From e66847dffe05a993019fd0c6dcae88c9245ec8f7 Mon Sep 17 00:00:00 2001
From: Rophy Tsai <rophy@users.noreply.github.com>
Date: Thu, 30 Apr 2026 00:09:54 +0000
Subject: [PATCH 1/2] feat: add GitHub Actions release workflow for tagged
 builds

---
 .github/workflows/release.yaml | 40 ++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 .github/workflows/release.yaml

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 00000000..48498a14
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,40 @@
+name: Release Build
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: docker/setup-buildx-action@v3
+
+      - name: Log in to ghcr.io
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push release image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile.release
+          push: true
+          tags: ghcr.io/${{ github.repository }}:${{ github.ref_name }}
+          build-args: |
+            OLR_VERSION=${{ github.ref_name }}
+            UIDOLR=1001
+            GIDOLR=1001
+            GIDORA=54322
+            WITHORACLE=1
+            WITHKAFKA=1
+            WITHPROTOBUF=1
+            WITHPROMETHEUS=1

From 3103896d9718025e69c771782454858a1b5e35bf Mon Sep 17 00:00:00 2001
From: Rophy Tsai <rophy@users.noreply.github.com>
Date: Thu, 30 Apr 2026 00:15:59 +0000
Subject: [PATCH 2/2] fix: add contents:read permission for checkout

---
 .github/workflows/release.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 48498a14..4b290484 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -9,6 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     permissions:
+      contents: read
       packages: write
     steps:
       - uses: actions/checkout@v4