline (tag.yaml).	2026-06-13 13:46:40 -04:00