Update Github Actions #none major

.github/workflows/lint.yml

@@ -13,11 +13,11 @@ jobs:
   build:
     runs-on: slim
     permissions:
-      contents: read
+      contents: write
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
     - name: Verify Action
       run: actionlint -ignore 'unexpected key "description" for "workflow" section' -ignore 'nexpected key "inputs" for "workflow" section.' -ignore 'unexpected key "runs" for "workflow" section.' -ignore '"on" section is missing in workflow' -ignore '"jobs" section is missing in workflow' action.yml
     - name: tag latest after success

action.yml

@@ -29,10 +29,60 @@ runs:
   steps:
       - name: Checkout repository
         if: ${{ inputs.checkout == 'true' }}
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: '0'
-      - name: debug Stuff
+      - name: Bump version and push tag
-        run: |
+        id: tag
-          mount
+        if: ${{ inputs.tag == 'true' }}
-          ls -latr /opt/hostedtoolcache/
+        uses: phadric/github-tag-action@a5250a59655e9f4b0350407380a92c73948f2aec # master
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # if you don't want to set write permissions use a PAT token
+          DEFAULT_BUMP: patch
+          GIT_API_TAGGING: false # dont use API
+          WITH_V: true
+          PRERELEASE: true
+          PRERELEASE_SUFFIX: ${{ github.ref_name }}
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        with:
+          flavor: |
+            latest=${{ github.ref_name == 'main' || github.ref_name == 'master' }}                                                       
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}},value=${{steps.tag.outputs.tag}}
+            # output 0.1
+            type=semver,pattern={{major}}.{{minor}},value=${{steps.tag.outputs.tag}}
+            # disabled if major zero
+            type=semver,pattern={{major}},value=${{steps.tag.outputs.tag}},enable=${{ !startsWith(steps.tag.outputs.tag, 'v0.') }}                                                
+          images: ${{ inputs.registry }}/${{ inputs.image_name }}
+      - uses: int128/docker-build-cache-config-action@1bdbbd61b3eea23c7e7a121eb15dd9b0a9ec7d97 # v1.57.0
+        id: cache
+        with:
+          image: ${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache
+          extra-cache-to: image-manifest=true
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+      - name: Log into registry ${{ inputs.registry }}
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        with:
+          registry: ${{ inputs.registry }}
+          username: ${{ github.actor }}
+          password: ${{ inputs.token }}
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          platforms: linux/amd64
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: |
+            type=registry,ref=${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache:latest
+            type=registry,ref=${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache:${{ github.ref_name }}
+            ${{ steps.cache.outputs.cache-from }}                                                
+          cache-to: |
+            ${{ steps.cache.outputs.cache-to }}
+            type=registry,ref=${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache:latest,mode=max,image-manifest=true