Bump AlmaLinux/atomic-ci/.github/workflows/build-image.yml from 11 to 12 - #166

Sourced from AlmaLinux/atomic-ci/.github/workflows/build-image.yml's changelog.

v12

Required changes

• Grant permissions to the build-iso job. The job that calls build-iso.yml has to declare the permissions the workflow needs, otherwise the workflow is rejected as invalid:

  permissions:
    contents: read
    packages: read
    id-token: write

  Template change: AlmaLinux/atomic-respin-template@73429a61

• Fix files/scripts/cleanup.sh. The script turned /var/usrlocal into a symlink to itself, which breaks /usr/local in the image. CI now detects this, removes the symlink and prints a warning, but that workaround will be removed in a future version and local builds are not covered by it.

  Template change: AlmaLinux/atomic-respin-template@396969c4

• Update the Makefile if you build ISOs or disk images locally. make iso and make qcow2 used bootc-image-builder, which no longer builds ISOs.

  Template change: AlmaLinux/atomic-respin-template@810966f2

• Rename two inputs in the job that calls build-iso.yml. Inputs are now named consistently, and the old names make the workflow invalid:

  • update_origin_ref is now update-origin-ref
  • update_is_signed is now update-is-signed

• Remove the use_librepo input from the job that calls build-iso.yml, if you set it. The input no longer exists, image-builder always uses librepo, and passing it makes the workflow invalid. The template never set it, so most repositories are not affected.

Changed

• ISOs are now live images. They boot into a live session of your image, with an installer for it. The image is included in the ISO, so installing doesn't need a network connection. ISOs are built with image-builder instead of bootc-image-builder.
  • Only the kickstart ([customizations.installer.kickstart]) of the ISO configuration file is used. Other customizations are ignored, with a warning.
  • config-file is now optional.
• Images are rechunked with bootc-base-imagectl rechunk instead of hhd-dev/rechunk. The layers of the image are split differently, so the first update after this change downloads the whole image again.
• build-iso.yml only needs packages: read.

... (truncated)

• b4a19d5 Added docs
• 1b11ce6 Catch internal ref mismatches
• fb720e4 Use env consistently
• 5e0ea65 Standardize casing of input parameters
• 90e05ed Removed use_librepo
• fad8050 Clean up changelog generation
• fa5f012 Use ubuntu-26.04 consistently
• 59be4db Don't rely on dockerfile-parse
• 544c614 Pin to the same version if both actions
• 8a2e340 Small cleanups
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)