ci: image tags per ref (dev, main -> latest, v* -> version + stable)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

.gitea/workflows/build-and-publish.yaml

@@ -1,17 +1,21 @@
 name: MindSift CI & Docker Release
 
+# Image tags:
+#   push to dev      -> :dev
+#   push/merge main  -> :latest
+#   git tag v1.2.0   -> :v1.2.0 and :stable
 on:
   push:
-    branches-ignore:
+    branches:
+      - dev
       - main
     tags:
-      - '*'
+      - 'v*'
 
 jobs:
   build-test-push:
     name: Build, Test in Container & Push
     runs-on: ubuntu-latest
-    if: github.ref != 'refs/heads/main'
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
@@ -33,9 +37,17 @@ jobs:
           # Ersetze evtl. Slashes in Branch-Namen (z.B. rc/1.1 -> rc-1.1) für valide Docker-Tags
           DOCKER_TAG=$(echo "${REF_NAME}" | sed 's#/#-#g' | tr '[:upper:]' '[:lower:]')
 
+          # All tags of this run (space separated)
+          case "${GITHUB_REF:-}" in
+            refs/tags/*)  TAGS="${DOCKER_TAG} stable" ;;
+            refs/heads/main) TAGS="latest" ;;
+            *)            TAGS="${DOCKER_TAG}" ;;
+          esac
+
           echo "registry=${REGISTRY_HOST}" >> "$GITHUB_OUTPUT"
           echo "image=${IMAGE_NAME}" >> "$GITHUB_OUTPUT"
-          echo "tag=${DOCKER_TAG}" >> "$GITHUB_OUTPUT"
+          echo "tag=${TAGS%% *}" >> "$GITHUB_OUTPUT"
+          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
           echo "actor=${ACTOR_NAME}" >> "$GITHUB_OUTPUT"
           # Releases (tags) show the tag as version in the app header
           APP_VERSION=""
@@ -43,7 +55,7 @@ jobs:
             refs/tags/*) APP_VERSION="${REF_NAME}" ;;
           esac
           echo "app_version=${APP_VERSION}" >> "$GITHUB_OUTPUT"
-          echo "Target Docker image: ${IMAGE_NAME}:${DOCKER_TAG} (Registry: ${REGISTRY_HOST}, Actor: ${ACTOR_NAME})"
+          echo "Target Docker image: ${IMAGE_NAME} tags: ${TAGS} (Registry: ${REGISTRY_HOST}, Actor: ${ACTOR_NAME})"
 
       - name: Login to Gitea Container Registry
         uses: docker/login-action@v3
@@ -54,8 +66,10 @@ jobs:
 
       - name: Build & Run All Checks in Container, then Push
         run: |
-          FULL_IMAGE="${{ steps.prep.outputs.image }}:${{ steps.prep.outputs.tag }}"
-          echo "🚀 Building container & executing Frontend/Backend checks inside image: ${FULL_IMAGE}"
-          DOCKER_BUILDKIT=1 docker build --progress=plain --build-arg APP_VERSION="${{ steps.prep.outputs.app_version }}" -t "${FULL_IMAGE}" .
-          echo "✅ All checks & tests passed inside container! Pushing ${FULL_IMAGE}..."
-          docker push "${FULL_IMAGE}"
+          IMAGE="${{ steps.prep.outputs.image }}"
+          TAG_ARGS=""
+          for t in ${{ steps.prep.outputs.tags }}; do TAG_ARGS="${TAG_ARGS} -t ${IMAGE}:${t}"; done
+          echo "🚀 Building container & executing Frontend/Backend checks inside image: ${IMAGE} (tags: ${{ steps.prep.outputs.tags }})"
+          DOCKER_BUILDKIT=1 docker build --progress=plain --build-arg APP_VERSION="${{ steps.prep.outputs.app_version }}" ${TAG_ARGS} .
+          echo "✅ All checks & tests passed inside container! Pushing..."
+          for t in ${{ steps.prep.outputs.tags }}; do docker push "${IMAGE}:${t}"; done