chore: bump ci-github-vommon actions to 0.37.0

neilime · neilime · commit 914a721139c0 · 2026-06-10T19:31:22.000+02:00
Signed-off-by: Emilien Escalle &lt;emilien.escalle@escemi.com&gt;
diff --git a/.github/workflows/__greetings.yml b/.github/workflows/__greetings.yml
@@ -11,7 +11,7 @@ permissions: {}
 
 jobs:
   greetings:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
@@ -24,9 +24,9 @@ jobs:
       actions: read
       contents: read
       id-token: write
-      issues: read
+      issues: write
       packages: write
-      pull-requests: read
+      pull-requests: write
       security-events: write
       statuses: write
     secrets:
diff --git a/.github/workflows/__need-fix-to-issue.yml b/.github/workflows/__need-fix-to-issue.yml
@@ -21,7 +21,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/__pull-request-ci.yml b/.github/workflows/__pull-request-ci.yml
@@ -19,9 +19,9 @@ jobs:
       actions: read
       contents: read
       id-token: write
-      issues: read
+      issues: write
       packages: write
-      pull-requests: read
+      pull-requests: write
       security-events: write
       statuses: write
     secrets:
diff --git a/.github/workflows/__semantic-pull-request.yml b/.github/workflows/__semantic-pull-request.yml
@@ -12,7 +12,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/__shared-ci.yml b/.github/workflows/__shared-ci.yml
@@ -11,10 +11,13 @@ permissions: {}
 
 jobs:
   linter:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
     permissions:
       actions: read
       contents: read
+      issues: write
+      packages: read
+      pull-requests: write
       security-events: write
       statuses: write
 
diff --git a/.github/workflows/__stale.yml b/.github/workflows/__stale.yml
@@ -9,7 +9,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
     permissions:
       issues: write
       pull-requests: write
diff --git a/.github/workflows/docker-build-images.yml b/.github/workflows/docker-build-images.yml
@@ -371,7 +371,7 @@ jobs:
       issues: read
       packages: write
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
         with:
           lfs: ${{ inputs.lfs }}
 
@@ -380,7 +380,7 @@ jobs:
         run: git lfs pull
 
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
         with:
           actions-path: actions
 
@@ -451,7 +451,7 @@ jobs:
 
       # FIXME: Set built images infos in file to be uploaded as artifacts, because github action does not handle job outputs for matrix
       # https://github.com/orgs/community/discussions/26639
-      - uses: hoverkraft-tech/ci-github-common/actions/set-matrix-output@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+      - uses: hoverkraft-tech/ci-github-common/actions/set-matrix-output@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
         with:
           artifact-name: ${{ needs.prepare-variables.outputs.artifact-name }}
           value: ${{ steps.build.outputs.built-image }}
@@ -468,7 +468,7 @@ jobs:
       built-images: ${{ steps.create-images-manifests.outputs.built-images }}
     steps:
       - id: get-matrix-outputs
-        uses: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+        uses: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
         with:
           artifact-name: ${{ needs.prepare-variables.outputs.artifact-name }}
 
@@ -506,7 +506,7 @@ jobs:
             core.setOutput('built-images', JSON.stringify(images));
 
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
         with:
           actions-path: actions
 
diff --git a/.github/workflows/prune-pull-requests-images-tags.yml b/.github/workflows/prune-pull-requests-images-tags.yml
@@ -106,7 +106,7 @@ jobs:
       packages: write
     steps:
       - id: local-workflow-actions
-        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+        uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
         with:
           actions-path: actions
 
diff --git a/actions/docker/build-image/action.yml b/actions/docker/build-image/action.yml
@@ -149,12 +149,12 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         source-path: ${{ github.action_path }}/../..
 
     - id: slugify-platform
-      uses: hoverkraft-tech/ci-github-common/actions/slugify@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+      uses: hoverkraft-tech/ci-github-common/actions/slugify@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         value: ${{ inputs.platform }}
 
diff --git a/actions/docker/create-images-manifests/action.yml b/actions/docker/create-images-manifests/action.yml
@@ -96,7 +96,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         source-path: ${{ github.action_path }}/../..
         destination-directory-name: self-actions-create-images-manifests
@@ -131,30 +131,51 @@ runs:
             }
           }
 
-          // Helper function to build annotations options
-          function buildAnnotationsOption(annotations) {
-            const annotationLevels = ["index"];
-            return Object.keys(annotations)
-              .map(annotation => annotationLevels
-                .map(annotationLevel => `--annotation "${annotationLevel}:${annotation}=${annotations[annotation]}"`)
-              )
-              .flat()
-              .join(" ");
-          }
 
