publish-docker.yml

name: publish-docker

on:
  push:
    branches:
      - main
    tags:
      - "v*.*.*"
  workflow_dispatch:
    inputs:
      docker_tag:
        description: "Optional explicit semantic Docker tag (example: 1.2.4 or v1.2.4)"
        required: false
        type: string

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  docker:
    name: build-and-push-docker
    runs-on: ubuntu-latest
    if: >-
      ${{
        github.event_name == 'workflow_dispatch' ||
        startsWith(github.ref, 'refs/tags/v') ||
        (github.event_name == 'push' &&
         github.ref == 'refs/heads/main' &&
         (contains(github.event.head_commit.message || '', '[publish-docker]') ||
          contains(github.event.head_commit.message || '', '[docker]')))
      }}
    permissions:
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Resolve Docker image tag
        id: version
        env:
          DOCKERHUB_NAMESPACE: ecrum19
          DOCKERHUB_REPO: vcf-rdfizer
          GITHUB_EVENT_NAME: ${{ github.event_name }}
          GITHUB_REF: ${{ github.ref }}
          GITHUB_REF_NAME: ${{ github.ref_name }}
          HEAD_COMMIT_MESSAGE: ${{ github.event.head_commit.message || '' }}
          INPUT_DOCKER_TAG: ${{ github.event.inputs.docker_tag || '' }}
        run: |
          python - <<'PY'
          import json
          import os
          import re
          import subprocess
          import urllib.request

          namespace = os.environ["DOCKERHUB_NAMESPACE"]
          repo = os.environ["DOCKERHUB_REPO"]
          event_name = os.environ.get("GITHUB_EVENT_NAME", "")
          github_ref = os.environ.get("GITHUB_REF", "")
          ref_name = os.environ.get("GITHUB_REF_NAME", "")
          head_message = os.environ.get("HEAD_COMMIT_MESSAGE", "")
          manual_tag = os.environ.get("INPUT_DOCKER_TAG", "").strip()
          semver = re.compile(r"^v?(\d+)\.(\d+)\.(\d+)$")
          explicit_from_commit = re.search(r"\[(?:publish-docker|docker)=(v?\d+\.\d+\.\d+)\]", head_message)

          def parse_max(tags):
              best = (-1, -1, -1)
              for tag in tags:
                  m = semver.match(tag)
                  if m:
                      version = tuple(int(part) for part in m.groups())
                      if version > best:
                          best = version
              return best

          resolved_tag = ""
          if manual_tag:
            resolved_tag = manual_tag
          elif event_name == "push" and github_ref.startswith("refs/tags/"):
            resolved_tag = ref_name
          elif explicit_from_commit:
            resolved_tag = explicit_from_commit.group(1)
          else:
              best = (-1, -1, -1)
              try:
                  url = f"https://hub.docker.com/v2/repositories/{namespace}/{repo}/tags?page_size=100"
                  while url:
                      with urllib.request.urlopen(url, timeout=20) as resp:
                          payload = json.load(resp)
                      best = max(best, parse_max([item.get("name", "") for item in payload.get("results", [])]))
                      url = payload.get("next")
              except Exception:
                  tags = subprocess.check_output(["git", "tag"], text=True).splitlines()
                  best = max(best, parse_max(tags))
              major, minor, patch = best
              if major < 0:
                  resolved_tag = "1.0.0"
              else:
                  resolved_tag = f"{major}.{minor}.{patch + 1}"

          match = semver.fullmatch(resolved_tag)
          if not match:
              raise SystemExit(
                  f"Docker release tag must match MAJOR.MINOR.PATCH or vMAJOR.MINOR.PATCH: {resolved_tag}"
              )
          version_tag = ".".join(match.groups())
          version_tag_with_v = f"v{version_tag}"
          print(f"Resolved Docker tags: {version_tag}, {version_tag_with_v}, latest")

          with open(os.environ["GITHUB_OUTPUT"], "a", encoding="utf-8") as f:
              f.write(f"version_tag={version_tag}\n")
              f.write(f"version_tag_with_v={version_tag_with_v}\n")
          PY

      - name: Docker metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ecrum19/vcf-rdfizer
          tags: |
            type=raw,value=${{ steps.version.outputs.version_tag }}
            type=raw,value=${{ steps.version.outputs.version_tag_with_v }}
            type=raw,value=latest

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}