feat: tag Docker images with semver alongside SHA and latest

.gitea/workflows/build.yml

@@ -34,18 +34,44 @@ jobs:
           username: ${{ secrets.REGISTRY_USERNAME }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
-      - name: Build and push app
-        uses: https://git.sebse.de/sebse/actions/docker-build-push@v1
+      - name: Extract metadata (app)
+        id: meta
+        uses: docker/metadata-action@v5
         with:
-          image: ${{ env.IMAGE }}
-          build-context: ./web
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=sha,prefix=,format=short
+            type=raw,value=latest
+            type=raw,value=${{ steps.version.outputs.version }}
+
+      - name: Build and push app
+        uses: docker/build-push-action@v5
+        with:
+          context: ./web
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          cache-from: type=registry,ref=${{ env.IMAGE }}:latest
+          cache-to: type=inline
+
+      - name: Extract metadata (migrate)
+        id: meta-migrate
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE_MIGRATE }}
+          tags: |
+            type=sha,prefix=,format=short
+            type=raw,value=latest
+            type=raw,value=${{ steps.version.outputs.version }}
 
       - name: Build and push migrate
-        uses: https://git.sebse.de/sebse/actions/docker-build-push@v1
+        uses: docker/build-push-action@v5
         with:
-          image: ${{ env.IMAGE_MIGRATE }}
-          build-context: ./web
-          dockerfile: ./web/Dockerfile.migrate
+          context: ./web
+          file: ./web/Dockerfile.migrate
+          push: true
+          tags: ${{ steps.meta-migrate.outputs.tags }}
+          cache-from: type=registry,ref=${{ env.IMAGE_MIGRATE }}:latest
+          cache-to: type=inline
 
       - name: Package and push helm chart
         uses: https://git.sebse.de/sebse/actions/helm-package-push@v1