From e8d80582785d74de906eee9c897fa82ee9cc3a60 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 12 Jul 2024 18:33:22 +0000
Subject: [PATCH 01/20] chore(pip-prod)(deps): bump sentry-sdk from 2.7.1 to
 2.9.0

Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.7.1 to 2.9.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.7.1...2.9.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 8b386a6..884f71f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -33,7 +33,7 @@ python-dotenv==1.0.1
 PyYAML==6.0.1
 requests==2.32.3
 requests-toolbelt==1.0.0
-sentry-sdk==2.7.1
+sentry-sdk==2.9.0
 six==1.16.0
 toml==0.10.2
 tomli==2.0.1

From 4ff8f90225b1989bae91c25339ce61be267da4af Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 12 Jul 2024 18:38:53 +0000
Subject: [PATCH 02/20] chore(pip-prod)(deps): bump astroid from 3.2.2 to 3.2.3

Bumps [astroid](https://github.com/pylint-dev/astroid) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](https://github.com/pylint-dev/astroid/compare/v3.2.2...v3.2.3)

---
updated-dependencies:
- dependency-name: astroid
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 884f71f..c3b25d1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 appdirs==1.4.4
-astroid==3.2.2
+astroid==3.2.3
 attrs==23.2.0
 autopep8==2.3.1
 backoff==2.2.1

From a808a51c6dfc5cbedb2c6d68d7b816ef20f32f7b Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 10:35:02 +0100
Subject: [PATCH 03/20] Disable auto-deploy

---
 .github/workflows/release.yml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5d728b0..bd4706d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,14 +44,14 @@ jobs:
           docker push ghcr.io/luketainton/roboluke-tasks:latest
           docker push ghcr.io/luketainton/roboluke-tasks:${{ needs.release.outputs.new_tag }}
 
-  deploy:
-    name: Update Portainer Deployment
-    runs-on: ubuntu-latest
-    needs: publish
-    steps:
-      - uses: fjogeleit/http-request-action@v1
-        with:
-          url: ${{ secrets.PORTAINER_WEBHOOK_URL }}
-          method: POST
-          timeout: 60000
-          preventFailureOnNoResponse: "true"
+  # deploy:
+  #   name: Update Portainer Deployment
+  #   runs-on: ubuntu-latest
+  #   needs: publish
+  #   steps:
+  #     - uses: fjogeleit/http-request-action@v1
+  #       with:
+  #         url: ${{ secrets.PORTAINER_WEBHOOK_URL }}
+  #         method: POST
+  #         timeout: 60000
+  #         preventFailureOnNoResponse: "true"

From 3cf66ab503b9839521a270baaa6fabf110b4cb30 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Tue, 4 Jun 2024 22:30:11 +0100
Subject: [PATCH 04/20] Update build/deploy

---
 .github/workflows/release.yml | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bd4706d..10e74be 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,6 +3,10 @@ on:
   push:
     branches: [main]
 
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
 jobs:
   release:
     name: Release
@@ -29,20 +33,23 @@ jobs:
     name: GitHub Container Registry
     runs-on: ubuntu-latest
     needs: release
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v4
       - name: Login to GitHub Container Registry
-        run: echo ${{ secrets.GHCR_ACCESS_TOKEN }} | docker login ghcr.io -u luketainton --password-stdin
+        run: echo ${{ secrets.GITHUB_TOKEN }} | docker login ${{ env.REGISTRY }} -u ${{ github.actor }} --password-stdin
       - name: Build image for GitHub Package Registry
         run: |
           docker build . --file Dockerfile \
           --build-arg "version=${{ needs.release.outputs.new_tag }}" \
-          --tag ghcr.io/luketainton/roboluke-tasks:${{ needs.release.outputs.new_tag }} \
-          --tag ghcr.io/luketainton/roboluke-tasks:latest
+          --tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.release.outputs.new_tag }} \
+          --tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
       - name: Push image to GitHub Package Registry
         run: |
-          docker push ghcr.io/luketainton/roboluke-tasks:latest
-          docker push ghcr.io/luketainton/roboluke-tasks:${{ needs.release.outputs.new_tag }}
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.release.outputs.new_tag }}
 
   # deploy:
   #   name: Update Portainer Deployment

From 43696f16e18455fa52a1a0b315aaffcf23e79acd Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 10:47:21 +0100
Subject: [PATCH 05/20] Revamp GH Actions to eliminate next->main

