From 3b40fd8b92a0749a72db27439402c53d51824247 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 6 Aug 2026 19:54:44 +0000
Subject: chore(deps): bump docker/login-action from 4.5.2 to 4.6.0

Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/371161bbe7024a29a25c5e19bfcbc0804fe9ad2c...dbcb813823bdd20940b903addbd779551569679f)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/build.yml')

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 832b9fa..0596fab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -167,7 +167,7 @@ jobs:
       # These `if` statements keep pull requests from publishing packages.
       # They publish default-branch builds and manual testing branch builds.
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         if: github.event_name != 'pull_request' && (github.ref_name == github.event.repository.default_branch || github.ref_name == 'testing')
         with:
           registry: ghcr.io
-- 
cgit v1.2.3


From 89e4f1b83d1ac140aedc1f17e350396e7e2c67c5 Mon Sep 17 00:00:00 2001
From: tranch <tranch.xiao@gmail.com>
Date: Thu, 20 Aug 2026 07:20:09 +0800
Subject: ci: create GitHub release after image build

---
 .github/workflows/build.yml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

(limited to '.github/workflows/build.yml')

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 832b9fa..6ff5963 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,6 +8,11 @@ on:
   #schedule:
   #  - cron: '05 10 * * *'  # 10:05am UTC everyday
   workflow_dispatch:
+    inputs:
+      handwritten:
+        description: "Small changelog about changes in this build"
+        required: false
+        type: string
 
 env:
   IMAGE_REGISTRY: "ghcr.io/${{ github.repository_owner }}"  # do not edit
@@ -20,6 +25,8 @@ jobs:
   build_push:
     name: Build and push image
     runs-on: ubuntu-24.04
+    outputs:
+      release_tag: ${{ steps.gen-version.outputs.release_tag }}
 
     permissions:
       contents: read
@@ -105,6 +112,8 @@ jobs:
             echo "ALIAS_TAGS=${ALIAS_TAGS}"
           } >> "$GITHUB_ENV"
 
+          echo "release_tag=${VERSION_TAG}" >> "$GITHUB_OUTPUT"
+
       - name: Prepare environment
         run: |
           # Lowercase the image uri https://github.com/macbre/push-to-ghcr/issues/12
@@ -211,3 +220,15 @@ jobs:
           DIGEST: ${{ steps.push-image.outputs.digest }}
         run: |
           cosign sign -y --key env://COSIGN_PRIVATE_KEY "${IMAGE_REGISTRY}/${IMAGE_NAME}@${DIGEST}"
+
+  generate_release:
+    name: Generate Release
+    needs: [build_push]
+    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+    secrets: inherit
+    uses: ./.github/workflows/generate_release.yml
+    with:
+      release_tag: ${{ needs.build_push.outputs.release_tag }}
+      handwritten: ${{ inputs.handwritten }}
-- 
cgit v1.2.3


From 7746ea13756b55b3a2ac376927c02aea5e7f07a9 Mon Sep 17 00:00:00 2001
From: tranch <tranch.xiao@gmail.com>
Date: Thu, 20 Aug 2026 07:23:32 +0800
Subject: ci: restrict release creation branches

---
 .github/workflows/build.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to '.github/workflows/build.yml')

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6ff5963..b42fd60 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -224,7 +224,9 @@ jobs:
   generate_release:
     name: Generate Release
     needs: [build_push]
-    if: github.event_name != 'pull_request'
+    if: github.event_name != 'pull_request' &&
+        (github.ref_name == github.event.repository.default_branch ||
+         github.ref_name == 'testing')
     permissions:
       contents: write
     secrets: inherit
-- 
cgit v1.2.3