ci: Only build images on specific tag pushes

.github/workflows/build_airflow.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 1/2 * *' # https://crontab.guru/#0_0_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_druid.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 1 1/2 * *' # https://crontab.guru/#0_1_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_hadoop.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 1/2 * *' # https://crontab.guru/#0_2_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_hbase.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 2/2 * *' # https://crontab.guru/#0_0_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_hive.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 2/2 * *' # https://crontab.guru/#0_2_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_java-base.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 1/2 * *' # https://crontab.guru/#0_0_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_java-devel.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 1 1/2 * *' # https://crontab.guru/#0_1_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_kafka-testing-tools.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 1/2 * *' # https://crontab.guru/#0_2_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_kafka.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 2/2 * *' # https://crontab.guru/#0_0_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_krb5.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 2/2 * *' # https://crontab.guru/#0_2_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_nifi.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 1/2 * *' # https://crontab.guru/#0_0_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_omid.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 1 1/2 * *' # https://crontab.guru/#0_1_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_opa.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 1/2 * *' # https://crontab.guru/#0_2_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_opensearch.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 2/2 * *' # https://crontab.guru/#0_0_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_spark-connect-client.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 2/2 * *' # https://crontab.guru/#0_0_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_spark-k8s.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 2/2 * *' # https://crontab.guru/#0_0_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_stackable-base.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 1 2/2 * *' # https://crontab.guru/#0_1_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_superset.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 2/2 * *' # https://crontab.guru/#0_2_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_testing-tools.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 1/2 * *' # https://crontab.guru/#0_0_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_tools.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 1 1/2 * *' # https://crontab.guru/#0_1_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_trino-cli.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 1/2 * *' # https://crontab.guru/#0_2_1/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_trino.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 0 2/2 * *' # https://crontab.guru/#0_0_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_vector.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 1 2/2 * *' # https://crontab.guru/#0_1_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/build_zookeeper.yaml

@@ -9,7 +9,9 @@ on:
     - cron: '0 2 2/2 * *' # https://crontab.guru/#0_2_2/2_*_*
   push:
     branches: [main]
-    tags: ['*']
+    tags:
+      - "[0-9][0-9].[0-9]+.[0-9]+"
+      - "[0-9][0-9].[0-9]+.[0-9]+-rc[0-9]+"
     paths:
       # To check dependencies, run this ( you will need to consider transitive dependencies)
       # bake --product PRODUCT -d | grep -v 'docker buildx bake' | jq '.target | keys[]'

.github/workflows/mirror.yaml

@@ -57,7 +57,7 @@ jobs:
           echo "IMAGE_REPOSITORY=$(.scripts/get_repo_name.sh)" | tee -a "$GITHUB_ENV"
 
       - name: Publish Container Image on oci.stackable.tech
-        uses: stackabletech/actions/publish-image@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/publish-image@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           image-registry-uri: oci.stackable.tech
           image-registry-username: robot$sdp+github-action-build
@@ -84,7 +84,7 @@ jobs:
           echo "IMAGE_REPOSITORY=$(.scripts/get_repo_name.sh)" | tee -a "$GITHUB_ENV"
 
       - name: Publish and Sign Image Index Manifest to oci.stackable.tech
-        uses: stackabletech/actions/publish-index-manifest@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/publish-image-index-manifest@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           image-registry-uri: oci.stackable.tech
           image-registry-username: robot$sdp+github-action-build

.github/workflows/pr_pre-commit.yaml

@@ -18,7 +18,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: stackabletech/actions/run-pre-commit@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+      - uses: stackabletech/actions/run-pre-commit@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
           rust: ${{ env.RUST_TOOLCHAIN_VERSION }}

.github/workflows/reusable_build_image.yaml

@@ -1,4 +1,4 @@
 on:
   workflow_call:
     inputs:
       product-name:
@@ -27,7 +27,7 @@
         with:
           persist-credentials: false
       - id: shard
-        uses: stackabletech/actions/shard@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/shard@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           product-name: ${{ inputs.product-name }}
     outputs:
@@ -44,7 +44,7 @@
       matrix:
         runner:
           - {name: "ubuntu-latest", arch: "amd64"}
-          - {name: "ubicloud-standard-8-arm", arch: "arm64"}
+          - {name: "ubicloud-standard-8-arm-ubuntu-2404", arch: "arm64"}
         versions: ${{ fromJson(needs.generate_matrix.outputs.versions) }}
     steps:
       - name: Checkout Repository
@@ -53,25 +53,26 @@
           persist-credentials: false
 
       - name: Free Disk Space
-        uses: stackabletech/actions/free-disk-space@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/free-disk-space@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
 
       - name: Build Product Image
         id: build
-        uses: stackabletech/actions/build-product-image@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/build-product-image@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
+          registry-namespace: ${{ inputs.registry-namespace }}
           product-name: ${{ inputs.product-name }}
           product-version: ${{ matrix.versions }}
           sdp-version: ${{ inputs.sdp-version }}
 
       - name: Publish Container Image on oci.stackable.tech
-        uses: stackabletech/actions/publish-image@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/publish-image@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           image-registry-uri: oci.stackable.tech
           image-registry-username: robot$${{ inputs.registry-namespace }}+github-action-build
           image-registry-password: ${{ secrets.harbor-robot-secret }}
           image-repository: ${{ inputs.registry-namespace }}/${{ inputs.product-name }}
           image-manifest-tag: ${{ steps.build.outputs.image-manifest-tag }}
-          source-image-uri: localhost/${{ inputs.product-name }}:${{ steps.build.outputs.image-manifest-tag }}
+          source-image-uri: localhost/${{ inputs.registry-namespace }}/${{ inputs.product-name }}:${{ steps.build.outputs.image-manifest-tag }}
 
   publish_manifests:
     name: Build/Publish ${{ matrix.versions }} Manifests
@@ -90,7 +91,7 @@
           persist-credentials: false
 
       - name: Publish and Sign Image Index Manifest to oci.stackable.tech
-        uses: stackabletech/actions/publish-index-manifest@497f3e3cbfe9b89b1e570351b97d050eebcad5d0 # 0.8.3
+        uses: stackabletech/actions/publish-image-index-manifest@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           image-registry-uri: oci.stackable.tech
           image-registry-username: robot$${{ inputs.registry-namespace }}+github-action-build
@@ -105,7 +106,7 @@
     if: failure() || (github.run_attempt > 1 && !cancelled())
     steps:
       - name: Send Notification
-        uses: stackabletech/actions/send-slack-notification@55d2f9fcbcd7884ac929ea65fd6f069e7b7a49d2 # v0.8.1
+        uses: stackabletech/actions/send-slack-notification@c4e66c3fb2426b37799fdace4b968a03f9478e3c # v0.10.0
         with:
           publish-manifests-result: ${{ needs.publish_manifests.result }}
           build-result: ${{ needs.build.result }}