---
 .github/{workflows => }/release.yml  |  0
 .github/workflows-old                |  0
 .github/workflows/create_release.yml | 29 +++++++++++++++++
 .github/workflows/docker_publish.yml | 48 ++++++++++++++++++++++++++++
 4 files changed, 77 insertions(+)
 rename .github/{workflows => }/release.yml (100%)
 create mode 100644 .github/workflows-old
 create mode 100644 .github/workflows/create_release.yml
 create mode 100644 .github/workflows/docker_publish.yml

diff --git a/.github/workflows/release.yml b/.github/release.yml
similarity index 100%
rename from .github/workflows/release.yml
rename to .github/release.yml
diff --git a/.github/workflows-old b/.github/workflows-old
new file mode 100644
index 0000000..e69de29
diff --git a/.github/workflows/create_release.yml b/.github/workflows/create_release.yml
new file mode 100644
index 0000000..6273802
--- /dev/null
+++ b/.github/workflows/create_release.yml
@@ -0,0 +1,29 @@
+name: Create Release
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 9 * * *"
+
+jobs:
+  create_release:
+    name: Create Release
+    runs-on: ubuntu-latest
+    outputs:
+      new_tag: ${{ steps.tag_version.outputs.new_tag }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Bump version and push tag
+        id: tag_version
+        uses: mathieudutour/github-tag-action@v6.2
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          default_bump: minor
+
+      - name: Create a GitHub release
+        uses: ncipollo/release-action@v1
+        with:
+          tag: ${{ steps.tag_version.outputs.new_tag }}
+          name: ${{ steps.tag_version.outputs.new_tag }}
+          body: ${{ steps.tag_version.outputs.changelog }}
+          generateReleaseNotes: true
diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
new file mode 100644
index 0000000..32fe6e8
--- /dev/null
+++ b/.github/workflows/docker_publish.yml
@@ -0,0 +1,48 @@
+name: Publish Docker Image
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  publish:
+    name: Publish Docker image
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
+      attestations: write
+      id-token: write
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        with:
+          images: |
+            ghcr.io/${{ github.repository }}
+
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

From 3f318d6d7084150f93e32b7083ddd8e8ae7ddf4a Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 10:50:48 +0100
Subject: [PATCH 06/20] Migrate Renovate from next to main

---
 .github/renovate.json                   | 2 +-
 .github/workflows-old                   | 0
 .github/{ => workflows-old}/release.yml | 0
 3 files changed, 1 insertion(+), 1 deletion(-)
 delete mode 100644 .github/workflows-old
 rename .github/{ => workflows-old}/release.yml (100%)

diff --git a/.github/renovate.json b/.github/renovate.json
index 67e7daa..4e3342a 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -5,7 +5,7 @@
     ":semanticCommitTypeAll(fix)"
   ],
   "baseBranches": [
-    "next"
+    "main"
   ],
   "platformCommit": true,
   "dependencyDashboardAutoclose": true,
diff --git a/.github/workflows-old b/.github/workflows-old
deleted file mode 100644
index e69de29..0000000
diff --git a/.github/release.yml b/.github/workflows-old/release.yml
similarity index 100%
rename from .github/release.yml
rename to .github/workflows-old/release.yml

From 014085f69309b2b1be15a0cdb61f3404cda4c4b4 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:02:18 +0100
Subject: [PATCH 07/20] Fix publish workflow

---
 .github/workflows/docker_publish.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 32fe6e8..b0e5038 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -1,8 +1,9 @@
 name: Publish Docker Image
 
 on:
+  workflow_dispatch:
   release:
-    types: [published]
+    types: [published, created]
 
 jobs:
   publish:
@@ -16,6 +17,8 @@ jobs:
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.release.name }}
 
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1

From eb4f19ee3f86b9368f50141d95ff6b8dc73adfab Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:05:56 +0100
Subject: [PATCH 08/20] Fix Docker attestation

---
 .github/workflows/docker_publish.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index b0e5038..553435b 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -32,7 +32,8 @@ jobs:
         uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
         with:
           images: |
-            ghcr.io/${{ github.repository }}
+            ghcr.io/${{ github.repository }}:latest
+            ghcr.io/${{ github.repository }}:${{ github.event.release.name }}
 
       - name: Build and push Docker image
         id: push
@@ -46,6 +47,6 @@ jobs:
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1
         with:
-          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-name: ghcr.io/${{ github.repository }}:${{ github.event.release.name }}
           subject-digest: ${{ steps.push.outputs.digest }}
           push-to-registry: true

From 6674fccb6a3a88740bd35822b545e3d2bb7d4039 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:10:21 +0100
Subject: [PATCH 09/20] Fix Docker deployment

---
 .github/workflows/docker_publish.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 553435b..cc62808 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -41,7 +41,9 @@ jobs:
         with:
           context: .
           push: true
-          tags: ${{ steps.meta.outputs.tags }}
+          tags: |
+            ghcr.io/${{ github.repository }}:latest
+            ghcr.io/${{ github.repository }}:${{ github.event.release.name }}
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Generate artifact attestation

From b22363a87fd540cabef3ebdf24e9c5837d6686e9 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:18:27 +0100
Subject: [PATCH 10/20] Trigger Docker flow from Release flow

