From c2e8d364a9aefe17e9a6d0ad75355a1c0ad7a154 Mon Sep 17 00:00:00 2001
From: ZDDC <caseywitt@proton.me>
Date: Tue, 28 Apr 2026 10:07:52 -0500
Subject: [PATCH] =?UTF-8?q?chore(ci):=20drop=20:latest=20image=20tag=20?=
 =?UTF-8?q?=E2=80=94=20stable/beta/alpha=20is=20canonical?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The renamed channel naming (latest → stable) only landed in the
filesystem layout and the bootstrap; the image-publish pipeline still
applied :latest as an alias for :stable on stable releases. Drop it
to avoid mixed terminology.

.woodpecker.yml: stable releases now apply only :X.Y.Z, :stable,
:beta, :alpha. zddc/README.md updated to show stable/beta/alpha
channel tags and explicitly note :latest is not published.

To clean up the existing :latest tag on the registry (one-time):

  curl -X DELETE \
    -H "Authorization: token $CODEBERG_TOKEN" \
    https://codeberg.org/api/v1/packages/varasys/container/zddc-server/latest

or via the web UI at codeberg.org/VARASYS/-/packages/container/zddc-server.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .woodpecker.yml |  8 +++++---
 zddc/README.md  | 14 ++++++++++----
 2 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 8a7a961..9422e3e 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -14,11 +14,13 @@
 #
 # Image tags applied (cascading)
 # ------------------------------
-#   stable release:   :X.Y.Z         + :stable, :beta, :alpha, :latest
+#   stable release:   :X.Y.Z         + :stable, :beta, :alpha
 #   beta release:     :X.Y.Z-beta.N  + :beta, :alpha
 #   alpha release:    :X.Y.Z-alpha.N + :alpha
 #
-# `:latest` is kept as an alias for `:stable` (Docker convention).
+# `:latest` is intentionally NOT published. The project uses
+# `stable / beta / alpha` channel terminology consistently; see
+# AGENTS.md "Channel discipline".
 #
 # To enable: in the Woodpecker dashboard at https://ci.codeberg.org →
 # repo → Settings → Secrets, add codeberg_user (your Codeberg username)
@@ -53,7 +55,7 @@ steps:
           *)         CHANNEL=stable ;;
         esac
         case "$CHANNEL" in
-          stable) TAGS="$VERSION stable beta alpha latest" ;;
+          stable) TAGS="$VERSION stable beta alpha" ;;
           beta)   TAGS="$VERSION beta alpha" ;;
           alpha)  TAGS="$VERSION alpha" ;;
         esac
diff --git a/zddc/README.md b/zddc/README.md
index d9a7940..2965bed 100644
--- a/zddc/README.md
+++ b/zddc/README.md
@@ -295,13 +295,19 @@ tree.
 ## Container image
 
 Each `zddc-server-vX.Y.Z` git tag publishes a runtime image to Codeberg's
-container registry via the Woodpecker CI pipeline at `.woodpecker.yml`:
+container registry via the Woodpecker CI pipeline at `.woodpecker.yml`,
+with cascading channel tags:
 
 ```
-codeberg.org/varasys/zddc-server:X.Y.Z
-codeberg.org/varasys/zddc-server:latest
+codeberg.org/varasys/zddc-server:X.Y.Z      # immutable, exact version
+codeberg.org/varasys/zddc-server:stable     # current stable
+codeberg.org/varasys/zddc-server:beta       # tracks stable-or-newer beta
+codeberg.org/varasys/zddc-server:alpha      # tracks beta-or-newer alpha
 ```
 
+`:latest` is intentionally not published — the project uses
+stable/beta/alpha channel terminology consistently.
+
 Pull and run:
 
 ```sh
@@ -310,7 +316,7 @@ podman run --rm -p 8443:8443 \
   -e ZDDC_TLS_CERT=none \
   -e ZDDC_ADDR=:8080 \
   -e ZDDC_INSECURE_DIRECT=1 \
-  codeberg.org/varasys/zddc-server:latest
+  codeberg.org/varasys/zddc-server:stable
 ```
 
 The image: