release

.github/workflows/console.yml

@@ -50,7 +50,7 @@ jobs:
           cache-dependency-path: pnpm-lock.yaml
       - if: ${{ steps.cache.outputs.cache-hit != 'true' }}
         name: Install dependencies
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
       - if: ${{ steps.cache.outputs.cache-hit != 'true' }}
         name: Build console with Turbo
         run: pnpm turbo build --filter=./console

.github/workflows/login-container.yml

@@ -62,7 +62,6 @@ jobs:
           provenance: true
           sbom: true
           targets: login-standalone
-          set: login-*.context=./apps/login/
           project: w47wkxzdtw
           files: |
             ./apps/login/docker-bake.hcl

.github/workflows/login-quality.yml

@@ -1,69 +0,0 @@
-name: Login Quality
-
-on:
-  workflow_call:
-    inputs:
-      ignore-run-cache:
-        description: "Ignore run caches"
-        type: boolean
-        required: true
-      node_version:
-        required: true
-        type: string
-    secrets:
-      DEPOT_TOKEN:
-        required: true
-
-jobs:
-  quality:
-    name: Ensure Quality
-    runs-on: depot-ubuntu-22.04-8
-    timeout-minutes: 30
-    permissions:
-      actions: write
-    env:
-      CACHE_DIR: /tmp/login-run-caches
-    steps:
-      - uses: actions/checkout@v4
-      - uses: depot/setup-action@v1
-      - name: Restore Run Caches
-        uses: actions/cache/restore@v4
-        id: run-caches-restore
-        with:
-          path: ${{ env.CACHE_DIR }}
-          key: ${{ runner.os }}-login-run-caches-${{github.ref_name}}-${{ github.sha }}-${{github.run_attempt}}
-          restore-keys: |
-            ${{ runner.os }}-login-run-caches-${{github.ref_name}}-${{ github.sha }}-
-            ${{ runner.os }}-login-run-caches-${{github.ref_name}}-
-            ${{ runner.os }}-login-run-caches-
-      - uses: actions/download-artifact@v4
-        with:
-          path: .artifacts
-          name: zitadel-linux-amd64
-      - name: Unpack executable
-        run: |
-          tar -xvf .artifacts/zitadel-linux-amd64.tar.gz
-          mv zitadel-linux-amd64/zitadel ./zitadel
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ inputs.node_version }}
-          cache: "pnpm"
-          cache-dependency-path: pnpm-lock.yaml
-      - name: Install dependencies
-        run: pnpm install
-      - name: Run login quality checks with Turbo
-        run: pnpm turbo test:unit
-        env:
-          DEPOT_TOKEN: ${{ secrets.DEPOT_TOKEN }}
-          LOGIN_BAKE_CLI: depot bake
-          DEPOT_PROJECT_ID: w47wkxzdtw
-          IGNORE_RUN_CACHE: ${{ github.event.inputs.ignore-run-cache }}
-          NODE_VERSION: ${{ inputs.node_version }}
-
-      - name: Save Run Caches
-        uses: actions/cache/save@v4
-        with:
-          path: ${{ env.CACHE_DIR }}
-          key: ${{ steps.run-caches-restore.outputs.cache-primary-key }}
-        if: always()

.github/workflows/release.yml

@@ -184,7 +184,7 @@ jobs:
 
       - name: Install dependencies
         working-directory: login
-        run: pnpm install
+        run: pnpm install --frozen-lockfile
 
       - name: Create Release Pull Request
         uses: changesets/action@v1

Makefile

@@ -97,7 +97,7 @@ console_move:
 
 .PHONY: console_dependencies
 console_dependencies:
-	pnpm install
+	pnpm install --frozen-lockfile
 
 .PHONY: console_client
 console_client:

apps/login/docker-bake-release.hcl

@@ -0,0 +1,3 @@
+target "release" {
+  platforms = ["linux/amd64", "linux/arm64"]
+}

apps/login/docker-bake.hcl

@@ -0,0 +1,17 @@
+# The release target is overwritten in docker-bake-release.hcl
+# It makes sure the image is built for multiple platforms.
+# By default the platforms property is empty, so images are only built for the current bake runtime platform.
+target "release" {}
+
+target "docker-metadata-action" {
+  # In the pipeline, this target is overwritten by the docker metadata action.
+  tags = ["${LOGIN_TAG}"]
+}
+
+# We run integration and acceptance tests against the next standalone server for docker.
+target "login-standalone" {
+  inherits = [
+    "docker-metadata-action",
+    "release",
+  ]
+}

docker-bake.hcl

@@ -1,5 +1,13 @@
-target "typescript-proto-client" {
+# login-standalone can extend the login-standalone target in apps/login/docker-bake.hcl
-  contexts = {
+target "login-standalone" {
-    proto-files = "target:proto-files"
+  context = .
-  }
+  dockerfile = dockerfiles/login.Dockerfile
+}
+
+target "login-standalone-out" {
+  inherits = ["login-standalone"]
+  target   = "build-out"
+  output = [
+    "type=local,dest=.artifacts/login"
+  ]
 }