mirror of
https://github.com/blakeblackshear/frigate.git
synced 2026-10-11 01:02:48 +03:00
Josh HawkinsandGitHub
2cb03f442c
CI / AMD64 Extra Build (push) Blocked by required conditions
CI / AMD64 Build (push) Waiting to run
CI / AMD64 Smoke Test (push) Blocked by required conditions
CI / ARM Build (push) Waiting to run
CI / Jetson Jetpack 6 (push) Waiting to run
CI / ARM Extra Build (push) Blocked by required conditions
CI / Synaptics Build (push) Blocked by required conditions
CI / Assemble and push default build (push) Blocked by required conditions
* group dependabot updates and hold known-bad versions Dependabot opened a separate PR for every bump, refilled the list with security PRs right after each merge, and kept proposing versions known to break Frigate. - Group minor and patch updates and security updates into one PR per ecosystem, with separate groups for packages that only resolve together - Move every version hold into ignore rules, each with its reason - Switch to weekly updates with a 3-day cooldown - Turn off version updates for docker/tensorrt, since no pull request check builds those images - Drop target-branch, which kept these options from applying to security updates, and the docker entry, which never opened a PR - Scan the setup composite action, and bump change-string-case, setup-qemu, setup-buildx and login-action * group github actions security updates
53 lines
2.4 KiB
YAML
53 lines
2.4 KiB
YAML
name: On release
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
release:
|
|
types: [published]
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
with:
|
|
persist-credentials: false
|
|
- id: lowercaseRepo
|
|
uses: ASzc/change-string-case-action@v8
|
|
with:
|
|
string: ${{ github.repository }}
|
|
- name: Log in to the Container registry
|
|
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Create tag variables
|
|
env:
|
|
TAG: ${{ github.ref_name }}
|
|
LOWERCASE_REPO: ${{ steps.lowercaseRepo.outputs.lowercase }}
|
|
run: |
|
|
BUILD_TYPE=$([[ "${TAG}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]] && echo "stable" || echo "beta")
|
|
echo "BUILD_TYPE=${BUILD_TYPE}" >> $GITHUB_ENV
|
|
echo "BASE=ghcr.io/${LOWERCASE_REPO}" >> $GITHUB_ENV
|
|
echo "BUILD_TAG=${GITHUB_SHA::7}" >> $GITHUB_ENV
|
|
echo "CLEAN_VERSION=$(echo ${GITHUB_REF##*/} | tr '[:upper:]' '[:lower:]' | sed 's/^[v]//')" >> $GITHUB_ENV
|
|
- name: Tag and push the main image
|
|
run: |
|
|
VERSION_TAG=${BASE}:${CLEAN_VERSION}
|
|
STABLE_TAG=${BASE}:stable
|
|
PULL_TAG=${BASE}:${BUILD_TAG}
|
|
docker run --rm -v $HOME/.docker/config.json:/config.json quay.io/skopeo/stable:latest copy --authfile /config.json --multi-arch all docker://${PULL_TAG} docker://${VERSION_TAG}
|
|
for variant in standard-arm64 tensorrt tensorrt-jp6 rk rocm synaptics; do
|
|
docker run --rm -v $HOME/.docker/config.json:/config.json quay.io/skopeo/stable:latest copy --authfile /config.json --multi-arch all docker://${PULL_TAG}-${variant} docker://${VERSION_TAG}-${variant}
|
|
done
|
|
|
|
# stable tag
|
|
if [[ "${BUILD_TYPE}" == "stable" ]]; then
|
|
docker run --rm -v $HOME/.docker/config.json:/config.json quay.io/skopeo/stable:latest copy --authfile /config.json --multi-arch all docker://${PULL_TAG} docker://${STABLE_TAG}
|
|
for variant in standard-arm64 tensorrt tensorrt-jp6 rk rocm synaptics; do
|
|
docker run --rm -v $HOME/.docker/config.json:/config.json quay.io/skopeo/stable:latest copy --authfile /config.json --multi-arch all docker://${PULL_TAG}-${variant} docker://${STABLE_TAG}-${variant}
|
|
done
|
|
fi
|