refactor: optimize & smartly lock psr dependency version

Author: codejedi365

.dockerignore

@@ -0,0 +1,7 @@
+# Default, ignore everything
+*
+
+# Except
+!requirements.txt
+!action.sh
+!LICENSE

Dockerfile

@@ -1,25 +1,30 @@
-ARG PYTHON_VERSION=3.10
+FROM python:3.10-slim-bookworm
+ARG WORK_DIR="/opt/psr"
 
-FROM python:${PYTHON_VERSION}
+WORKDIR ${WORK_DIR}
 
-RUN set -ex; \
-    apt-get update; \
-    apt-get install -y --no-install-recommends \
-    git-lfs
+ENV PSR_VENV_BIN="${WORK_DIR}/.venv/bin"
 
-#install backported stable vesion of git, which supports ssh signing
-RUN echo "deb http://deb.debian.org/debian bullseye-backports main" >> /etc/apt/sources.list; \
-    apt-get update;\
-    apt-get install -y git/bullseye-backports \
-    && apt-get clean \
-    && rm -rf /var/lib/apt/lists/*; \
-    mkdir /semantic-release
+COPY . ./
 
-WORKDIR /semantic-release
+RUN \
+    # Install required os packages
+    apt update && apt install -y --no-install-recommends \
+        git git-lfs python3-venv \
+    # Create virtual environment
+    && python3 -m venv "$(dirname "${PSR_VENV_BIN}")" \
+    # Update local pip and built tools
+    && "${PSR_VENV_BIN}/pip" install --upgrade --no-cache-dir pip setuptools wheel \
+    # Install semantic-release (/root/.local/bin)
+    && "${PSR_VENV_BIN}/pip" install --pre --no-cache-dir -r requirements.txt \
+    # Validate binary availability
+    && bash -c "${PSR_VENV_BIN}/semantic-release --help" \
+    # make action script executable
+    && chmod +x "${WORK_DIR}/action.sh" \
+    # Put action script in PATH
+    && ln -s "${WORK_DIR}/action.sh" /usr/local/bin/action-entrypoint \
+    # Clean up
+    && apt clean && rm -rf /var/lib/apt/lists/* \
+    && find /tmp -mindepth 1 -delete
 
-COPY action.sh /semantic-release/action.sh
-
-RUN pip install --pre --no-cache-dir "python-semantic-release<9"; \
-    semantic-release --help
-
-ENTRYPOINT ["/semantic-release/action.sh"]
+ENTRYPOINT ["/usr/local/bin/action-entrypoint"]

action.sh

@@ -2,16 +2,21 @@
 
 set -e
 
-# Copy inputs into correctly-named environment variables
-export GH_TOKEN="${INPUT_GITHUB_TOKEN}"
-export ROOT_OPTIONS="${INPUT_ROOT_OPTIONS:="-v"}"
-
-# Change to configured directory
-cd "${INPUT_DIRECTORY}"
+explicit_run_cmd() {
+  local cmd="$*"
+  printf '%s\n' "$> $cmd"
+  eval "$cmd"
+}
 
 # See https://github.com/actions/runner-images/issues/6775#issuecomment-1409268124
 # and https://github.com/actions/runner-images/issues/6775#issuecomment-1410270956
 git config --system --add safe.directory "*"
 
+# Change to configured directory
+cd "${INPUT_DIRECTORY}"
+
+# Make Token available as a correctly-named environment variables
+export GH_TOKEN="${INPUT_GITHUB_TOKEN}"
+
 # Run Semantic Release
-semantic-release ${ROOT_OPTIONS} publish --tag "${INPUT_TAG}"
+explicit_run_cmd "$PSR_VENV_BIN/semantic-release ${INPUT_ROOT_OPTIONS} publish --tag ${INPUT_TAG}"

requirements.txt

@@ -0,0 +1 @@
+python-semantic-release == 8.7.0