From 7455110877bb8affe9c5780c7ddda15c36858bff Mon Sep 17 00:00:00 2001 From: Quentin Gliech Date: Thu, 4 Jun 2026 15:43:43 +0200 Subject: [PATCH] Use the public registry hostname in release notes The release notes list the Docker image tags straight from the metadata-action output, which references the internal push registry (oci-push.vpn.infra.element.io, the only writable endpoint) rather than the public pull registry (oci.element.io) that users actually pull from. Rewrite the host when building the release-notes metadata blob, leaving the tags used for the actual push untouched. --- .github/workflows/build.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 469499798..9e7b79cfd 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -583,6 +583,14 @@ jobs: REGULAR_TAGS: ${{ needs.compute-image-meta.outputs.regular-tags }} DEBUG_TAGS: ${{ needs.compute-image-meta.outputs.debug-tags }} run: | + # This metadata is only consumed by the release notes, which are + # public-facing. The tags reference the internal push registry + # (`oci-push.vpn.infra.element.io`, the only writable endpoint), but + # users pull from `oci.element.io`, so rewrite the host here. The tags + # used for the actual push in `finalize-image` are left untouched. + REGULAR_TAGS=${REGULAR_TAGS//oci-push.vpn.infra.element.io/oci.element.io} + DEBUG_TAGS=${DEBUG_TAGS//oci-push.vpn.infra.element.io/oci.element.io} + # Convert the newline-separated tag lists into JSON arrays. regular_tags=$(jq -Rnc '[inputs | select(length > 0)]' <<< "$REGULAR_TAGS") debug_tags=$(jq -Rnc '[inputs | select(length > 0)]' <<< "$DEBUG_TAGS")