Publish oci packages versions

Author: minottic

.github/semantic-release/.releaserc.yaml

@@ -9,4 +9,5 @@ plugins:
   - '@semantic-release/github'
   -
     - '@semantic-release/exec'
+    - publishCmd: VERSION=${nextRelease.version} node publish-oci.js
     - successCmd: echo "tag=${nextRelease.gitTag}" >> $GITHUB_OUTPUT

.github/semantic-release/publish-oci.js

@@ -0,0 +1,53 @@
+const { execSync } = require("child_process");
+
+const version = process.env.VERSION.replace(/^v/, "");
+const repo = process.env.GITHUB_REPOSITORY.toLowerCase();
+const imagePath = `ghcr.io/${repo}`;
+
+const ociTypes = ["", "-full", "-dev", "-dev-full", "-v3", "-v3-full"];
+
+ociTypes.forEach((ociType) => {
+  const dockerEnv = {
+    ...process.env,
+    JOBS_ENABLED: ociType.includes("-full") ? "true" : "",
+    ELASTIC_ENABLED: ociType.includes("-full") ? "true" : "",
+    LDAP_ENABLED: ociType.includes("-full") ? "true" : "",
+    OIDC_ENABLED: ociType.includes("-full") ? "true" : "",
+    COMPOSE_PROFILES: ociType.includes("-full") ? "*" : "",
+    DEV: ociType.includes("-dev") ? "true" : "",
+    BE_VERSION: ociType.includes("-v3") ? "v3" : "v4",
+  };
+
+  try {
+    // 1. Resolve Compose
+    execSync(
+      "docker compose -f ../../compose.yaml config --no-path-resolution > resolved-compose.yaml",
+      {
+        env: dockerEnv,
+      },
+    );
+
+    // 2. Inline & Escape $ (Safe Node-style string replacement)
+    execSync(
+      "yq -i \"(.configs[] | select(has(\\\"file\\\"))) |= (.content = (load_str(.file) | split(\\\"$\\\") | join(\\\"$$\\\")) | del(.file))\" resolved-compose.yaml",
+      { stdio: "inherit" }
+    );
+
+    // 3. Publish
+    const ociTags = [
+      `${imagePath}:${version}${ociType}`,
+      `${imagePath}:latest${ociType}`,
+    ];
+    ociTags.forEach((ociTag) => {
+      execSync(
+        `yes | docker compose -f resolved-compose.yaml publish --resolve-image-digests --with-env --yes ${ociTag}`,
+        {
+          env: dockerEnv,
+          stdio: "inherit",
+        },
+      );
+    });
+  } catch {
+    process.exit(1);
+  }
+});

.github/workflows/semantic_release.yaml

@@ -12,6 +12,7 @@ jobs:
       contents: write
       issues: write
       pull-requests: write
+      packages: write
     defaults:
       run:
         working-directory: .github/semantic-release
@@ -26,6 +27,12 @@ jobs:
           node-version: 24
       - name: Install dependencies
         run: npm install --no-package-lock
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: Release
         id: semantic-release
         env: