build

fix(deps): update ghcr.io/containerbase/base docker tag to v13.26.4 (… #4062

	name: build

	on:
	push:
	branches:
	- main

	pull_request:
	merge_group:

	schedule:
	- cron: '0 1 * * *'

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.number \|\| github.ref_name }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	lint:
	runs-on: ubuntu-24.04
	timeout-minutes: 10
	steps:
	- name: ⚙️ Setup
	uses: containerbase/internal-tools/setup@fc0934d0824459fc256c54b22107b8ddb321f7c3 # v3.14.50
	with:
	save-cache: true

	- run: pnpm prettier

	build:
	needs:
	- lint
	runs-on: ${{ matrix.arch.os }}
	name: build (${{ matrix.arch.name }})

	permissions:
	contents: write

	strategy:
	fail-fast: false
	matrix:
	arch:
	- name: x86_64
	os: ubuntu-24.04
	- name: aarch64
	os: ubuntu-24.04-arm # 24.04 is too unstable

	env:
	ARCH: ${{ matrix.arch.name }} # build target, name required by binary-builder

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	show-progress: false

	- name: binary-builder
	uses: containerbase/internal-tools@fc0934d0824459fc256c54b22107b8ddb321f7c3 # v3.14.50
	with:
	command: binary-builder
	dry-run: ${{github.ref_name != 'main'}}
	token: ${{ secrets.GITHUB_TOKEN }}

	success:
	runs-on: ubuntu-24.04
	needs:
	- lint
	- build
	timeout-minutes: 1
	if: always()
	steps:
	- name: Fail for failed or cancelled build
	if: \|
	needs.build.result == 'failure' \|\|
	needs.build.result == 'cancelled'
	run: exit 1
	- name: Fail for failed or cancelled lint
	if: \|
	needs.lint.result == 'failure' \|\|
	needs.lint.result == 'cancelled'
	run: exit 1

Provide feedback