Auto-tagged releases never published versioned container images. The
release tag is pushed with the default GITHUB_TOKEN, and GitHub's
recursion guard suppresses all on:push triggers for GITHUB_TOKEN-pushed
refs, so docker.yml's on:push:tags trigger never fired. Only :main and
:latest existed; every ghcr.io/block/buzz:vX.Y.Z returned 404.
Mirror the rescue release.yml already uses: auto-tag now dispatches
docker.yml with version+ref. On dispatch github.ref is main, so the tag
ref is plumbed through explicitly — checkout pins to inputs.ref and the
type=semver tags take inputs.version via metadata-action value=. An
empty value= is a no-op on the native push-tag path (procSemver falls
back to the git ref), so human-pushed tags and inputless canary
dispatches are unchanged.
Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
