chore(deps): update docker/login-action digest to 06fb636 (#627) #141
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Auto-update v1 tag after merge to main | |
| # | |
| # After any PR merges to main in projectbluefin/testsuite, this workflow | |
| # force-pushes the v1 tag to HEAD. Consumers referencing @v1 get the | |
| # latest e2e.yml without manual SHA management. | |
| # | |
| # Security: Only runs on push to main (post-merge). The human gate | |
| # for actions is the PR review — once merged, tag update is mechanical. | |
| name: Update v1 tag | |
| on: | |
| push: | |
| branches: | |
| - main | |
| permissions: | |
| contents: write | |
| concurrency: | |
| group: update-v1-tag | |
| cancel-in-progress: true | |
| jobs: | |
| update-tag: | |
| name: Force-push v1 to HEAD | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 2 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| with: | |
| fetch-depth: 1 | |
| - name: Update v1 tag | |
| run: | | |
| set -euo pipefail | |
| CURRENT_SHA=$(git rev-parse HEAD) | |
| # Check if v1 already points to HEAD | |
| EXISTING_TAG_SHA=$(git ls-remote --tags origin refs/tags/v1 | awk '{print $1}') | |
| if [ "$EXISTING_TAG_SHA" = "$CURRENT_SHA" ]; then | |
| echo "v1 already points to HEAD (${CURRENT_SHA::7}) — nothing to do" | |
| exit 0 | |
| fi | |
| git tag -f v1 HEAD | |
| git push --force origin v1 | |
| echo "Updated v1: ${EXISTING_TAG_SHA::7} → ${CURRENT_SHA::7}" |