---
 .github/workflows/create_release.yml |  5 +++++
 .github/workflows/docker_publish.yml | 16 +++++++++-------
 2 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/create_release.yml b/.github/workflows/create_release.yml
index 6273802..9e92708 100644
--- a/.github/workflows/create_release.yml
+++ b/.github/workflows/create_release.yml
@@ -27,3 +27,8 @@ jobs:
           name: ${{ steps.tag_version.outputs.new_tag }}
           body: ${{ steps.tag_version.outputs.changelog }}
           generateReleaseNotes: true
+
+      - name: Create Docker Image
+        uses: luketainton/roboluke-tasks/.github/workflows/docker_publish.yml@main
+        with:
+          release: ${{ steps.tag_version.outputs.new_tag }}
diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index cc62808..d0d36f2 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -1,9 +1,11 @@
 name: Publish Docker Image
 
 on:
-  workflow_dispatch:
-  release:
-    types: [published, created]
+  workflow_call:
+    inputs:
+      release:
+        required: true
+        type: string
 
 jobs:
   publish:
@@ -18,7 +20,7 @@ jobs:
       - name: Check out the repo
         uses: actions/checkout@v4
         with:
-          ref: ${{ github.event.release.name }}
+          ref: ${{ inputs.release }}
 
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
@@ -33,7 +35,7 @@ jobs:
         with:
           images: |
             ghcr.io/${{ github.repository }}:latest
-            ghcr.io/${{ github.repository }}:${{ github.event.release.name }}
+            ghcr.io/${{ github.repository }}:${{ inputs.release }}
 
       - name: Build and push Docker image
         id: push
@@ -43,12 +45,12 @@ jobs:
           push: true
           tags: |
             ghcr.io/${{ github.repository }}:latest
-            ghcr.io/${{ github.repository }}:${{ github.event.release.name }}
+            ghcr.io/${{ github.repository }}:${{ inputs.release }}
           labels: ${{ steps.meta.outputs.labels }}
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1
         with:
-          subject-name: ghcr.io/${{ github.repository }}:${{ github.event.release.name }}
+          subject-name: ghcr.io/${{ github.repository }}:${{ inputs.release }}
           subject-digest: ${{ steps.push.outputs.digest }}
           push-to-registry: true

From cfdc7311d2413915b57d16306bed412224b4415a Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:21:37 +0100
Subject: [PATCH 11/20] Fix create_docker

---
 .github/workflows/create_release.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/create_release.yml b/.github/workflows/create_release.yml
index 9e92708..559427b 100644
--- a/.github/workflows/create_release.yml
+++ b/.github/workflows/create_release.yml
@@ -28,7 +28,12 @@ jobs:
           body: ${{ steps.tag_version.outputs.changelog }}
           generateReleaseNotes: true
 
+  create_docker:
+    name: Create Docker Image
+    runs-on: ubuntu-latest
+    needs: create_release
+    steps:
       - name: Create Docker Image
         uses: luketainton/roboluke-tasks/.github/workflows/docker_publish.yml@main
         with:
-          release: ${{ steps.tag_version.outputs.new_tag }}
+          release: ${{ needs.create_release.outputs.new_tag }}

From 2cf102db5d841862ddccbe6725d758c31c088e31 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:22:33 +0100
Subject: [PATCH 12/20] Fix create_docker

---
 .github/workflows/create_release.yml | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/create_release.yml b/.github/workflows/create_release.yml
index 559427b..0c95b1b 100644
--- a/.github/workflows/create_release.yml
+++ b/.github/workflows/create_release.yml
@@ -30,10 +30,7 @@ jobs:
 
   create_docker:
     name: Create Docker Image
-    runs-on: ubuntu-latest
     needs: create_release
-    steps:
-      - name: Create Docker Image
-        uses: luketainton/roboluke-tasks/.github/workflows/docker_publish.yml@main
-        with:
-          release: ${{ needs.create_release.outputs.new_tag }}
+    uses: luketainton/roboluke-tasks/.github/workflows/docker_publish.yml@main
+    with:
+      release: ${{ needs.create_release.outputs.new_tag }}

From 6832c03f8d7d7b5e8efd891b8cc24633c8219896 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:29:24 +0100
Subject: [PATCH 13/20] Fix auto Docker tag creation

---
 .github/workflows/docker_publish.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index d0d36f2..6546d9b 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -34,8 +34,10 @@ jobs:
         uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
         with:
           images: |
-            ghcr.io/${{ github.repository }}:latest
-            ghcr.io/${{ github.repository }}:${{ inputs.release }}
+            ghcr.io/${{ github.repository }}
+          tags: |
+            type=ref,event=tag
+            type=semver,pattern=v{{version}}
 
       - name: Build and push Docker image
         id: push

From 6e4d78cfcd486339ff88c40f3fba15f164457a32 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:33:09 +0100
Subject: [PATCH 14/20] Fix auto Docker tag creation

