merge with target branch

.github/workflows/cargo-audit.yml

@@ -5,6 +5,7 @@ on:
       - labeled
       - unlabeled
       - synchronize
+      - opened
 concurrency:
   group: cargo-audit-${{ github.ref }}
   cancel-in-progress: true
@@ -24,10 +25,19 @@ jobs:
           sudo apt-get install -y clang curl libssl-dev llvm libudev-dev protobuf-compiler
 
       - name: Install cargo-audit
-        run: cargo install --version 0.20.1 --force cargo-audit
+        run: cargo install --force cargo-audit
 
       - name: Display cargo-audit --version
         run: cargo audit --version
 
       - name: cargo audit
-        run: cargo audit --ignore RUSTSEC-2024-0336 # rustls issue; wait for upstream to resolve this
+        run: |
+          cargo audit --ignore RUSTSEC-2024-0336 \
+                      --ignore RUSTSEC-2021-0127 \
+                      --ignore RUSTSEC-2024-0370 \
+                      --ignore RUSTSEC-2022-0080 \
+                      --ignore RUSTSEC-2022-0061 \
+                      --ignore RUSTSEC-2020-0168 \
+                      --ignore RUSTSEC-2024-0384 \
+                      --ignore RUSTSEC-2024-0388 \
+                      --ignore RUSTSEC-2024-0421

.github/workflows/check-devnet.yml

@@ -3,7 +3,7 @@ name: Devnet Deploy Check
 on:
   pull_request:
     branches: [devnet, devnet-ready]
-    types: [labeled, unlabeled, synchronize]
+    types: [labeled, unlabeled, synchronize, opened]
 
 env:
   CARGO_TERM_COLOR: always

.github/workflows/check-finney.yml

@@ -3,7 +3,7 @@ name: Finney Deploy Check
 on:
   pull_request:
     branches: [finney, main]
-    types: [labeled, unlabeled, synchronize]
+    types: [labeled, unlabeled, synchronize, opened]
 
 env:
   CARGO_TERM_COLOR: always

.github/workflows/check-testnet.yml

@@ -3,7 +3,7 @@ name: Testnet Deploy Check
 on:
   pull_request:
     branches: [testnet, testnet-ready]
-    types: [labeled, unlabeled, synchronize]
+    types: [labeled, unlabeled, synchronize, opened]
 
 env:
   CARGO_TERM_COLOR: always

.github/workflows/docker.yml

@@ -4,6 +4,17 @@ on:
   release:
     types: [published]
   workflow_dispatch:
+    inputs:
+      branch-or-tag:
+        description: "Branch or tag to use for the Docker image tag and ref to checkout (optional)"
+        required: false
+        default: ""
+
+  push:
+    branches:
+      - devnet-ready
+      - devnet
+      - testnet
 
 permissions:
   contents: read
@@ -16,8 +27,18 @@ jobs:
     runs-on: SubtensorCI
 
     steps:
+      - name: Determine Docker tag and ref
+        id: tag
+        run: |
+          branch_or_tag="${{ github.event.inputs.branch-or-tag || github.ref_name }}"
+          echo "Determined branch or tag: $branch_or_tag"
+          echo "tag=$branch_or_tag" >> $GITHUB_ENV
+          echo "ref=$branch_or_tag" >> $GITHUB_ENV
+
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          ref: ${{ env.ref }}
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v2
@@ -32,18 +53,10 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Extract metadata (tags, labels) for Docker
-        id: meta
-        uses: docker/metadata-action@v4
-        with:
-          images: ghcr.io/${{ github.repository }}
-
       - name: Build and push Docker image
         uses: docker/build-push-action@v4
         with:
           context: .
           push: true
           tags: |
-            ${{ steps.meta.outputs.tags }}
-            ghcr.io/${{ github.repository }}:latest
-          labels: ${{ steps.meta.outputs.labels }}
+            ghcr.io/${{ github.repository }}:${{ env.tag }}

.github/workflows/label-triggers.yml

@@ -3,6 +3,9 @@ on:
   pull_request:
     types:
       - labeled
+      - unlabeled
+      - synchronize
+      - opened
 
 permissions:
   issues: write