From 8af5540a9c67a0d147249777de422baf3fe6006a Mon Sep 17 00:00:00 2001
From: An Phan <aph@qwello.eu>
Date: Thu, 2 Jul 2026 00:42:08 +0200
Subject: [PATCH] ci: build release images on tag push only

Remove the workflow_dispatch trigger so the release image can only be
built via a pushed v* tag (i.e. through ./release). Manual dispatch
built images without bumping the Dockerfile/goss version or tagging the
repo, producing incomplete releases.
---
 .github/workflows/release.yml | 11 +----------
 1 file changed, 1 insertion(+), 10 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index be7acbf..cd692f9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,12 +3,6 @@ on:
   push:
     tags:
       - 'v*' # Push events to matching v*, i.e. v1.0, v20.15.10
-  workflow_dispatch:
-    inputs:
-      koel_version:
-        description: 'Koel release tag to build against (e.g. v9.4.0). Required when triggered manually.'
-        required: true
-        type: string
 
 permissions: read-all
 
@@ -47,11 +41,8 @@ jobs:
 
       - name: Resolve version
         id: version
-        # env-var indirection to prevent template injection from the dispatch input
-        env:
-          KOEL_VERSION: ${{ inputs.koel_version }}
         run: |
-          REF="${KOEL_VERSION:-$GITHUB_REF_NAME}"
+          REF="$GITHUB_REF_NAME"
           echo "VERSION=${REF#v}" >> "$GITHUB_OUTPUT"
           echo "TAG=${REF}" >> "$GITHUB_OUTPUT"