           // Helper function to create multiarch manifest
           async function createMultiarchManifest(builtImage, imagesWithTags) {
-            const platformsOption = builtImage.platforms.map(platform => `--platform ${platform}`).join(" ");
-            const tagsOption = imagesWithTags.map(image => `--tag ${image}`).join(" ");
-            const sources = builtImage.images.join(" ");
-            const annotationsOption = buildAnnotationsOption(builtImage.annotations);
+            const platformArgs = builtImage.platforms.flatMap(platform => ["--platform", platform]);
+            const tagArgs = imagesWithTags.flatMap(image => ["--tag", image]);
+            const annotationArgs = Object.keys(builtImage.annotations).flatMap(key => [
+              "--annotation",
+              `index:${key}=${builtImage.annotations[key]}`,
+            ]);
+            const sourceArgs = builtImage.images;
+
+            const createManifestArgs = [
+              "buildx", "imagetools", "create",
+              ...platformArgs,
+              ...annotationArgs,
+              ...tagArgs,
+              ...sourceArgs,
+            ];
+
+            const maxAttempts = 6;
+            const delayMs = 5000;
 
-            const createManifestCommand = `docker buildx imagetools create ${platformsOption} ${annotationsOption} ${tagsOption} ${sources}`;
+            for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+              const result = await exec.getExecOutput("docker", createManifestArgs, { ignoreReturnCode: true });
+
+              if (result.exitCode === 0) {
+                core.debug(`Create manifest for "${builtImage.name}" executed`);
+                builtImage.images = imagesWithTags;
+                return;
+              }
 
-            await exec.exec(createManifestCommand);
-            core.debug(`Create manifest for "${builtImage.name}" ("${createManifestCommand}") executed`);
+              const commandOutput = `${result.stderr || ""}\n${result.stdout || ""}`.trim();
+              const isRetryableNotFound = /not found|manifest unknown|no such manifest/i.test(commandOutput);
 
-            builtImage.images = imagesWithTags;
+              if (!isRetryableNotFound || attempt === maxAttempts) {
+                throw new Error(
+                  `Failed to create manifest for "${builtImage.name}" (attempt ${attempt}/${maxAttempts}, exit code: ${result.exitCode}).\n${commandOutput}`,
+                );
+              }
+
+              core.warning(
+                `Source manifest for "${builtImage.name}" not yet available (attempt ${attempt}/${maxAttempts}). Retrying in ${delayMs}ms...`,
+              );
+              await new Promise(resolve => setTimeout(resolve, delayMs));
+            }
           }
 
           // Helper function to build image tags
diff --git a/actions/docker/get-image-metadata/action.yml b/actions/docker/get-image-metadata/action.yml
@@ -46,7 +46,7 @@ runs:
   steps:
     # #region Prepare build variables
 
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         source-path: ${{ github.action_path }}/../..
 
@@ -59,7 +59,7 @@ runs:
 
     - id: get-issue-number
       if: inputs.tag == '' && (github.event_name == 'pull_request' || github.event_name == 'pull_request_review' || github.event_name == 'issue_comment')
-      uses: hoverkraft-tech/ci-github-common/actions/get-issue-number@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+      uses: hoverkraft-tech/ci-github-common/actions/get-issue-number@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
 
     - id: define-metadata-inputs
       uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
diff --git a/actions/docker/prune-pull-requests-image-tags/action.yml b/actions/docker/prune-pull-requests-image-tags/action.yml
@@ -39,7 +39,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         source-path: ${{ github.action_path }}/../..
 
@@ -49,7 +49,7 @@ runs:
         image: ${{ inputs.image }}
 
     - id: is-organization-or-user
-      uses: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+      uses: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
 
     - id: get-tags-to-delete
       uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
diff --git a/actions/helm/generate-docs/action.yml b/actions/helm/generate-docs/action.yml
@@ -145,7 +145,7 @@ runs:
           core.setOutput("markdownlint-config-path", markdownlintConfigPath);
 
     - if: ${{ inputs.checkout-ref != '' }}
-      uses: hoverkraft-tech/ci-github-common/actions/checkout@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+      uses: hoverkraft-tech/ci-github-common/actions/checkout@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         ref: ${{ inputs.checkout-ref }}
 
@@ -249,7 +249,7 @@ runs:
         client-id: ${{ inputs.github-app-client-id }}
         private-key: ${{ inputs.github-app-key }}
 
-    - uses: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       id: create-and-merge-pull-request
       with:
         github-token: ${{ steps.generate-token.outputs.token || inputs.github-token }}
diff --git a/actions/helm/release-chart/action.yml b/actions/helm/release-chart/action.yml
@@ -81,7 +81,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: hoverkraft-tech/ci-github-common/actions/checkout@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/checkout@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         ref: ${{ inputs.ref }}
 
@@ -157,7 +157,7 @@ runs:
 
           core.setOutput('values', JSON.stringify([...generatedValues, ...chartValues]));
 
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         source-path: ${{ github.action_path }}/../..
         destination-directory-name: self-actions-update-chart-values
diff --git a/actions/helm/test-chart/action.yml b/actions/helm/test-chart/action.yml
@@ -76,7 +76,7 @@ runs:
             'input must be true',
           );
 
-    - uses: hoverkraft-tech/ci-github-common/actions/checkout@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/checkout@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         fetch-depth: 0
 
@@ -133,7 +133,7 @@ runs:
     - name: Set up chart-testing
       uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0
 
-    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
+    - uses: hoverkraft-tech/ci-github-common/actions/local-actions@59c06291a1619e383a38f2006f15627aa528bb95 # 0.37.0
       with:
         source-path: ${{ github.action_path }}/../..
         destination-directory-name: self-actions-test-chart
