Replace security date tags with patch version bumps in scheduled builds

The scheduled weekly security build now bumps the patch version (e.g. noble-1.0.2 -> noble-1.0.3) instead of appending -security.YYYYMMDD. Each rebuild creates a proper GitHub release with the new patch tag and pushes Docker images accordingly. Co-authored-by: samip5 <1703002+samip5@users.noreply.github.com>
Add GH release creation to scheduled security builds, update deprecated workflow components
2026-03-26 12:29:07 +00:00 · 2026-02-27 13:09:20 +00:00 · 2026-02-27 12:57:39 +00:00 · 2026-02-27 12:51:54 +00:00 · 2026-02-27 12:48:29 +00:00
2 changed files with 0 additions and 14 deletions
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -4,11 +4,6 @@ on:
    workflow_dispatch:
    release:
     types: [published]
-
-permissions:
-    contents: read
-    packages: write
-
 jobs:
    build:
        runs-on: ubuntu-latest
--- a/.github/workflows/scheduled-build.yml
+++ b/.github/workflows/scheduled-build.yml
@@ -5,10 +5,6 @@ on:
        - cron: '0 2 * * 0'  # Every Sunday at 02:00 UTC
    workflow_dispatch:

-permissions:
-    contents: write
-    packages: write
-
 jobs:
    build:
        runs-on: ubuntu-latest
@@ -104,11 +100,6 @@ jobs:
              build-args: BASE_IMAGE=${{ matrix.base_image }}
              no-cache: true

-          - name: Check gh auth status
-            run: gh auth status
-            env:
-              GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
          - name: Create GitHub Release
            run: |
              gh release create "${{ steps.release.outputs.next_tag }}" \
Author	SHA1	Message	Date
copilot-swe-agent[bot]	33033d8eb5	Replace security date tags with patch version bumps in scheduled builds The scheduled weekly security build now bumps the patch version (e.g. noble-1.0.2 -> noble-1.0.3) instead of appending -security.YYYYMMDD. Each rebuild creates a proper GitHub release with the new patch tag and pushes Docker images accordingly. Co-authored-by: samip5 <1703002+samip5@users.noreply.github.com>	2026-02-27 13:09:20 +00:00
copilot-swe-agent[bot]	cd436b0335	Add GH release creation to scheduled security builds, update deprecated workflow components - scheduled-build.yml: Create GitHub release after each weekly security rebuild with date-stamped tag (e.g. noble-1.0.2-security.20260227) - scheduled-build.yml: Add date-stamped Docker image tags alongside existing version and codename tags - scheduled-build.yml: Bump permissions to contents:write for release creation - scheduled-build.yml: Exclude security-tagged releases from base version lookup to prevent nested tags - main.yml: Update docker/build-push-action from v5 to v6 - scheduled-build.yml: Update docker/build-push-action from v5 to v6 - stale.yml: Remove deprecated repo-token parameter Co-authored-by: samip5 <1703002+samip5@users.noreply.github.com>	2026-02-27 12:57:39 +00:00
copilot-swe-agent[bot]	00987409ee	Create GH releases on tag push, update deprecated workflow components - main.yml: Trigger on tag pushes (noble-, jammy-) instead of manual release published events - main.yml: Add step to create GitHub release after image build+push - main.yml: Add contents:write + packages:write permissions - main.yml: Update docker/build-push-action from v5 to v6 - scheduled-build.yml: Update docker/build-push-action from v5 to v6 - stale.yml: Remove deprecated repo-token parameter Co-authored-by: samip5 <1703002+samip5@users.noreply.github.com>	2026-02-27 12:51:54 +00:00
copilot-swe-agent[bot]	e62ee93f8a	Initial plan	2026-02-27 12:48:29 +00:00