---
 .github/workflows/docker_publish.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 6546d9b..8102e8d 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -36,8 +36,7 @@ jobs:
           images: |
             ghcr.io/${{ github.repository }}
           tags: |
-            type=ref,event=tag
-            type=semver,pattern=v{{version}}
+            type=semver,pattern=v{{version}},value=${{ inputs.release }}
 
       - name: Build and push Docker image
         id: push

From a3143790918704ac01b847ea1fee0c6498e2feea Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:36:49 +0100
Subject: [PATCH 15/20] Fix auto Docker tag creation

---
 .github/workflows/docker_publish.yml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 8102e8d..780f781 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -44,14 +44,15 @@ jobs:
         with:
           context: .
           push: true
+          provenance: mode=max
+          labels: ${{ steps.meta.outputs.labels }}
           tags: |
             ghcr.io/${{ github.repository }}:latest
             ghcr.io/${{ github.repository }}:${{ inputs.release }}
-          labels: ${{ steps.meta.outputs.labels }}
 
-      - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v1
-        with:
-          subject-name: ghcr.io/${{ github.repository }}:${{ inputs.release }}
-          subject-digest: ${{ steps.push.outputs.digest }}
-          push-to-registry: true
+      # - name: Generate artifact attestation
+      #   uses: actions/attest-build-provenance@v1
+      #   with:
+      #     subject-name: ghcr.io/${{ github.repository }}:${{ inputs.release }}
+      #     subject-digest: ${{ steps.push.outputs.digest }}
+      #     push-to-registry: true

From 6985f4dbe850cf7b049b9383774312ead71c3401 Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:39:59 +0100
Subject: [PATCH 16/20] Switch to new Docker driver

---
 .github/workflows/docker_publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 780f781..8ea2e0f 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -22,6 +22,9 @@ jobs:
         with:
           ref: ${{ inputs.release }}
 
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
         with:

From 50d8f81c630116b6d247c6fbdf57db1680c95c7e Mon Sep 17 00:00:00 2001
From: Luke Tainton <luke@tainton.uk>
Date: Sat, 13 Jul 2024 11:48:27 +0100
Subject: [PATCH 17/20] Fix attestation

---
 .github/workflows/docker_publish.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 8ea2e0f..087a828 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -47,15 +47,15 @@ jobs:
         with:
           context: .
           push: true
-          provenance: mode=max
+          # provenance: mode=max
           labels: ${{ steps.meta.outputs.labels }}
           tags: |
             ghcr.io/${{ github.repository }}:latest
             ghcr.io/${{ github.repository }}:${{ inputs.release }}
 
-      # - name: Generate artifact attestation
-      #   uses: actions/attest-build-provenance@v1
-      #   with:
-      #     subject-name: ghcr.io/${{ github.repository }}:${{ inputs.release }}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: true
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ghcr.io/${{ github.repository }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

From d9b815b664da87fa18398414a3a9e9d7a44d38cf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 13 Jul 2024 10:34:15 +0000
Subject: [PATCH 18/20] chore(actions)(deps): bump docker/metadata-action

Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 to a64d0487d7069df33b279515d35d60fa80e2ea62.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7...a64d0487d7069df33b279515d35d60fa80e2ea62)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/docker_publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 087a828..7787a69 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -34,7 +34,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        uses: docker/metadata-action@a64d0487d7069df33b279515d35d60fa80e2ea62
         with:
           images: |
             ghcr.io/${{ github.repository }}

From c60494ce60e44a3e9edb29d310ff62b0eddc3dbb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 13 Jul 2024 10:38:19 +0000
Subject: [PATCH 19/20] chore(actions)(deps): bump docker/login-action

Bumps [docker/login-action](https://github.com/docker/login-action) from 65b78e6e13532edd9afa3aa52ac7964289d1a9c1 to 0d4c9c5ea7693da7b068278f7b52bda2a190a446.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/65b78e6e13532edd9afa3aa52ac7964289d1a9c1...0d4c9c5ea7693da7b068278f7b52bda2a190a446)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/docker_publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 7787a69..2ac81be 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -26,7 +26,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

From f3b4b61f450711db220951fe473e31371bfad09f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 13 Jul 2024 10:38:34 +0000
Subject: [PATCH 20/20] chore(actions)(deps): bump docker/build-push-action
 from 4.0.0 to 6.3.0

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4.0.0 to 6.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/3b5e8027fcad23fda98b2e3ac259d8d67585f671...1a162644f9a7e87d8f4b053101d1d9a712edc18c)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/docker_publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 2ac81be..7b02506 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -43,7 +43,7 @@ jobs:
 
       - name: Build and push Docker image
         id: push
-        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+        uses: docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c
         with:
           context: .
           push: true