fix(docker): decouple the best-effort Bun image from the release manifest

The v3.8.50 Docker publish failed on both arches with: process "/bin/sh -c bun run --quiet build" ... cannot allocate memory Only Dockerfile.bun failed. The SUPPORTED images built fine — runner-base in 16m03 (amd64) / 14m13 (arm64), runner-web in 3m15 / 1m31 — yet none of them reached the registry, because one best-effort target sank the whole workflow. AGENTS.md is explicit that Bun is a compatibility path and NOT a supported runtime. Giving it the power to block the release inverts that: the runtime users actually run stayed unpublished so an experimental one could fail loudly. The Bun image is still built and still pushed on every run — it only stops being a release blocker: - both Bun build steps are `continue-on-error` - the digest files are only created when a digest actually exists - `create_manifest` takes an `optional` flag: an empty digest dir now warns and skips that tag instead of exiting 1. base/web stay hard-fail, so a real regression in a supported image still stops the publish. Applied to both the Docker Hub and GHCR manifest steps. One trap worth naming: the digest guard uses `if` blocks rather than `[ -n "$X" ] && touch ...`. Under `set -euo pipefail` a failing AND-list aborts the step — which is exactly the empty-digest case this is meant to handle, so the terse form would have swapped one blocker for another.
2026-09-18 21:02:50 +03:00 · 2026-08-26 21:17:21 -03:00
3 changed files with 37 additions and 109 deletions
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -185,6 +185,13 @@ jobs:

      - name: Build and push BUN base platform image by digest
        id: build-bun-base
+        # Bun is a best-effort compatibility target, not a supported runtime
+        # (AGENTS.md -> Environment). Its `bun run build` has been OOM-killing on
+        # both arches; letting that sink the whole publish means the SUPPORTED
+        # runner-base / runner-web images never reach the registry either. The
+        # image is still built and pushed whenever it succeeds — only its power to
+        # block the release is removed.
+        continue-on-error: true
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
        with:
          context: .
@@ -203,6 +210,13 @@ jobs:

      - name: Build and push BUN web platform image by digest
        id: build-bun-web
+        # Bun is a best-effort compatibility target, not a supported runtime
+        # (AGENTS.md -> Environment). Its `bun run build` has been OOM-killing on
+        # both arches; letting that sink the whole publish means the SUPPORTED
+        # runner-base / runner-web images never reach the registry either. The
+        # image is still built and pushed whenever it succeeds — only its power to
+        # block the release is removed.
+        continue-on-error: true
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
        with:
          context: .
@@ -230,8 +244,15 @@ jobs:
          mkdir -p /tmp/digests/base /tmp/digests/web /tmp/digests/bun-base /tmp/digests/bun-web
          touch "/tmp/digests/base/${DIGEST_BASE#sha256:}"
          touch "/tmp/digests/web/${DIGEST_WEB#sha256:}"
-          touch "/tmp/digests/bun-base/${DIGEST_BUN_BASE#sha256:}"
-          touch "/tmp/digests/bun-web/${DIGEST_BUN_WEB#sha256:}"
+          # Empty when the (non-blocking) bun build produced no image. `if` blocks,
+          # not `[ -n ] && touch`: under `set -e` a failing AND-list aborts the step,
+          # which is precisely the case being handled here.
+          if [ -n "$DIGEST_BUN_BASE" ]; then
+            touch "/tmp/digests/bun-base/${DIGEST_BUN_BASE#sha256:}"
+          fi
+          if [ -n "$DIGEST_BUN_WEB" ]; then
+            touch "/tmp/digests/bun-web/${DIGEST_BUN_WEB#sha256:}"
+          fi

