ci: share image and release actions

.gitea/actions/create-release/action.yml

@@ -0,0 +1,73 @@
+name: Create Gitea release
+description: Create or update a stable release or prerelease for the current commit
+inputs:
+  token:
+    required: true
+    description: Gitea API token
+  prerelease:
+    required: true
+    description: Whether to publish a prerelease
+runs:
+  using: composite
+  steps:
+    - name: Create or update Gitea release
+      shell: bash
+      env:
+        GITEA_TOKEN: ${{ inputs.token }}
+        GITEA_API_URL: ${{ gitea.api_url }}
+        GITEA_REPOSITORY: ${{ gitea.repository }}
+        GITEA_SERVER_URL: ${{ gitea.server_url }}
+        GITEA_SHA: ${{ gitea.sha }}
+        RELEASE_IS_PRERELEASE: ${{ inputs.prerelease }}
+      run: |
+        set -euo pipefail
+
+        version="$(git rev-parse --short=12 "$GITEA_SHA")"
+        if [[ ! "$version" =~ ^[0-9a-f]{12}$ ]]; then
+          echo "Invalid git hash version: $version" >&2
+          exit 1
+        fi
+
+        release_tag="v$version"
+        if [ "$RELEASE_IS_PRERELEASE" = true ]; then
+          release_tag="$release_tag-dev"
+        fi
+
+        releases_url="$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases"
+        auth_header="Authorization: token $GITEA_TOKEN"
+        previous_tag="$(curl --fail --silent --show-error --header "$auth_header" "$releases_url?limit=100" | jq -r --arg tag "$release_tag" --argjson prerelease "$RELEASE_IS_PRERELEASE" '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')"
+
+        if [ -n "$previous_tag" ]; then
+          commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
+          full_changelog="$GITEA_SERVER_URL/$GITEA_REPOSITORY/compare/${previous_tag}...$release_tag"
+        else
+          commit_messages="$(git log --reverse --format='- %s' "$GITEA_SHA")"
+          full_changelog=""
+        fi
+
+        if [ -z "$commit_messages" ]; then
+          commit_messages="- No commits since the previous release"
+        fi
+
+        {
+          echo '## Changes'
+          echo
+          printf '%s\n' "$commit_messages"
+          echo
+          if [ -n "$full_changelog" ]; then
+            echo "**Full Changelog**: $full_changelog"
+          fi
+        } > release-notes.md
+
+        payload="$(jq -Rs --arg tag "$release_tag" --arg target "$GITEA_SHA" --argjson prerelease "$RELEASE_IS_PRERELEASE" '{tag_name: $tag, target_commitish: $target, name: $tag, body: ., draft: false, prerelease: $prerelease}' release-notes.md)"
+        status="$(curl --silent --show-error --output release.json --write-out '%{http_code}' --header "$auth_header" "$releases_url/tags/$release_tag")"
+
+        if [ "$status" = 200 ]; then
+          release_id="$(jq -r '.id' release.json)"
+          curl --fail-with-body --silent --show-error --request PATCH --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url/$release_id"
+        elif [ "$status" = 404 ]; then
+          curl --fail-with-body --silent --show-error --request POST --header "$auth_header" --header 'Content-Type: application/json' --data "$payload" "$releases_url"
+        else
+          cat release.json
+          exit 1
+        fi

.gitea/actions/publish-image/action.yml

@@ -0,0 +1,39 @@
+name: Publish Docker image
+description: Build and push the maintenance image
+inputs:
+  tag:
+    required: true
+    description: Docker image tag
+  username:
+    required: true
+    description: Registry username
+  password:
+    required: true
+    description: Registry password
+runs:
+  using: composite
+  steps:
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v4.4.1
+
+    - name: Log in to registry
+      shell: bash
+      env:
+        REGISTRY_USERNAME: ${{ inputs.username }}
+        REGISTRY_PASSWORD: ${{ inputs.password }}
+      run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin
+
+    - name: Build and push image
+      uses: docker/build-push-action@v7.4.0
+      with:
+        context: .
+        push: true
+        provenance: false
+        build-args: |
+          APP_VERSION=${{ gitea.sha }}
+          VCS_REF=${{ gitea.sha }}
+        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.tag }}
+        labels: |
+          org.opencontainers.image.version=${{ gitea.sha }}
+          org.opencontainers.image.revision=${{ gitea.sha }}
+          org.opencontainers.image.source=${{ gitea.repositoryUrl }}