build(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#8375) #1516
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Build the Boulder Debian package on tag push, and attach it to a GitHub | |
| # release. | |
| # | |
| # Keep in sync with try-release.yml, with the exception that try-release.yml can | |
| # have multiple entries in its matrix but this should only have one. | |
| name: Build release | |
| on: | |
| push: | |
| tags: | |
| - '**' | |
| jobs: | |
| push-release: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| GO_VERSION: | |
| - "1.25.0" | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: write | |
| packages: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: '0' # Needed for verify-release-ancestry.sh to see origin/main | |
| - name: Verify release ancestry | |
| run: ./tools/verify-release-ancestry.sh "$GITHUB_SHA" | |
| - name: Build .deb | |
| id: build | |
| env: | |
| GO_VERSION: ${{ matrix.GO_VERSION }} | |
| run: ./tools/container-build.sh | |
| - name: Compute checksums | |
| id: checksums | |
| # The files listed on this line must be identical to the files uploaded | |
| # in the last step. | |
| run: sha256sum boulder*.deb boulder*.tar.gz >| boulder-${{ matrix.GO_VERSION }}.$(date +%s)-$(git rev-parse --short=8 HEAD).checksums.txt | |
| - name: Create release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # https://cli.github.com/manual/gh_release_create | |
| run: gh release create --generate-notes "${GITHUB_REF_NAME}" | |
| continue-on-error: true | |
| - name: Upload release files | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # https://cli.github.com/manual/gh_release_upload | |
| run: gh release upload "${GITHUB_REF_NAME}" boulder*.deb boulder*.tar.gz boulder*.checksums.txt | |
| - name: Build ct-test-srv Container | |
| run: docker buildx build . --build-arg "GO_VERSION=${{ matrix.GO_VERSION }}" -f test/ct-test-srv/Dockerfile -t "ghcr.io/letsencrypt/ct-test-srv:${{ github.ref_name }}-go${{ matrix.GO_VERSION }}" | |
| - name: Login to ghcr.io | |
| run: printenv GITHUB_TOKEN | docker login ghcr.io -u "${{ github.actor }}" --password-stdin | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Push ct-test-srv Container | |
| run: docker push "ghcr.io/letsencrypt/ct-test-srv:${{ github.ref_name }}-go${{ matrix.GO_VERSION }}" |