      - name: Upload base digests
        uses: actions/upload-artifact@v7
@@ -338,7 +359,7 @@ jobs:
          set -euo pipefail

          create_manifest() {
-            local image="$1" suffix="$2" dir="$3"
+            local image="$1" suffix="$2" dir="$3" optional="${4:-}"
            local tags=(-t "${image}:${VERSION}${suffix}")
            if [ "$PROMOTE_LATEST" = "true" ]; then
              tags+=(-t "${image}:latest${suffix}")
@@ -348,6 +369,10 @@ jobs:
              refs+=("${image}@sha256:$(basename "$digest_file")")
            done < <(find "$dir" -type f | sort)
            if [ "${#refs[@]}" -eq 0 ]; then
+              if [ -n "$optional" ]; then
+                echo "::warning::No image digests in $dir — skipping optional tag ${image}:${VERSION}${suffix}" >&2
+                return 0
+              fi
              echo "No image digests in $dir" >&2
              exit 1
            fi
@@ -356,15 +381,15 @@ jobs:

          create_manifest "${IMAGE_NAME}" "" /tmp/digests/base
          create_manifest "${IMAGE_NAME}" "-web" /tmp/digests/web
-          create_manifest "${IMAGE_NAME}" "-bun" /tmp/digests/bun-base
-          create_manifest "${IMAGE_NAME}" "-web-bun" /tmp/digests/bun-web
+          create_manifest "${IMAGE_NAME}" "-bun" /tmp/digests/bun-base optional
+          create_manifest "${IMAGE_NAME}" "-web-bun" /tmp/digests/bun-web optional

      - name: Create GHCR manifest
        run: |
          set -euo pipefail

          create_manifest() {
-            local image="$1" suffix="$2" dir="$3"
+            local image="$1" suffix="$2" dir="$3" optional="${4:-}"
            local tags=(-t "${image}:${VERSION}${suffix}")
            if [ "$PROMOTE_LATEST" = "true" ]; then
              tags+=(-t "${image}:latest${suffix}")
@@ -374,6 +399,10 @@ jobs:
              refs+=("${image}@sha256:$(basename "$digest_file")")
            done < <(find "$dir" -type f | sort)
            if [ "${#refs[@]}" -eq 0 ]; then
+              if [ -n "$optional" ]; then
+                echo "::warning::No image digests in $dir — skipping optional tag ${image}:${VERSION}${suffix}" >&2
+                return 0
+              fi
              echo "No image digests in $dir" >&2
              exit 1
            fi
@@ -382,8 +411,8 @@ jobs:

          create_manifest "${GHCR_IMAGE_NAME}" "" /tmp/digests/base
          create_manifest "${GHCR_IMAGE_NAME}" "-web" /tmp/digests/web
-          create_manifest "${GHCR_IMAGE_NAME}" "-bun" /tmp/digests/bun-base
-          create_manifest "${GHCR_IMAGE_NAME}" "-web-bun" /tmp/digests/bun-web
+          create_manifest "${GHCR_IMAGE_NAME}" "-bun" /tmp/digests/bun-base optional
+          create_manifest "${GHCR_IMAGE_NAME}" "-web-bun" /tmp/digests/bun-web optional

      - name: Inspect image
        if: needs.prepare.outputs.version != 'main'
--- a/.mailmap
+++ b/.mailmap
@@ -1,40 +0,0 @@
-# .mailmap — canonical author identities for git log/shortlog/blame.
-#
-# Why this file exists: between 2026-08-13 and 2026-08-26 this checkout carried a
-# `git config --local` whose user.name was one contributor's ("Xiangzhe" / @xz-dev)
-# and whose user.email was ANOTHER contributor's (@backryun). Every commit produced
-# on this machine in that window was therefore signed with @backryun's address —
-# 237 commits, all in the -0300 timezone, while @backryun's own work commits from
-# +0900 and continued normally throughout. The local override was removed on
-# 2026-08-26; this file repairs the RECORD without rewriting published history
-# (those commits live on release/v3.8.50 and release/v3.8.51, which other sessions
-# and open PRs build on — a rewrite would force-push both and orphan the v3.8.50 tag).
-#
-# Format: Canonical Name <canonical@email> Commit Name <commit@email>
-
-# --- Maintainer: several addresses used over the project's life ---
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <diegosouza.pw@gmail.com>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <diegosouza.pw@outlook.com>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <diegosouzapw@users.noreply.github.com>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> Diego Rodrigues de Sa e Souza <8016841+diegosouzapw@users.noreply.github.com>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> Diego Souza <8016841+diegosouzapw@users.noreply.github.com>
-
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <diego.souza.pw@gmail.com>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <souzamiriamrodrigues790@gmail.com>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <diego.souza@cdwasolutions.com.br>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> <diegosouzapw@devbox.local>
-
-# --- The misattribution window: name Xiangzhe + @backryun's email, from -0300.
-# These are maintainer/session commits, NOT @backryun's contributions.
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> Xiangzhe <bakryun0718@proton.me>
-diegosouzapw <8016841+diegosouzapw@users.noreply.github.com> Xiangzhe <diegosouza.pw@gmail.com>
-
-# --- Xiangzhe (@xz-dev) — a distinct contributor; keep their own work intact ---
-Xiangzhe <32761048+xz-dev@users.noreply.github.com> <xz-dev@users.noreply.github.com>
-Xiangzhe <32761048+xz-dev@users.noreply.github.com> <xiangzhedev@gmail.com>
-
-# --- @backryun's own alternate addresses (their real work, kept intact) ---
-backryun <24198422+backryun@users.noreply.github.com> <bakryun0718@proton.me>
-backryun <24198422+backryun@users.noreply.github.com> <backryun@daonlab.local>
-backryun <24198422+backryun@users.noreply.github.com> <busan011@ormbiz.co.kr>
-backryun <24198422+backryun@users.noreply.github.com> <backryun@users.noreply.github.com>
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -93,67 +93,6 @@

