fix: improve Docker tagging strategy and auto-tag workflow

- Modify auto-tag.yml to use PAT_TOKEN for triggering downstream workflows
- Add automatic CI/CD trigger after tag creation to ensure Docker images are built
- Improve Docker tagging strategy in ci-cd.yml:
  - Separate main tag (branch pushes only) from release tags
  - Add stable tag as alias for latest
  - Add support for pre-release tags (beta, rc)
  - Exclude beta/rc from latest tag
- Clarify tagging logic with improved comments

Author: JohanDevl

.github/workflows/auto-tag.yml

@@ -22,6 +22,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.PAT_TOKEN || secrets.GITHUB_TOKEN }}
 
       - name: Set up Git
         run: |
@@ -67,9 +68,9 @@ jobs:
           # Add PR info to tag message
           TAG_MESSAGE="Release $NEW_TAG from PR #${{ steps.pr_info.outputs.pr_number }}: ${{ github.event.pull_request.title }}"
 
-          # Create and push tag
+          # Create and push tag using PAT for workflow triggering
           git tag -a "$NEW_TAG" -m "$TAG_MESSAGE"
-          git push origin "$NEW_TAG"
+          git push https://x-access-token:${{ secrets.PAT_TOKEN || secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git "$NEW_TAG"
 
           echo "new_tag=$NEW_TAG" >> $GITHUB_OUTPUT
 
@@ -91,5 +92,22 @@ jobs:
           draft: false
           prerelease: false
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN || secrets.GITHUB_TOKEN }}
+
+      - name: Trigger CI/CD for Docker Build
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.PAT_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const response = await github.rest.actions.createWorkflowDispatch({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              workflow_id: 'ci-cd.yml',
+              ref: '${{ steps.tag.outputs.new_tag }}',
+              inputs: {
+                reason: 'Auto-triggered from release ${{ steps.tag.outputs.new_tag }}'
+              }
+            });
+            console.log('Triggered CI/CD workflow for tag ${{ steps.tag.outputs.new_tag }}');
+            console.log('Response:', response.status);
 

.github/workflows/ci-cd.yml

@@ -149,15 +149,20 @@ jobs:
             ${{ env.REGISTRY_IMAGE }}
             ${{ env.GITHUB_IMAGE }}
           tags: |
-            # Latest tag - ONLY for git tags (semantic versions/releases)
-            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') }}
-            # Main tag - for git tags (semantic versions) AND main branch pushes
-            type=raw,value=main,enable=${{ startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main' }}
+            # Latest tag - ONLY for git tags (semantic versions/releases) - points to the latest stable release
+            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, 'beta') && !contains(github.ref, 'rc') }}
+            # Stable tag - alias for latest, easier to understand for users
+            type=raw,value=stable,enable=${{ startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, 'beta') && !contains(github.ref, 'rc') }}
             # Semantic version tag - ONLY for git tags (releases)
             type=raw,value=${{ needs.test-and-build.outputs.version }},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
-            # Develop branch tag
+            # Main branch tag - ONLY for pushes to main branch (not for releases)
+            type=raw,value=main,enable=${{ github.ref == 'refs/heads/main' }}
+            # Develop branch tag - for pushes to develop branch
             type=raw,value=develop,enable=${{ github.ref == 'refs/heads/develop' }}
-            # PR tags
+            # Pre-release tags - for beta and RC versions
+            type=raw,value=beta,enable=${{ startsWith(github.ref, 'refs/tags/v') && contains(github.ref, 'beta') }}
+            type=raw,value=rc,enable=${{ startsWith(github.ref, 'refs/tags/v') && contains(github.ref, 'rc') }}
+            # PR tags - for pull request testing
             type=ref,event=pr,prefix=PR-
 
       - name: Log in to Docker Hub