Fix(duckbot): tagging and releases

[wcatz]

Summary by CodeRabbit

• Chores

  • Updated Go tooling to version 1.23.0.

• Refactor

  • Enhanced Docker image metadata tagging with improved semver patterns and build information.
  • Improved Docker image security with additional system certificates.
  • Added embedded image metadata labels for version tracking and build details.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

The pull request downgrades the Go toolchain from 1.24 to 1.23, updates GitHub Actions Docker workflow to generate extended image tags and pass build arguments (version, commit SHA, build date), and embeds image metadata labels and runtime setup in the Dockerfile.

Changes

Cohort / File(s)	Summary
CI/CD Pipeline Configuration .github/workflows/docker-build-push.yml	Refines Docker metadata flavor to apply latest tag only for pushes to master or tags; adds PR event handling with type=ref,event=pr; expands tag generation with semver patterns (\{\{major\}\}.\{\{minor\}\}, \{\{major\}\}) and SHA-based value conditional on default branches; introduces build-args for VERSION, COMMIT_SHA, and BUILD_DATE.
Dockerfile Configuration Dockerfile	Downgrades Go base image from golang:1.24-bookworm to golang:1.23-bookworm; adds build-time arguments (VERSION, COMMIT_SHA, BUILD_DATE) in both stages; embeds image metadata labels (title, description, version, revision, created, source) in Stage 2; installs ca-certificates; sets default command to run /app/goduckbot binary.
Go Module Configuration go.mod	Downgrades Go tooling requirements: language version from 1.24.0 to 1.23.0 and toolchain from go1.24.5 to go1.23.0.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 A downgrade to twenty-three,
With metadata dancing wild and free,
Build args captured in every frame,
Docker labels now share the name,
The bunny cheers—our images sing! 🎉

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Fix(duckbot): tagging and releases' is directly related to the main changes, which involve refining Docker image metadata, tag generation, and build arguments for proper versioning and release handling.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@Dockerfile`:
- Around line 22-28: Update the Dockerfile LABEL for
org.opencontainers.image.source to point to the correct repository; in the LABEL
block (look for the LABEL and the org.opencontainers.image.source entry) replace
the incorrect "https://github.com/wayne/goduckbot" value with the correct
"https://github.com/wcatz/goduckbot" so the image metadata reflects the actual
repo.

[coderabbitai]

⚠️ Potential issue | 🟡 Minor

Fix incorrect org.opencontainers.image.source value.
The source label points to wayne/goduckbot, but the PR target repo appears to be wcatz/goduckbot. This metadata will be user-visible and should match the actual repo.

Suggested fix

-      org.opencontainers.image.source="https://github.com/wayne/goduckbot"
+      org.opencontainers.image.source="https://github.com/wcatz/goduckbot"

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

	# Labels for image metadata
	LABEL org.opencontainers.image.title="goduckbot" \
	org.opencontainers.image.description="duckbot using Go and a local node" \
	org.opencontainers.image.version="${VERSION}" \
	org.opencontainers.image.revision="${COMMIT_SHA}" \
	org.opencontainers.image.created="${BUILD_DATE}" \
	org.opencontainers.image.source="https://github.com/wayne/goduckbot"
	# Labels for image metadata
	LABEL org.opencontainers.image.title="goduckbot" \
	org.opencontainers.image.description="duckbot using Go and a local node" \
	org.opencontainers.image.version="${VERSION}" \
	org.opencontainers.image.revision="${COMMIT_SHA}" \
	org.opencontainers.image.created="${BUILD_DATE}" \
	org.opencontainers.image.source="https://github.com/wcatz/goduckbot"

🤖 Prompt for AI Agents

In `@Dockerfile` around lines 22 - 28, Update the Dockerfile LABEL for
org.opencontainers.image.source to point to the correct repository; in the LABEL
block (look for the LABEL and the org.opencontainers.image.source entry) replace
the incorrect "https://github.com/wayne/goduckbot" value with the correct
"https://github.com/wcatz/goduckbot" so the image metadata reflects the actual
repo.