This repository was archived by the owner on Jul 1, 2026. It is now read-only.
ci: set up fork release pipeline and stabilize CI - #2
Merged
Conversation
On a *-ridi.* tag push (or manual dispatch), build both variants multi-arch
and push to Docker Hub ridi/ministack: regular -> :{version} / :latest, full
(DuckDB/Athena) -> :{version}-full / :full. Requires DOCKERHUB_USERNAME /
DOCKERHUB_TOKEN secrets.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
docker-publish (release), docker-publish-on-pr (PR preview image), and pypi-publish target upstream's Docker Hub org / PyPI with upstream secrets and are unused in the fork (which ships via ridi-docker-publish.yml and does not publish to PyPI). Removing them stops the failing 'publish-pr' check on fork PRs. If PR-preview images are wanted later, add a fork-scoped variant pointing at a RIDI preview repo. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The test job did 'sleep 3' then a single curl; importing ~69 services can take longer, so curl raced the port bind and failed with exit 7 (flaky). Poll the health endpoint for up to 30s instead. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
sjincho
force-pushed
the
ci/dockerhub-publish
branch
from
June 19, 2026 08:43
f4e832d to
731176d
Compare
sjincho
marked this pull request as ready for review
June 19, 2026 11:26
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Sets up the fork's CI/release and clears the red checks on fork PRs.
Changes
ridi-docker-publish.yml(new) — on a*-ridi.*tag push (or manualworkflow_dispatch), builds both variants multi-arch (amd64/arm64) and pushes to Docker Hubridi/ministack: regular →:{version}/:latest; full (DuckDB/Athena) →:{version}-full/:full.docker-publish(release),docker-publish-on-pr(PR preview image →ministackorg/ministack-preview-build), andpypi-publish. They target upstream's Docker Hub org / PyPI with upstream secrets and are unused in the fork (which has its own publish path and doesn't publish to PyPI). This is what removes the failingpublish-prcheck. If PR-preview images are wanted later, add a fork-scoped variant pointing at a RIDI preview repo.ci.ymldidsleep 3+ a singlecurl; importing ~69 services can take longer, racing the port bind (exit 7, flaky). Now polls/_ministack/healthfor up to 30s.Requires
DOCKERHUB_USERNAME/DOCKERHUB_TOKEN(RIDI Docker Hub) — forridi-docker-publish.yml; add before the first release.Notes
ubuntu-latestfor now. RIDI's dedicated static-IP runners (org IP allow-list) are preferred, butridi/ministackisn't authorized for the org runner group yet — a job targeting them queues indefinitely. Switch once the fork is added to the runner group (Org Settings → Actions → Runner groups → repository access).publish-prispull_request_targetand runs from the base branch, so it keeps appearing (and failing, frommain's copy) on open PRs until this merges tomain— after which it's gone entirely.