ci: [TOOL-838] release multi-arch image to ECR on tag push; drop Docker Hub workflow - #3
Merged
Merged
Conversation
…er Hub workflow Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
Review changes with Changed Files
|
0xJepsen
approved these changes
Aug 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Context
This fork now carries the pool-leak fix (#1) and dependency/base-image bumps (#2), and the plan (Linear TOOL-838) is for the fork to publish its own image to sfcompute's private ECR, replacing both the inherited Docker Hub workflow here and the monorepo's build-from-pinned-upstream-SHA workflow.
Changes
.github/workflows/release.yml: builds a multi-arch (amd64+arm64) image and pushes to ECRsfcompute/postgres-mcponv*tag pushes, via GitHub OIDC (ECR_PUSH_ROLE_ARN/AWS_REGIONrepo variables).workflow_dispatchruns are dry-run builds unlesspush=trueis set..github/workflows/docker-build-dockerhub.yml: inherited from upstream; it pushes to crystaldba's Docker Hub with credentials this fork doesn't have, so it can only fail.build.yml(CI) is untouched.Before the first release
ECR_PUSH_ROLE_ARN,AWS_REGION(us-west-1).v0.3.0-sfc.1(convention:v<upstream-base>-sfc.N).🤖 Generated with Claude Code