Sync main / develop

[ptr727]

No description provided.

[Copilot]

Pull request overview

Updates the reusable GitHub Actions workflows used to build and publish the repository’s Docker images, aligning main/develop by bumping Docker-related action versions and adjusting BuildKit cache export behavior.

Changes:

• Bump Docker GitHub Actions to newer major versions (setup-qemu, setup-buildx, login, build-push).
• Change BuildKit GHA cache export settings (switch to mode=min for derived images; add ignore-error=true for cache export).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/build-docker-task.yml	Updates docker actions to newer majors and modifies cache export mode/options for image builds.
.github/workflows/build-base-images-task.yml	Updates docker actions to newer majors and adds ignore-error=true to base image cache export.

Comments suppressed due to low confidence (3)

.github/workflows/build-docker-task.yml:104

• cache-to was changed from mode=max to mode=min for the GHA cache export. mode=min typically exports only the final image layers, which can significantly reduce cache hit rates for multi-stage Dockerfiles and increase build times on subsequent runs. If the intent is to reduce cache size, consider keeping mode=max for main/develop (or documenting why min is preferred here) so rebuilds stay fast.

          cache-to: |
            ${{ (github.ref_name == 'main' || github.ref_name == 'develop') && format('type=gha,mode=min,scope={0}-{1},ignore-error=true', github.ref_name, matrix.images.Name) || '' }}
            ${{ github.event.pull_request && !github.event.pull_request.head.repo.fork && format('type=gha,mode=min,scope=pr-{0}-{1},ignore-error=true', github.event.pull_request.number, matrix.images.Name) || '' }}

.github/workflows/build-docker-task.yml:104

• ignore-error=true was added to the GHA cache export. This can mask real failures during cache publishing (e.g., permissions/quota/issues) and make cache regressions harder to diagnose because the workflow will continue without surfacing the error. Consider removing ignore-error=true, or limiting it to contexts where cache export failures are expected/acceptable (and ensuring logs still make cache export issues obvious).

            ${{ (github.ref_name == 'main' || github.ref_name == 'develop') && format('type=gha,mode=min,scope={0}-{1},ignore-error=true', github.ref_name, matrix.images.Name) || '' }}
            ${{ github.event.pull_request && !github.event.pull_request.head.repo.fork && format('type=gha,mode=min,scope=pr-{0}-{1},ignore-error=true', github.event.pull_request.number, matrix.images.Name) || '' }}

.github/workflows/build-base-images-task.yml:69

• ignore-error=true was added to the cache-to exporter entries. If cache export starts failing (quota/auth/etc.), this will keep builds green but silently stop refreshing caches, which can lead to slower builds later and make the root cause harder to spot. Consider keeping cache export failures visible (remove ignore-error=true) or add an explicit signal/annotation when cache export is skipped/failed.

          cache-to: |
            ${{ inputs.push && (github.ref_name == 'main' || github.ref_name == 'develop') && format('type=gha,mode=max,scope={0}-base-{1},ignore-error=true', github.ref_name, matrix.base.name) || '' }}
            ${{ inputs.push && (github.ref_name == 'main' || github.ref_name == 'develop') && 'type=inline' || '' }}
            ${{ github.event.pull_request && !github.event.pull_request.head.repo.fork && format('type=gha,mode=max,scope=pr-base-{0}-{1},ignore-error=true', github.event.pull_request.number, matrix.base.name) || '' }}