From 9715e4518494c73d266dd94c6bc95f1b90adcb8f Mon Sep 17 00:00:00 2001 From: Lukas Hirt Date: Wed, 19 Aug 2026 23:05:53 +0200 Subject: [PATCH] fix: publish latest tag for the newest stable release MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The owncloud/ocis repository on Docker Hub has a latest tag that is now 5 months stale — it predates this repo's CI, which only publishes version tags (X.Y.Z, X.Y, X, -YYYYMMDD). Anyone pulling owncloud/ocis:latest is silently stuck on an old release without security or bug fixes. Add latest to the extra-tags of the newest stable matrix entry (8.2.0) so every build — including the weekly scheduled rebuild that picks up Alpine security patches — repoints latest at the current stable image. A comment in the matrix marks that latest must move along with the newest stable entry on future version bumps. Also refresh the stale README Supported Tags table (it still listed 8.1.0 as latest stable and 8.0.5) to match the actual build matrix, document the latest tag, and bump the quick-start example to 8.2.0. The README is synced to Docker Hub as the image description. Signed-off-by: Lukas Hirt --- .github/workflows/main.yml | 2 ++ README.md | 13 ++++++++----- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index dc74c85..ddf456f 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -51,12 +51,14 @@ jobs: strategy: matrix: release: + # `latest` must always stay on the newest stable release entry - version: "8.2.0" dir: "v8" trivy-ignore: "v8/8.2/.trivyignore" extra-tags: | 8.2 8 + latest - version: "8.1.0" dir: "v8" trivy-ignore: "v8/8.1/.trivyignore" diff --git a/README.md b/README.md index a9f1d76..d2ede56 100644 --- a/README.md +++ b/README.md @@ -14,17 +14,20 @@ Docker image for [ownCloud Infinite Scale (oCIS)](https://github.com/owncloud/oc docker run --rm \ -p 9200:9200 \ -e OCIS_INSECURE=true \ - owncloud/ocis:8.1.0 + owncloud/ocis:8.2.0 ``` ## Supported Tags | Tag | oCIS Version | |-----|-------------| -| `8.2.0-rc.1` | 8.2.0-rc.1 (release candidate — exact tag only, no floating tags) | -| `8.1.0`, `8.1`, `8` | 8.1.0 (latest stable) | -| `8.0.5`, `8.0` | 8.0.5 | -| `-YYYYMMDD` | Immutable per-build tag (e.g. `8.1.0-20260703`) | +| `latest`, `8.2.0`, `8.2`, `8` | 8.2.0 (latest stable) | +| `8.1.0`, `8.1` | 8.1.0 | +| `8.0.7`, `8.0` | 8.0.7 | +| `-YYYYMMDD` | Immutable per-build tag (e.g. `8.2.0-20260819`) | + +> **Note:** `latest` always points to the newest stable release. For production +> deployments, pin a specific version tag instead. ## Rolling Image