Skip to content

build(deps): bump actions/checkout from 4 to 6 #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
blehnen merged 1 commit into from
Apr 29, 2026
Merged

build(deps): bump actions/checkout from 4 to 6 #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ jobs:

steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Setup .NET
uses: actions/setup-dotnet@v5
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/docs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ jobs:
if: hashFiles('templates/**/template.json') != ''
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Setup .NET
uses: actions/setup-dotnet@v5
Expand Down Expand Up @@ -94,7 +94,7 @@ jobs:
timeout-minutes: 10
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Setup .NET
uses: actions/setup-dotnet@v5
Expand Down Expand Up @@ -132,7 +132,7 @@ jobs:
if: hashFiles('docs/plugin-author-guide.md') != ''
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Setup Python
uses: actions/setup-python@v6
Expand Down
308 changes: 154 additions & 154 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,154 +1,154 @@
# .github/workflows/release.yml
#
# Release workflow — builds multi-arch Docker image, runs Mosquitto-sidecar smoke
# gate against amd64 image, then pushes to GHCR on success.
#
# Trigger: push of a git tag matching v* (e.g. v1.0.0, v1.2.3-rc1)
#
# Smoke gate (CONTEXT-10 D5):
# 1. Build linux/amd64 image and load into runner's local Docker daemon.
# 2. Start eclipse-mosquitto:2 sidecar inline (bind-mount docker/mosquitto-smoke.conf
# so Mosquitto 2.x accepts anonymous connections on port 1883).
# 3. Start FrigateRelay container on --network host with FrigateMqtt__Server=127.0.0.1.
# 4. Poll http://localhost:8080/healthz every 1 s for up to 30 s.
# 5. HARD-FAIL (exit 1) if /healthz does not return 200 — multi-arch push does NOT happen.
#
# Arm64 note (CONTEXT-10 D5): ARM64 image is built via QEMU emulation but is NOT
# smoke-tested (too slow under emulation). The amd64 smoke is the release gate.
#
# Base image: mcr.microsoft.com/dotnet/runtime-deps:10.0-alpine (D1).
# Fallback to runtime-deps:10.0-bookworm-slim documented in docker/Dockerfile.
#
# Registry: ghcr.io/<owner>/frigaterelay — public (PROJECT.md, MIT/OSS).
# Secrets: GITHUB_TOKEN only (no PAT required).

name: release

on:
push:
tags: [ "v*" ]

# REVIEW-2.2 fix: serialize releases on the same tag — prevents :latest race
# if the same tag is force-pushed or pushed twice in quick succession.
concurrency:
group: release-${{ github.ref }}
cancel-in-progress: false

permissions:
contents: read
packages: write

env:
DOTNET_CLI_TELEMETRY_OPTOUT: 1
DOTNET_NOLOGO: 1

jobs:
release:
runs-on: ubuntu-latest
timeout-minutes: 60

steps:
- name: Checkout
uses: actions/checkout@v4

# Enable QEMU for ARM64 cross-compilation
- name: Set up QEMU
uses: docker/setup-qemu-action@v4

# Buildx required for multi-platform manifest push
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v4

- name: Log in to GHCR
uses: docker/login-action@v4
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}

# Generate :semver, :major, :latest tags from the git tag (e.g. v1.2.3 → 1.2.3, 1, latest)
- name: Extract Docker metadata
id: meta
uses: docker/metadata-action@v6
with:
# REVIEW-2.2 fix: derive image name from repo, not hardcoded — fork-safe.
images: ghcr.io/${{ github.repository }}
tags: |
type=semver,pattern={{version}}
type=semver,pattern={{major}}
type=raw,value=latest

# ── Smoke gate (amd64 only) ─────────────────────────────────────────────
# Build the amd64 image and load it into the local Docker daemon for smoke.
# `load: true` is incompatible with multi-platform push, so this is a
# separate build step from the final multi-arch push below.
- name: Build amd64 image for smoke
uses: docker/build-push-action@v7
with:
context: .
file: docker/Dockerfile
platforms: linux/amd64
load: true
tags: fr-smoke:local

