test(deps): update dependency mise to v2026.3.8 #22606
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build-push | |
| on: | |
| push: | |
| branches-ignore: | |
| - gh-readonly-queue/** | |
| merge_group: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event_name == 'push' && github.ref_name || github.run_number }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| env: | |
| DRY_RUN: ${{ github.ref_name != github.event.repository.default_branch && !startsWith(github.ref_name, 'maint/') }} | |
| OWNER: ${{ github.repository_owner }} | |
| FILE: base | |
| BUILDKIT_PROGRESS: plain | |
| BUILDX_NO_DEFAULT_LOAD: 1 | |
| CONTAINERBASE_VERSION: ${{ github.sha }} | |
| APT_HTTP_PROXY: http://172.17.0.1:8000 | |
| jobs: | |
| build: | |
| uses: ./.github/workflows/build.yml | |
| permissions: | |
| contents: read | |
| checks: write | |
| id-token: write | |
| release: | |
| needs: [build] | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 15 | |
| concurrency: | |
| group: ${{ github.workflow }}-release-${{ github.ref_name }} | |
| # never cancel a release that has already started, as it may have started pushing artifacts | |
| cancel-in-progress: ${{ github.event_name != 'push' }} | |
| permissions: | |
| contents: write | |
| packages: write | |
| id-token: write | |
| steps: | |
| - name: docker-config | |
| uses: containerbase/internal-tools@eb77ce0cc5c5e56aa99d06750357db0d68969ce2 # v4.1.23 | |
| with: | |
| command: docker-config | |
| # full checkout for semantic-release | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 0 | |
| show-progress: false | |
| filter: blob:none # we don't need all blobs | |
| - uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0 | |
| - name: init | |
| run: | | |
| echo "OWNER=${OWNER,,}" >> ${GITHUB_ENV} | |
| echo "CACHE_WEEK=$(date +%U)" >> $GITHUB_ENV | |
| - name: ⚙️ Setup | |
| uses: containerbase/internal-tools/setup@eb77ce0cc5c5e56aa99d06750357db0d68969ce2 # v4.1.23 | |
| with: | |
| checkout: false | |
| - name: Docker registry login | |
| if: github.ref_name == github.event.repository.default_branch || startsWith(github.ref_name, 'maint/') | |
| run: | | |
| echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin | |
| echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.repository_owner }} --password-stdin | |
| - name: prepare apt proxy | |
| uses: ./.github/actions/prepare-proxy | |
| - name: semantic-release | |
| if: github.event_name == 'push' | |
| run: pnpm semantic-release --dry-run ${{env.DRY_RUN}} --ci ${{env.DRY_RUN != 'true'}} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| DEBUG: semantic-release:github |