Fix ARM64 image issues (#4233)

<!-- CURSOR_SUMMARY -->
> [!NOTE]
> **Medium Risk**
> Touches release CD for multi-arch Docker publishing and alters Docker
build dependency installation behavior; failures could block image
releases or mask install issues despite limited runtime code impact.
> 
> **Overview**
> Improves the Docker publish GitHub Actions workflow by adding a manual
`workflow_dispatch` trigger, switching to native runners for both
`amd64` and `arm64`, and setting `fail-fast: false` so one-arch
flakiness doesn’t cancel the other.
> 
> Reduces CD image testing to a consistent lightweight target
(`test_unstructured/partition/test_text.py` plus smoke tests) and
hardens Docker builds by adding 3-attempt retry logic around `apk
update/add` to mitigate transient Chainguard mirror failures. Bumps
version to `0.19.3` and updates the changelog accordingly.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
559244d. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: PastelStorm

.github/workflows/docker-publish.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+  workflow_dispatch:
 
 env:
   DOCKER_REPOSITORY: quay.io/unstructured-io/unstructured
@@ -21,12 +22,13 @@ jobs:
 
   build-images:
     strategy:
+      fail-fast: false
       matrix:
         include:
           - docker-platform: "linux/amd64"
-            runs-on: ubuntu-latest
+            runs-on: opensource-linux-8core
           - docker-platform: "linux/arm64"
-            runs-on: opensource-linux-arm64-4core
+            runs-on: ubuntu-24.04-arm
     runs-on: ${{ matrix.runs-on }}
     needs: set-short-sha
     env:
@@ -58,13 +60,8 @@ jobs:
         echo "UNS_API_KEY=${{ secrets.UNS_API_KEY }}" > uns_test_env_file
         echo "UNSTRUCTURED_HF_TOKEN=${{ secrets.HF_TOKEN }}" >> uns_test_env_file
         ARCH=$(cut -d "/" -f2 <<< ${{ matrix.docker-platform }})
-        if [ "$ARCH" = "amd64" ]; then
         DOCKER_IMAGE="$DOCKER_BUILD_REPOSITORY:$ARCH-$SHORT_SHA" \
-          make docker-test CI=true
-        else
-          DOCKER_IMAGE="$DOCKER_BUILD_REPOSITORY:$ARCH-$SHORT_SHA" \
-            make docker-test CI=true TEST_FILE=test_unstructured/partition/test_text.py
-        fi
+          make docker-test CI=true TEST_FILE=test_unstructured/partition/test_text.py
         DOCKER_IMAGE=$DOCKER_BUILD_REPOSITORY:$ARCH-$SHORT_SHA make docker-smoke-test
     - name: Push images
       run: |

CHANGELOG.md

@@ -1,11 +1,16 @@
-## 0.19.2
+## 0.19.3
 
 ### Enhancements
-- Use native ARM64 runner (`opensource-linux-arm64-4core`) for Docker ARM64 builds in CD, replacing QEMU emulation for significantly faster and more reliable builds
+- Use native ARM64 runner (`ubuntu-24.04-arm`) for Docker ARM64 builds in CD, replacing QEMU emulation for faster and more reliable builds
+- Use `opensource-linux-8core` runner for Docker AMD64 builds in CD
+- Add `workflow_dispatch` trigger to CD workflow for manual testing
 - Update CI runners from `ubuntu-latest-m` to `opensource-linux-8core`
 - Enable parallel test execution (`pytest -n auto`) in Docker test target
+- Reduce CD test step to smoke tests only (full suite already runs in CI)
 
 ### Fixes
+- Add retry logic (up to 3 attempts) for `apk add` in Dockerfile to handle transient Chainguard APK mirror failures
+- Add `fail-fast: false` to CD build matrix so a flaky failure on one architecture doesn't cancel the other
 - Remove `.python-version` from `.gitignore`
 
 ## 0.19.1

Dockerfile

@@ -11,10 +11,15 @@ COPY unstructured unstructured
 COPY test_unstructured test_unstructured
 COPY example-docs example-docs
 
-RUN apk update && \
-    apk add libxml2 python-3.12 python-3.12-base glib \
-      mesa-gl mesa-libgallium cmake bash libmagic wget git openjpeg \
-      poppler poppler-utils poppler-glib libreoffice tesseract && \
+RUN apk_ok=false; \
+    for attempt in 1 2 3; do \
+      apk update && \
+      apk add libxml2 python-3.12 python-3.12-base glib \
+        mesa-gl mesa-libgallium cmake bash libmagic wget git openjpeg \
+        poppler poppler-utils poppler-glib libreoffice tesseract && \
+      apk_ok=true && break; \
+      echo "apk install failed (attempt $attempt/3), retrying in 5s..."; sleep 5; \
+    done; $apk_ok && \
     git clone --depth 1 https://github.com/tesseract-ocr/tessdata.git /tmp/tessdata && \
     mkdir -p /usr/local/share/tessdata && \
     cp /tmp/tessdata/*.traineddata /usr/local/share/tessdata && \

unstructured/__version__.py

@@ -1 +1 @@
-__version__ = "0.19.2"  # pragma: no cover
+__version__ = "0.19.3"  # pragma: no cover