# Start Mosquitto 2.x sidecar inline (not as a services: block — services:
# containers cannot bind-mount workspace files cleanly).
# docker/mosquitto-smoke.conf sets: listener 1883 0.0.0.0 + allow_anonymous true
- name: Start Mosquitto sidecar
run: |
docker run -d --name mosquitto --network host \
-v "$PWD/docker/mosquitto-smoke.conf:/mosquitto/config/mosquitto.conf:ro" \
eclipse-mosquitto:2

# Start FrigateRelay on the host network so it can reach Mosquitto on 127.0.0.1:1883.
# docker/appsettings.Smoke.json is bind-mounted as appsettings.Local.json so the
# host reads a minimal valid config (no plugin secrets, empty Actions list).
- name: Start FrigateRelay
run: |
docker run -d --name fr --network host \
-e ASPNETCORE_ENVIRONMENT=Docker \
-e ASPNETCORE_URLS=http://+:8080 \
-e FrigateMqtt__Server=127.0.0.1 \
-e FrigateMqtt__Port=1883 \
-v "$PWD/docker/appsettings.Smoke.json:/app/appsettings.Local.json:ro" \
fr-smoke:local

# Hard-fail smoke: poll /healthz every 1 s for up to 30 s.
# On failure: dump docker logs from both containers, then exit 1.
# Multi-arch push DOES NOT happen if this step fails.
- name: Smoke /healthz
run: |
set -e
for i in $(seq 1 30); do
if curl -fsS http://localhost:8080/healthz; then
echo
echo "healthz OK after ${i}s"
exit 0
fi
sleep 1
done
echo "healthz did not return 200 within 30s"
echo "--- FrigateRelay logs ---"
docker logs fr || true
echo "--- Mosquitto logs ---"
docker logs mosquitto || true
exit 1

# Always clean up smoke containers, even on failure (so the runner stays tidy).
- name: Cleanup smoke containers
if: always()
run: |
docker rm -f fr mosquitto || true

