Docker Mode

Build ./Dockerfile and push it tagged with the release version.

jobs:
  release:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
    steps:
      - uses: actions/checkout@v7
      - uses: orochibraru/releaser@v1
        with:
          docker: true

This runs docker buildx build --push on the repository root and pushes two tags:

• ghcr.io/<owner>/<repo>:X.Y.Z
• ghcr.io/<owner>/<repo>:latest

A prerelease pushes :X.Y.Z-canary.N and :canary (its id) instead, and never moves :latest.

The image gets the org.opencontainers.image.version and org.opencontainers.image.source labels, so GHCR links the package to the repo. The GitHub release gets a docker pull <image>:X.Y.Z block appended to its notes (CHANGELOG.md doesn't).

:X.Y.Z is pushed before the release commit and tag, so a failed build leaves the repository untouched. :latest (or :canary) moves last, after the tag and the GitHub release, so a rejected push never moves it. If moving it fails, the error gives the docker buildx imagetools create command to finish by hand.

Registry and login

For ghcr.io images, the action logs in with its token as GITHUB_ACTOR. For any other registry, set docker-image and log in first:

- uses: docker/login-action@v4
  with:
    username: ${{ vars.DOCKERHUB_USERNAME }}
    password: ${{ secrets.DOCKERHUB_TOKEN }}
- uses: orochibraru/releaser@v1
  with:
    docker: true
    docker-image: docker.io/me/app

Multi-arch

Multi-platform builds need QEMU and a buildx builder:

- uses: docker/setup-qemu-action@v4
- uses: docker/setup-buildx-action@v4
- uses: orochibraru/releaser@v1
  with:
    docker: true
    docker-platforms: linux/amd64,linux/arm64

Docker mode and artifact mode can be enabled together.

A runnable example lives in examples/docker.