|
| 1 | +name: "Docker/Buildx Version Upgrade" |
| 2 | + |
| 3 | +on: |
| 4 | + schedule: |
| 5 | + - cron: '0 0 * * 1' # Run every Monday at midnight |
| 6 | + workflow_dispatch: # Allow manual triggering |
| 7 | + |
| 8 | +jobs: |
| 9 | + check-versions: |
| 10 | + runs-on: ubuntu-latest |
| 11 | + outputs: |
| 12 | + DOCKER_SHOULD_UPDATE: ${{ steps.check_docker_version.outputs.SHOULD_UPDATE }} |
| 13 | + DOCKER_LATEST_VERSION: ${{ steps.check_docker_version.outputs.LATEST_VERSION }} |
| 14 | + DOCKER_CURRENT_VERSION: ${{ steps.check_docker_version.outputs.CURRENT_VERSION }} |
| 15 | + BUILDX_SHOULD_UPDATE: ${{ steps.check_buildx_version.outputs.SHOULD_UPDATE }} |
| 16 | + BUILDX_LATEST_VERSION: ${{ steps.check_buildx_version.outputs.LATEST_VERSION }} |
| 17 | + BUILDX_CURRENT_VERSION: ${{ steps.check_buildx_version.outputs.CURRENT_VERSION }} |
| 18 | + steps: |
| 19 | + - name: Checkout repository |
| 20 | + uses: actions/checkout@v4 |
| 21 | + |
| 22 | + - name: Check Docker version |
| 23 | + id: check_docker_version |
| 24 | + shell: bash |
| 25 | + run: | |
| 26 | + # Extract current Docker version from Dockerfile |
| 27 | + current_version=$(grep "ARG DOCKER_VERSION=" ./images/Dockerfile | cut -d'=' -f2) |
| 28 | +
|
| 29 | + # Fetch latest Docker Engine version from Docker's download site |
| 30 | + # This gets the latest Linux static binary version which matches what's used in the Dockerfile |
| 31 | + latest_version=$(curl -s https://download.docker.com/linux/static/stable/x86_64/ | grep -o 'docker-[0-9]*\.[0-9]*\.[0-9]*\.tgz' | sort -V | tail -n 1 | sed 's/docker-\(.*\)\.tgz/\1/') |
| 32 | +
|
| 33 | + # Extra check to ensure we got a valid version |
| 34 | + if [[ ! $latest_version =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then |
| 35 | + echo "Failed to retrieve a valid Docker version" |
| 36 | + exit 1 |
| 37 | + fi |
| 38 | + |
| 39 | + should_update=0 |
| 40 | + [ "$current_version" != "$latest_version" ] && should_update=1 |
| 41 | +
|
| 42 | + echo "CURRENT_VERSION=${current_version}" >> $GITHUB_OUTPUT |
| 43 | + echo "LATEST_VERSION=${latest_version}" >> $GITHUB_OUTPUT |
| 44 | + echo "SHOULD_UPDATE=${should_update}" >> $GITHUB_OUTPUT |
| 45 | +
|
| 46 | + - name: Check Buildx version |
| 47 | + id: check_buildx_version |
| 48 | + shell: bash |
| 49 | + run: | |
| 50 | + # Extract current Buildx version from Dockerfile |
| 51 | + current_version=$(grep "ARG BUILDX_VERSION=" ./images/Dockerfile | cut -d'=' -f2) |
| 52 | +
|
| 53 | + # Fetch latest Buildx version |
| 54 | + latest_version=$(curl -s https://api.github.com/repos/docker/buildx/releases/latest | jq -r '.tag_name' | sed 's/^v//') |
| 55 | +
|
| 56 | + should_update=0 |
| 57 | + [ "$current_version" != "$latest_version" ] && should_update=1 |
| 58 | +
|
| 59 | + echo "CURRENT_VERSION=${current_version}" >> $GITHUB_OUTPUT |
| 60 | + echo "LATEST_VERSION=${latest_version}" >> $GITHUB_OUTPUT |
| 61 | + echo "SHOULD_UPDATE=${should_update}" >> $GITHUB_OUTPUT |
| 62 | +
|
| 63 | + - name: Create annotations for versions |
| 64 | + run: | |
| 65 | + docker_should_update="${{ steps.check_docker_version.outputs.SHOULD_UPDATE }}" |
| 66 | + buildx_should_update="${{ steps.check_buildx_version.outputs.SHOULD_UPDATE }}" |
| 67 | + |
| 68 | + # Show annotation if only Docker needs update |
| 69 | + if [[ "$docker_should_update" == "1" && "$buildx_should_update" == "0" ]]; then |
| 70 | + echo "::warning ::Docker version (${{ steps.check_docker_version.outputs.LATEST_VERSION }}) needs update but Buildx is current. Only updating when both need updates." |
| 71 | + fi |
| 72 | + |
| 73 | + # Show annotation if only Buildx needs update |
| 74 | + if [[ "$docker_should_update" == "0" && "$buildx_should_update" == "1" ]]; then |
