Ubiquitous docker-publish.yml

Author: xtr0py

.github/workflows/docker-publish.yml

@@ -2,53 +2,58 @@ name: Build
 
 on:
   push:
-    workflow_dispatch:
+    branches: [ master, testing ]
+  workflow_dispatch:
     inputs:
-      dnscrypt-proxy-release:
-        description: 'DNSCrypt Proxy Release'
-        required: true
+      dnscrypt_proxy_release:
+        description: "DNSCrypt Proxy Release (blank = latest upstream)"
+        required: false
 
 env:
   REGISTRY: docker.io
   IMAGE_NAME: xtr0py/dnscrypt-proxy-2-docker
 
-
 jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-    env:
-      DNSCRYPT_PROXY_VERSION: ${{ github.event.inputs.version }}
-     
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v2
 
-      - name: Setup default version
-        run: echo "DNSCRYPT_PROXY_VERSION=2.1.15" >> $GITHUB_ENV
-        if: ${{ env.DNSCRYPT_PROXY_VERSION == '' }}
+    steps:
+      - uses: actions/checkout@v4
 
-      - name: Setup Docker buildx
-        uses: docker/setup-buildx-action@v1
+      - name: Determine DNSCrypt version
+        shell: bash
+        run: |
+          VERSION="${{ github.event.inputs.dnscrypt_proxy_release }}"
+          if [ -z "$VERSION" ]; then
+            VERSION="$(curl -fsSL https://api.github.com/repos/DNSCrypt/dnscrypt-proxy/releases/latest \
+              | python -c "import sys,json; print(json.load(sys.stdin)['tag_name'].lstrip('v'))")"
+          fi
+          echo "DNSCRYPT_PROXY_VERSION=$VERSION" >> "$GITHUB_ENV"
 
+      - uses: docker/setup-buildx-action@v3
 
-      # Login against a Docker registry except on PR
-      - name: Log into registry ${{ env.REGISTRY }}
-        uses: docker/login-action@v1
+      - uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
+      - name: Docker metadata (tags)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{ env.DNSCRYPT_PROXY_VERSION }}
+            type=raw,value=latest,enable=${{ github.ref_name == 'master' }}
+            type=raw,value=testing,enable=${{ github.ref_name == 'testing' }}
 
-      # Build and push Docker image with Buildx (don't push on PR)
-      # https://github.com/docker/build-push-action
-      - name: Build and push Docker image
-        uses: docker/build-push-action@v2
+      - uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64
-          build-args: VERSION=${{ env.DNSCRYPT_PROXY_VERSION }} 
-          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest,${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DNSCRYPT_PROXY_VERSION }}
+          build-args: VERSION=${{ env.DNSCRYPT_PROXY_VERSION }}
+          tags: ${{ steps.meta.outputs.tags }}
           push: true