From 0f000a676b23c655685a9ac26cf2d77ed37cdd20 Mon Sep 17 00:00:00 2001
From: Don-Swanson <32144818+Don-Swanson@users.noreply.github.com>
Date: Wed, 26 Nov 2025 15:51:06 -0600
Subject: [PATCH] Update GitHub Actions workflows to use latest actions and
 improve build conditions

- Upgraded `actions/checkout` from v2 to v4 for better performance.
- Replaced deprecated buildx setup with `docker/setup-qemu-action` and `docker/setup-buildx-action`.
- Updated `docker/login-action` to v3 for enhanced security.
- Refined conditions for building and pushing Docker images based on workflow events.
---
 .github/workflows/buildx.yml      | 37 +++++++++----------------------
 .github/workflows/docker_main.yml |  2 +-
 2 files changed, 11 insertions(+), 28 deletions(-)

diff --git a/.github/workflows/buildx.yml b/.github/workflows/buildx.yml
index d89eea5..95a2a8d 100644
--- a/.github/workflows/buildx.yml
+++ b/.github/workflows/buildx.yml
@@ -21,19 +21,18 @@ jobs:
         if: ${{ github.event.workflow_run.conclusion != 'success' && startsWith(github.ref, 'refs/tags') != true }}
         run: exit 1
       - name: checkout code
-        uses: actions/checkout@v2
-      - name: install buildx
-        id: buildx
-        uses: crazy-max/ghaction-docker-buildx@v1
-        with:
-          version: latest
+        uses: actions/checkout@v4
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
       - name: Login to Docker Hub
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Login to ghcr.io
-        uses: docker/login-action@v1
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -51,14 +50,10 @@ jobs:
       #       --tag ghcr.io/benbusby/whoogle-search:latest \
       #       --platform linux/amd64,linux/arm64 .
       - name: build and push updates branch (update-testing tag)
-        if: github.event.workflow_run.head_branch == 'updates' && github.event.workflow_run.conclusion == 'success' && (github.actor == 'benbusby' || github.actor == 'Don-Swanson')
+        if: github.event_name == 'workflow_run' && github.event.workflow_run.head_branch == 'updates' && github.event.workflow_run.conclusion == 'success' && (github.event.workflow_run.actor.login == 'benbusby' || github.event.workflow_run.actor.login == 'Don-Swanson')
         run: |
-          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-          docker buildx ls
           docker buildx build --push \
             --tag benbusby/whoogle-search:update-testing \
-            --platform linux/amd64,linux/arm/v7,linux/arm64 .
-          docker buildx build --push \
             --tag ghcr.io/benbusby/whoogle-search:update-testing \
             --platform linux/amd64,linux/arm/v7,linux/arm64 .
       - name: build and push release (version + latest)
@@ -66,13 +61,9 @@ jobs:
         run: |
           TAG="${{ github.event.release.tag_name }}"
           VERSION="${TAG#v}"
-          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-          docker buildx ls
           docker buildx build --push \
             --tag benbusby/whoogle-search:${VERSION} \
             --tag benbusby/whoogle-search:latest \
-            --platform linux/amd64,linux/arm/v7,linux/arm64 .
-          docker buildx build --push \
             --tag ghcr.io/benbusby/whoogle-search:${VERSION} \
             --tag ghcr.io/benbusby/whoogle-search:latest \
             --platform linux/amd64,linux/arm/v7,linux/arm64 .
@@ -81,22 +72,14 @@ jobs:
         run: |
           TAG="${{ github.event.release.tag_name }}"
           VERSION="${TAG#v}"
-          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-          docker buildx ls
           docker buildx build --push \
             --tag benbusby/whoogle-search:${VERSION} \
-            --platform linux/amd64,linux/arm/v7,linux/arm64 .
-          docker buildx build --push \
             --tag ghcr.io/benbusby/whoogle-search:${VERSION} \
             --platform linux/amd64,linux/arm/v7,linux/arm64 .
       - name: build and push tag
         if: startsWith(github.ref, 'refs/tags')
         run: |
-          docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-          docker buildx ls
           docker buildx build --push \
-            --tag benbusby/whoogle-search:${GITHUB_REF#refs/*/v}\
-            --platform linux/amd64,linux/arm/v7,linux/arm64 .
-          docker buildx build --push \
-            --tag ghcr.io/benbusby/whoogle-search:${GITHUB_REF#refs/*/v}\
+            --tag benbusby/whoogle-search:${GITHUB_REF#refs/*/v} \
+            --tag ghcr.io/benbusby/whoogle-search:${GITHUB_REF#refs/*/v} \
             --platform linux/amd64,linux/arm/v7,linux/arm64 .
\ No newline at end of file
diff --git a/.github/workflows/docker_main.yml b/.github/workflows/docker_main.yml
index e2e47e9..80dd5fb 100644
--- a/.github/workflows/docker_main.yml
+++ b/.github/workflows/docker_main.yml
@@ -14,7 +14,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
     - name: checkout code
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: build and test (docker)
       run: |
         docker build --tag whoogle-search:test .