 _Living section — regenerated 2026-08-12 from all cycle commits (cycle open `ed2db6cb19` → tip). Bullets carry the merged PR and its author; direct pushes listed separately._

-### 📊 Release by the numbers
-
-| | |
-| --- | ---: |
-| 👥 People who contributed | **248** |
-| 📝 Commits in the cycle | **1,714** |
-| 🔀 Pull requests referenced | **1,666** |
-| 📋 Changelog entries | **1,182** |
-| 🙌 Contributors credited in entries | **256** |
-| 🤖 Automated dependency commits | 22 |
-
-**Entries by type**
-
-| Type | Count |
-| --- | ---: |
-| 🐛 Fixes | 779 |
-| ✨ Features | 169 |
-| 📚 Docs | 29 |
-| 🧹 Chore | 27 |
-| 🧪 Tests | 15 |
-| ♻️ Refactor | 5 |
-| ⚡ Performance | 3 |
-| providers | 2 |
-| 🔒 Security | 2 |
-| ⚙️ CI | 2 |
-| deps | 2 |
-| maint | 2 |
-
-### 🏆 Top 25 contributors this cycle
-
-_By commits in `ed2db6cb19..v3.8.50`, author identities consolidated via `.mailmap`. Bots excluded._
-
-| # | Contributor | Commits |
-| ---: | --- | ---: |
-| 🥇 | diegosouzapw | 738 |
-| 🥈 | backryun | 88 |
-| 🥉 | Dizzle | 66 |
-| 4 | Ravi Tharuma | 52 |
-| 5 | Markus Hartung | 48 |
-| 6 | Bob.Hou | 42 |
-| 7 | Rouzbeh† | 38 |
-| 8 | Xiangzhe | 31 |
-| 9 | Paco Cartones | 28 |
-| 10 | Nguyen Thanh Dat | 23 |
-| 11 | Aman | 22 |
-| 12 | Will Gordon | 19 |
-| 13 | 小妍儿 ✨ | 17 |
-| 14 | adevwithpurpose | 16 |
-| 15 | Andrew B. | 10 |
-| 16 | NOXX - Commiter | 10 |
-| 17 | ignamiranda | 10 |
-| 18 | Jonathan Bailey | 9 |
-| 19 | Ke Jin | 9 |
-| 20 | Austin Liu | 8 |
-| 21 | Chewji | 8 |
-| 22 | Prudhvi Vuda | 7 |
-| 23 | benzntech | 7 |
-| 24 | rinseaid | 7 |
-| 25 | stanley | 7 |
-
-
 ### ✨ New Features
 - **feat(search):** first-class X Search provider (`x-search`) on `POST /v1/search` and MCP `omniroute_x_search` using SuperGrok / xAI server-side `x_search`. Explicit provider or `search_type: "x"` only — never auto-selected for web. Reuses `xai-oauth` / `xao` / `xai` credentials. Not the X Developer Platform MCP. ([#10985](https://github.com/diegosouzapw/OmniRoute/issues/10985))
 - **feat(core):** add Layer A capability filter at router (#5696)