fix(build): Enhance Docker tag preparation and add version validation action. (#27)

Author: terabytesoftw

.github/actions/prepare-docker-tags/action.yml

@@ -2,7 +2,7 @@ name: Prepare Docker Tags
 
 description: >-
   Prepares Docker image tags based on context
-  (PR, main branch, or feature branch)
+  (PR, main branch, feature branch, or release)
 
 inputs:
   base-name:
@@ -19,6 +19,13 @@ inputs:
     description: Flavor prefix.
     default: debian
     required: false
+  is-release:
+    description: Whether this is a release build.
+    default: "false"
+    required: false
+  version:
+    description: Release version (for releases only).
+    required: false
 
 outputs:
   tags:
@@ -40,12 +47,14 @@ runs:
       env:
         BASE_NAME: ${{ inputs.base-name }}
         BUILD_TYPE: ${{ inputs.build-type }}
-        PHP_VERSION: ${{ inputs.php-version }}
-        FLAVOR_PREFIX: ${{ inputs.flavor-prefix }}
         EVENT_NAME: ${{ github.event_name }}
+        FLAVOR_PREFIX: ${{ inputs.flavor-prefix }}
+        IS_RELEASE: ${{ inputs.is-release }}
+        PHP_VERSION: ${{ inputs.php-version }}
         PR_NUMBER: ${{ github.event.number }}
         REF: ${{ github.ref }}
         SHA: ${{ github.sha }}
+        VERSION: ${{ inputs.version }}
       run: |
         # Prepare flavor
         FLAVOR="${FLAVOR_PREFIX}-${BUILD_TYPE}"
@@ -55,7 +64,18 @@ runs:
         echo "flavor=${FLAVOR}" >> "$GITHUB_OUTPUT"
 
         # Generate tags based on context
-        if [[ "${EVENT_NAME}" == "pull_request" ]]; then
+        if [[ "${IS_RELEASE}" == "true" && -n "${VERSION}" ]]; then
+          # Release context: similar to regular builds but with SHA
+          SHORT_SHA=$(echo "${SHA}" | cut -c1-7)
+          TAG="${BASE_NAME}:${PHP_VERSION}-${FLAVOR}-v${VERSION}"
+          TAG+=",${BASE_NAME}:${PHP_VERSION}-${FLAVOR}-sha-${SHORT_SHA}"
+
+          # Latest tag only for prod builds
+          if [[ "$BUILD_TYPE" == "prod" ]]; then
+            TAG+=",${BASE_NAME}:latest"
+          fi
+
+        elif [[ "${EVENT_NAME}" == "pull_request" ]]; then
           # For PRs: use PR number
           TAG="${BASE_NAME}:${PHP_VERSION}-${FLAVOR}-pr-${PR_NUMBER}"
         elif [[ "${REF}" == "refs/heads/main" ]]; then

.github/actions/validate-version/action.yml

@@ -0,0 +1,117 @@
+name: Validate Version
+
+description: >-
+  Validates and extracts version from git tags or workflow inputs.
+  Supports semantic versioning validation.
+
+inputs:
+  allow-prerelease:
+    description: Allow pre-release versions (for example, 1.0.0-beta.1).
+    default: "false"
+    required: false
+  input-version:
+    description: Manual version input (from workflow_dispatch).
+    required: false
+
+outputs:
+  is_prerelease:
+    description: Whether this is a pre-release version.
+    value: ${{ steps.validate.outputs.is_prerelease }}
+  should_build:
+    description: Whether the build should proceed.
+    value: ${{ steps.validate.outputs.should_build }}
+  source:
+    description: Source of the version (tag, manual, or none).
+    value: ${{ steps.validate.outputs.source }}
+  version:
+    description: Extracted and validated version.
+    value: ${{ steps.validate.outputs.version }}
+
+runs:
+  using: composite
+  steps:
+    - name: Extract and validate version
+      id: validate
+      shell: bash
+      env:
+        ALLOW_PRERELEASE: ${{ inputs.allow-prerelease }}
+        EVENT_DISPATCH: ${{ github.event_name == 'workflow_dispatch' }}
+        EVENT_NAME: ${{ github.event_name }}
+        INPUT_VERSION: ${{ inputs.input-version }}
+        REF_NAME: ${{ github.ref_name }}
+      run: |
+        set -Eeuo pipefail
+
+        VERSION=""
+        SHOULD_BUILD="false"
+        IS_PRERELEASE="false"
+        SOURCE="none"
+
+        # Extract version based on trigger
+        if [[ "${REF_NAME:-}" == v* ]]; then
+          # From git tag
+          VERSION="${REF_NAME#v}"
+          SOURCE="tag"
+          echo "📍 Version from tag: $VERSION"
+        elif [[ "$EVENT_DISPATCH" == "true" && -n "$INPUT_VERSION" ]]; then
+          # From manual input
+          VERSION="$INPUT_VERSION"
+          SOURCE="manual"
+          echo "📍 Version from manual input: $VERSION"
+        else
+          echo "⚠️ No version source found"
+          echo "version=" >> "$GITHUB_OUTPUT"
+          echo "should_build=false" >> "$GITHUB_OUTPUT"
+          echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
+          echo "source=none" >> "$GITHUB_OUTPUT"
+          exit 0
+        fi
+
+        # Validate semantic version patterns
+        SEMVER_REGEX="^[0-9]+\.[0-9]+\.[0-9]+$"
+        PRERELEASE_REGEX="^[0-9]+\.[0-9]+\.[0-9]+-.+$"
+
+        if [[ "$VERSION" =~ $SEMVER_REGEX ]]; then
+          # Valid stable version
+          SHOULD_BUILD="true"
+          IS_PRERELEASE="false"
+          echo "✅ Valid stable version: $VERSION"
+        elif [[ "$ALLOW_PRERELEASE" == "true" ]] && \
+          [[ "$VERSION" =~ $PRERELEASE_REGEX ]]; then
+          # Valid pre-release version
+          SHOULD_BUILD="true"
+          IS_PRERELEASE="true"
+          echo "✅ Valid pre-release version: $VERSION"
+        else
+          # Invalid version format
+          SHOULD_BUILD="false"
+          echo "❌ Invalid version format: $VERSION"
+          echo "Expected: X.Y.Z or X.Y.Z-suffix (if prerelease allowed)"
+        fi
+
+        if [[ "$IS_PRERELEASE" == "true" ]]; then
+          TYPE="Pre-release"
+        else
+          TYPE="Stable"
+        fi
+
+        if [[ "$SHOULD_BUILD" == "true" ]]; then
+          BUILD_STATUS="✅ Yes"
+        else
+          BUILD_STATUS="❌ No"
+        fi
+
+        # Output results
+        echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+        echo "should_build=$SHOULD_BUILD" >> "$GITHUB_OUTPUT"
+        echo "is_prerelease=$IS_PRERELEASE" >> "$GITHUB_OUTPUT"
+        echo "source=$SOURCE" >> "$GITHUB_OUTPUT"
+
+        # Summary for GitHub Actions UI
+        {
+          echo "### 🏷️ Version Validation"
+          echo "- **Version:** \`$VERSION\`"
+          echo "- **Source:** $SOURCE"
+          echo "- **Type:** $TYPE"
+          echo "- **Should Build:** $BUILD_STATUS"
+        } >> "$GITHUB_STEP_SUMMARY"

.github/workflows/build.yml

@@ -55,6 +55,7 @@ jobs:
           base-name: "${{ env.REGISTRY }}/${{ github.repository_owner }}/apache"
           build-type: ${{ matrix.build_type }}
           flavor-prefix: "debian"
+          is-release: "false"
           php-version: "${{ env.PHP_VERSION }}"
 
       - name: Build Only.