From 6631df3e7feb000c680921a1c1023f95679bc0b8 Mon Sep 17 00:00:00 2001
From: nicktrn <55853254+nicktrn@users.noreply.github.com>
Date: Fri, 6 Feb 2026 13:32:58 +0000
Subject: [PATCH] fix(ci): fix Docker image publishing and worker builds
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The v.docker.* tags pushed by the release workflow using GITHUB_TOKEN
don't trigger the publish workflow (GitHub Actions limitation). Add a
workflow_call to publish.yml directly from the release job.

Also fix worker Containerfiles (coordinator, docker-provider,
kubernetes-provider) that fail to build since the superjson vendoring
change in @trigger.dev/core — run bundle-vendor before build:bundle.
---
 .github/workflows/release.yml          | 12 +++++++++++-
 apps/coordinator/Containerfile         |  2 +-
 apps/docker-provider/Containerfile     |  2 +-
 apps/kubernetes-provider/Containerfile |  2 +-
 4 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ca0f0ebf16..3b4135ec09 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -122,7 +122,6 @@ jobs:
           package_version=$(echo '${{ steps.changesets.outputs.publishedPackages }}' | jq -r '.[0].version')
           echo "package_version=${package_version}" >> "$GITHUB_OUTPUT"
 
-      # this triggers the publish workflow for the docker images
       - name: Create and push Docker tag
         if: steps.changesets.outputs.published == 'true'
         run: |
@@ -130,6 +129,17 @@ jobs:
           git tag "v.docker.${{ steps.get_version.outputs.package_version }}"
           git push origin "v.docker.${{ steps.get_version.outputs.package_version }}"
 
+  # Trigger Docker builds directly via workflow_call since tags pushed with
+  # GITHUB_TOKEN don't trigger other workflows (GitHub Actions limitation).
+  publish-docker:
+    name: 🐳 Publish Docker images
+    needs: release
+    if: needs.release.outputs.published == 'true'
+    uses: ./.github/workflows/publish.yml
+    secrets: inherit
+    with:
+      image_tag: v${{ needs.release.outputs.published_package_version }}
+
   # The prerelease job needs to be on the same workflow file due to a limitation related to how npm verifies OIDC claims.
   prerelease:
     name: 🧪 Prerelease
diff --git a/apps/coordinator/Containerfile b/apps/coordinator/Containerfile
index 4e7b89e0af..9e973675ab 100644
--- a/apps/coordinator/Containerfile
+++ b/apps/coordinator/Containerfile
@@ -35,7 +35,7 @@ COPY --from=pruner --chown=node:node /app/out/full/ .
 COPY --from=dev-deps --chown=node:node /app/ .
 COPY --chown=node:node turbo.json turbo.json
 
-RUN pnpm run -r --filter coordinator build:bundle
+RUN pnpm run -r --filter @trigger.dev/core bundle-vendor && pnpm run -r --filter coordinator build:bundle
 
 FROM alpine AS cri-tools
 
diff --git a/apps/docker-provider/Containerfile b/apps/docker-provider/Containerfile
index bea730bda8..42a7ac2309 100644
--- a/apps/docker-provider/Containerfile
+++ b/apps/docker-provider/Containerfile
@@ -31,7 +31,7 @@ COPY --from=pruner --chown=node:node /app/out/full/ .
 COPY --from=dev-deps --chown=node:node /app/ .
 COPY --chown=node:node turbo.json turbo.json
 
-RUN pnpm run -r --filter docker-provider build:bundle
+RUN pnpm run -r --filter @trigger.dev/core bundle-vendor && pnpm run -r --filter docker-provider build:bundle
 
 FROM base AS runner
 
diff --git a/apps/kubernetes-provider/Containerfile b/apps/kubernetes-provider/Containerfile
index fb96304c26..b46b994327 100644
--- a/apps/kubernetes-provider/Containerfile
+++ b/apps/kubernetes-provider/Containerfile
@@ -31,7 +31,7 @@ COPY --from=pruner --chown=node:node /app/out/full/ .
 COPY --from=dev-deps --chown=node:node /app/ .
 COPY --chown=node:node turbo.json turbo.json
 
-RUN pnpm run -r --filter kubernetes-provider build:bundle
+RUN pnpm run -r --filter @trigger.dev/core bundle-vendor && pnpm run -r --filter kubernetes-provider build:bundle
 
 FROM base AS runner