ci(release): publish multiarch dev images for release branches

Build release/vX.Y pushes for amd64 and aarch64, then publish X.Y-dev.<short-sha> and moving X.Y-dev tags to GHCR and Docker Hub. Report build status to Discord and document the release branch tags.
2026-11-04 10:42:23 +00:00 · 2026-10-07 19:40:42 +02:00
1 parent 8ae3b9152c
commit 2882fc128d
@@ -0,0 +1,144 @@
+name: Build Coolify Release Branch
+
+on:
+  push:
+    branches: ["release/v*"]
+    paths-ignore:
+      - .github/workflows/coolify-helper.yml
+      - .github/workflows/coolify-helper-next.yml
+      - .github/workflows/pr-quality.yaml
+      - docker/coolify-helper/Dockerfile
+      - docker/testing-host/Dockerfile
+      - templates/**
+      - CHANGELOG.md
+
+permissions:
+  contents: read
+  packages: write
+
+concurrency:
+  group: coolify-release-branch-build-${{ github.ref_name }}
+  cancel-in-progress: false
+
+env:
+  GITHUB_REGISTRY: ghcr.io
+  DOCKER_REGISTRY: docker.io
+  IMAGE_NAME: coollabsio/coolify
+
+jobs:
+  prepare:
+    runs-on: ubuntu-24.04
+    outputs:
+      dev_version: ${{ steps.version.outputs.dev_version }}
+      short_sha: ${{ steps.version.outputs.short_sha }}
+      version: ${{ steps.version.outputs.version }}
+    steps:
+      - name: Resolve version from branch name
+        id: version
+        env:
+          BRANCH: ${{ github.ref_name }}
+        run: |
+          if [[ ! "${BRANCH}" =~ ^release/v([0-9]+)\.([0-9]+)$ ]]; then
+            echo "Invalid release branch: ${BRANCH}. Expected release/vX.Y, such as release/v4.5."
+            exit 1
+          fi
+
+          DEV_VERSION="${BASH_REMATCH[1]}.${BASH_REMATCH[2]}-dev"
+          SHORT_SHA="${GITHUB_SHA::7}"
+          echo "dev_version=${DEV_VERSION}" >> "$GITHUB_OUTPUT"
+          echo "short_sha=${SHORT_SHA}" >> "$GITHUB_OUTPUT"
+          echo "version=${DEV_VERSION}.${SHORT_SHA}" >> "$GITHUB_OUTPUT"
+
+  build:
+    needs: prepare
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            platform: linux/amd64
+            runner: ubuntu-24.04
+          - arch: aarch64
+            platform: linux/aarch64
+            runner: ubuntu-24.04-arm
+    runs-on: ${{ matrix.runner }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+
+      - uses: docker/setup-buildx-action@v3
+
+      - name: Login to ${{ env.GITHUB_REGISTRY }}
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.GITHUB_REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Login to ${{ env.DOCKER_REGISTRY }}
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.DOCKER_REGISTRY }}
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push release branch image (${{ matrix.arch }})
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/production/Dockerfile
+          platforms: ${{ matrix.platform }}
+          push: true
+          build-args: |
+            COOLIFY_VERSION=${{ needs.prepare.outputs.version }}
+          tags: |
+            ${{ env.GITHUB_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.prepare.outputs.version }}-${{ matrix.arch }}
+            ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.prepare.outputs.version }}-${{ matrix.arch }}
+
+  publish:
+    needs: [prepare, build]
+    runs-on: ubuntu-24.04
+    strategy:
+      matrix:
+        registry: [ghcr.io, docker.io]
+    steps:
+      - uses: docker/setup-buildx-action@v3
+
+      - name: Login to ${{ env.GITHUB_REGISTRY }}
+        if: matrix.registry == 'ghcr.io'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.GITHUB_REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Login to ${{ env.DOCKER_REGISTRY }}
+        if: matrix.registry == 'docker.io'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.DOCKER_REGISTRY }}
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Publish release branch manifest on ${{ matrix.registry }}
+        env:
+          REGISTRY: ${{ matrix.registry }}
+          DEV_VERSION: ${{ needs.prepare.outputs.dev_version }}
+          VERSION: ${{ needs.prepare.outputs.version }}
+        run: |
+          IMAGE="${REGISTRY}/${IMAGE_NAME}"
+          docker buildx imagetools create \
+            "${IMAGE}:${VERSION}-amd64" \
+            "${IMAGE}:${VERSION}-aarch64" \
+            --tag "${IMAGE}:${VERSION}" \
+            --tag "${IMAGE}:${DEV_VERSION}"
+
+  notify:
+    needs: [prepare, build, publish]
+    if: always()
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: sarisia/actions-status-discord@v1
+        with:
+          webhook: ${{ secrets.DISCORD_WEBHOOK_DEV_RELEASE_CHANNEL }}
+          status: ${{ contains(needs.*.result, 'failure') && 'failure' || (contains(needs.*.result, 'cancelled') && 'cancelled' || 'success') }}
@@ -28,7 +28,7 @@ feature/* → release/v4.x → RC

 1. Merge feature branches into `release/v4.x`.
 2. Set `coolify.nightly.version` in both version files to the intended RC, such as `4.5-rc.1`.
-3. Regular `release/v4.x` builds publish `sha-<short-sha>`, `4.5-rc.1.<short-sha>`, and the moving `next` image tag. They never publish the exact `4.5-rc.1` tag.
+3. Every push to `release/v4.x` runs **Build Coolify Release Branch**. It calculates the version from the branch name and publishes `4.5-dev.<short-sha>` and the moving `4.5-dev` tag. It never publishes an RC or stable tag.
 4. Create a reviewed draft GitHub Release named `v4.5-rc.1` and mark it as a prerelease.
 5. Run **Release Coolify RC** manually from `release/v4.x` and enter `v4.5-rc.1`.
 6. The workflow validates the draft and configured nightly version, builds the exact RC, publishes `4.5-rc.1`, updates the `next` image tag, and publishes the draft prerelease.
@@ -69,7 +69,9 @@ main → hotfix/X.Y.Z → main → release/v4.x
 | Tag | Meaning |
 | --- | --- |
 | `latest` | Latest stable release |
-| `next` | Latest successful `release/v4.x` build |
+| `next` | Latest successful `next` build (legacy branch) |
+| `X.Y-dev` | Latest successful `release/vX.Y` build |
+| `X.Y-dev.<short-sha>` | Exact `release/vX.Y` commit build |
 | `X.Y.Z` | Exact stable release |
 | `X.Y-rc.N` | Exact RC release |
 | `sha-<commit>` | Exact commit build |