fix: use unique-per-run platform tags.

.forgejo/workflows/docker-publish-semantic.yml

@@ -76,30 +76,17 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
-      - name: Build and push image by digest
+      - name: Build and push platform image
         id: build
         uses: https://github.com/docker/build-push-action@v6
         with:
           context: .
           platforms: ${{ matrix.platform }}
+          push: true
           provenance: false
           build-args: |
             SEMANTIC_CACHE=true
-          outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
-
-      - name: Export digest
-        run: |
-          mkdir -p /tmp/digests
-          digest="${{ steps.build.outputs.digest }}"
-          touch "/tmp/digests/${digest#sha256:}"
-
-      - name: Upload digest
-        uses: https://github.com/actions/upload-artifact@v4
-        with:
-          name: digests-semantic-${{ matrix.arch }}
-          path: /tmp/digests/*
-          if-no-files-found: error
-          retention-days: 1
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:semantic-platform-${{ matrix.arch }}-${{ github.run_id }}
 
   merge:
     runs-on: docker-amd64
@@ -128,13 +115,6 @@ jobs:
           cat /tmp/dockerd.log
           exit 1
 
-      - name: Download digests
-        uses: https://github.com/actions/download-artifact@v4
-        with:
-          path: /tmp/digests
-          pattern: digests-semantic-*
-          merge-multiple: true
-
       - name: Set up Docker Buildx
         uses: https://github.com/docker/setup-buildx-action@v3
 
@@ -159,9 +139,9 @@ jobs:
             type=sha,prefix=sha-,suffix=-semantic
 
       - name: Create and push multi-arch manifest
-        working-directory: /tmp/digests
         run: |
           docker buildx imagetools create \
             $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-            $(printf '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:semantic-platform-amd64-${{ github.run_id }} \
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:semantic-platform-arm64-${{ github.run_id }}
 

.forgejo/workflows/docker-publish.yml

@@ -69,28 +69,15 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
-      - name: Build and push image by digest
+      - name: Build and push platform image
         id: build
         uses: https://github.com/docker/build-push-action@v6
         with:
           context: .
           platforms: ${{ matrix.platform }}
+          push: true
           provenance: false
-          outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
-
-      - name: Export digest
-        run: |
-          mkdir -p /tmp/digests
-          digest="${{ steps.build.outputs.digest }}"
-          touch "/tmp/digests/${digest#sha256:}"
-
-      - name: Upload digest
-        uses: https://github.com/actions/upload-artifact@v4
-        with:
-          name: digests-${{ matrix.arch }}
-          path: /tmp/digests/*
-          if-no-files-found: error
-          retention-days: 1
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:platform-${{ matrix.arch }}-${{ github.run_id }}
 
   merge:
     runs-on: docker-amd64
@@ -119,13 +106,6 @@ jobs:
           cat /tmp/dockerd.log
           exit 1
 
-      - name: Download digests
-        uses: https://github.com/actions/download-artifact@v4
-        with:
-          path: /tmp/digests
-          pattern: digests-*
-          merge-multiple: true
-
       - name: Set up Docker Buildx
         uses: https://github.com/docker/setup-buildx-action@v3
 
@@ -150,9 +130,9 @@ jobs:
             type=sha,prefix=sha-
 
       - name: Create and push multi-arch manifest
-        working-directory: /tmp/digests
         run: |
           docker buildx imagetools create \
             $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-            $(printf '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:platform-amd64-${{ github.run_id }} \
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:platform-arm64-${{ github.run_id }}