# ── Multi-arch push (only reached if smoke passed) ──────────────────────
# Build both platforms via QEMU + buildx and push the multi-arch manifest.
# Uses the metadata-action tags computed above.
- name: Build and push multi-arch image
uses: docker/build-push-action@v7
with:
context: .
file: docker/Dockerfile
platforms: linux/amd64,linux/arm64
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
# .github/workflows/release.yml
#
# Release workflow — builds multi-arch Docker image, runs Mosquitto-sidecar smoke
# gate against amd64 image, then pushes to GHCR on success.
#
# Trigger: push of a git tag matching v* (e.g. v1.0.0, v1.2.3-rc1)
#
# Smoke gate (CONTEXT-10 D5):
# 1. Build linux/amd64 image and load into runner's local Docker daemon.
# 2. Start eclipse-mosquitto:2 sidecar inline (bind-mount docker/mosquitto-smoke.conf
# so Mosquitto 2.x accepts anonymous connections on port 1883).
# 3. Start FrigateRelay container on --network host with FrigateMqtt__Server=127.0.0.1.
# 4. Poll http://localhost:8080/healthz every 1 s for up to 30 s.
# 5. HARD-FAIL (exit 1) if /healthz does not return 200 — multi-arch push does NOT happen.
#
# Arm64 note (CONTEXT-10 D5): ARM64 image is built via QEMU emulation but is NOT
# smoke-tested (too slow under emulation). The amd64 smoke is the release gate.
#
# Base image: mcr.microsoft.com/dotnet/runtime-deps:10.0-alpine (D1).
# Fallback to runtime-deps:10.0-bookworm-slim documented in docker/Dockerfile.
#
# Registry: ghcr.io/<owner>/frigaterelay — public (PROJECT.md, MIT/OSS).
# Secrets: GITHUB_TOKEN only (no PAT required).
name: release
on:
push:
tags: [ "v*" ]
# REVIEW-2.2 fix: serialize releases on the same tag — prevents :latest race
# if the same tag is force-pushed or pushed twice in quick succession.
concurrency:
group: release-${{ github.ref }}
cancel-in-progress: false
permissions:
contents: read
packages: write
env:
DOTNET_CLI_TELEMETRY_OPTOUT: 1
DOTNET_NOLOGO: 1
jobs:
release:
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
- name: Checkout
uses: actions/checkout@v6
# Enable QEMU for ARM64 cross-compilation
- name: Set up QEMU
uses: docker/setup-qemu-action@v4
# Buildx required for multi-platform manifest push
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v4
- name: Log in to GHCR
uses: docker/login-action@v4
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
# Generate :semver, :major, :latest tags from the git tag (e.g. v1.2.3 → 1.2.3, 1, latest)
- name: Extract Docker metadata
id: meta
uses: docker/metadata-action@v6
with:
# REVIEW-2.2 fix: derive image name from repo, not hardcoded — fork-safe.
images: ghcr.io/${{ github.repository }}
tags: |
type=semver,pattern={{version}}
type=semver,pattern={{major}}
type=raw,value=latest
# ── Smoke gate (amd64 only) ─────────────────────────────────────────────
# Build the amd64 image and load it into the local Docker daemon for smoke.
# `load: true` is incompatible with multi-platform push, so this is a
# separate build step from the final multi-arch push below.
- name: Build amd64 image for smoke
uses: docker/build-push-action@v7
with:
context: .
file: docker/Dockerfile
platforms: linux/amd64
load: true
tags: fr-smoke:local
# Start Mosquitto 2.x sidecar inline (not as a services: block — services:
# containers cannot bind-mount workspace files cleanly).
# docker/mosquitto-smoke.conf sets: listener 1883 0.0.0.0 + allow_anonymous true
- name: Start Mosquitto sidecar
run: |
docker run -d --name mosquitto --network host \
-v "$PWD/docker/mosquitto-smoke.conf:/mosquitto/config/mosquitto.conf:ro" \
eclipse-mosquitto:2
# Start FrigateRelay on the host network so it can reach Mosquitto on 127.0.0.1:1883.
# docker/appsettings.Smoke.json is bind-mounted as appsettings.Local.json so the
# host reads a minimal valid config (no plugin secrets, empty Actions list).
- name: Start FrigateRelay
run: |
docker run -d --name fr --network host \
-e ASPNETCORE_ENVIRONMENT=Docker \
-e ASPNETCORE_URLS=http://+:8080 \
-e FrigateMqtt__Server=127.0.0.1 \
-e FrigateMqtt__Port=1883 \
-v "$PWD/docker/appsettings.Smoke.json:/app/appsettings.Local.json:ro" \
fr-smoke:local
# Hard-fail smoke: poll /healthz every 1 s for up to 30 s.
# On failure: dump docker logs from both containers, then exit 1.
# Multi-arch push DOES NOT happen if this step fails.
- name: Smoke /healthz
run: |
set -e
for i in $(seq 1 30); do
if curl -fsS http://localhost:8080/healthz; then
echo
echo "healthz OK after ${i}s"
exit 0
fi
sleep 1
done
echo "healthz did not return 200 within 30s"
echo "--- FrigateRelay logs ---"
docker logs fr || true
echo "--- Mosquitto logs ---"
docker logs mosquitto || true
exit 1
# Always clean up smoke containers, even on failure (so the runner stays tidy).
- name: Cleanup smoke containers
if: always()
run: |
docker rm -f fr mosquitto || true
# ── Multi-arch push (only reached if smoke passed) ──────────────────────
# Build both platforms via QEMU + buildx and push the multi-arch manifest.
# Uses the metadata-action tags computed above.
- name: Build and push multi-arch image
uses: docker/build-push-action@v7
with:
context: .
file: docker/Dockerfile
platforms: linux/amd64,linux/arm64
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
Loading