| 75 | + echo "::warning ::Buildx version (${{ steps.check_buildx_version.outputs.LATEST_VERSION }}) needs update but Docker is current. Only updating when both need updates." |
| 76 | + fi |
| 77 | + |
| 78 | + # Show annotation when both are current |
| 79 | + if [[ "$docker_should_update" == "0" && "$buildx_should_update" == "0" ]]; then |
| 80 | + echo "::warning ::Latest Docker version is ${{ steps.check_docker_version.outputs.LATEST_VERSION }} and Buildx version is ${{ steps.check_buildx_version.outputs.LATEST_VERSION }}. No updates needed." |
| 81 | + fi |
| 82 | +
|
| 83 | + update-versions: |
| 84 | + permissions: |
| 85 | + pull-requests: write |
| 86 | + contents: write |
| 87 | + needs: [check-versions] |
| 88 | + if: ${{ needs.check-versions.outputs.DOCKER_SHOULD_UPDATE == 1 && needs.check-versions.outputs.BUILDX_SHOULD_UPDATE == 1 }} |
| 89 | + runs-on: ubuntu-latest |
| 90 | + steps: |
| 91 | + - name: Checkout repository |
| 92 | + uses: actions/checkout@v4 |
| 93 | + |
| 94 | + - name: Update Docker version |
| 95 | + shell: bash |
| 96 | + run: | |
| 97 | + latest_version="${{ needs.check-versions.outputs.DOCKER_LATEST_VERSION }}" |
| 98 | + current_version="${{ needs.check-versions.outputs.DOCKER_CURRENT_VERSION }}" |
| 99 | + |
| 100 | + # Update version in Dockerfile |
| 101 | + sed -i "s/ARG DOCKER_VERSION=$current_version/ARG DOCKER_VERSION=$latest_version/g" ./images/Dockerfile |
| 102 | + |
| 103 | + - name: Update Buildx version |
| 104 | + shell: bash |
| 105 | + run: | |
| 106 | + latest_version="${{ needs.check-versions.outputs.BUILDX_LATEST_VERSION }}" |
| 107 | + current_version="${{ needs.check-versions.outputs.BUILDX_CURRENT_VERSION }}" |
| 108 | + |
| 109 | + # Update version in Dockerfile |
| 110 | + sed -i "s/ARG BUILDX_VERSION=$current_version/ARG BUILDX_VERSION=$latest_version/g" ./images/Dockerfile |
| 111 | + |
| 112 | + - name: Commit changes and create Pull Request |
| 113 | + env: |
| 114 | + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
| 115 | + run: | |
| 116 | + # Setup branch and commit information |
| 117 | + branch_name="feature/docker-buildx-upgrade" |
| 118 | + commit_message="Upgrade Docker to v${{ needs.check-versions.outputs.DOCKER_LATEST_VERSION }} and Buildx to v${{ needs.check-versions.outputs.BUILDX_LATEST_VERSION }}" |
| 119 | + pr_title="Update Docker to v${{ needs.check-versions.outputs.DOCKER_LATEST_VERSION }} and Buildx to v${{ needs.check-versions.outputs.BUILDX_LATEST_VERSION }}" |
| 120 | + |
| 121 | + # Configure git |
| 122 | + git config --global user.name "github-actions[bot]" |
| 123 | + git config --global user.email "<41898282+github-actions[bot]@users.noreply.github.com>" |
| 124 | +
|
| 125 | + # Create branch or switch to it if it exists |
| 126 | + if git show-ref --quiet refs/remotes/origin/$branch_name; then |
| 127 | + git fetch origin |
| 128 | + git checkout -B "$branch_name" origin/$branch_name |
| 129 | + else |
| 130 | + git checkout -b "$branch_name" |
| 131 | + fi |
| 132 | + |
| 133 | + # Commit and push changes |
| 134 | + git commit -a -m "$commit_message" |
| 135 | + git push --force origin "$branch_name" |
| 136 | + |
| 137 | + # Create PR |
| 138 | + pr_body="Upgrades Docker version from ${{ needs.check-versions.outputs.DOCKER_CURRENT_VERSION }} to ${{ needs.check-versions.outputs.DOCKER_LATEST_VERSION }} and Docker Buildx version from ${{ needs.check-versions.outputs.BUILDX_CURRENT_VERSION }} to ${{ needs.check-versions.outputs.BUILDX_LATEST_VERSION }}.\n\n" |
| 139 | + pr_body+="Release notes: https://docs.docker.com/engine/release-notes/\n\n" |
| 140 | + pr_body+="---\n\nAutogenerated by [Docker/Buildx Version Upgrade Workflow](https://github.com/actions/runner/blob/main/.github/workflows/docker-buildx-upgrade.yml)" |
| 141 | + |
| 142 | + gh pr create -B main -H "$branch_name" \ |
| 143 | + --title "$pr_title" \ |
| 144 | + --body "$pr_body" |
0 commit comments