release.sh

#!/usr/bin/env bash
# Cut a release: annotated git tag, multi-arch image on Docker Hub, GitHub release.
# Run from the repo root. Requires: docker login (Hub), gh auth login (GitHub).
#
# Usage: ./release.sh v3.0.2 [notes-file.md]

set -euo pipefail

TAG="${1:?usage: ./release.sh vX.Y.Z [notes-file.md]}"
NOTES_FILE="${2:-}"
IMAGE="gacerioni/gabs-redis-langcache"

echo ">> Tagging ${TAG}"
git tag -a "$TAG" -m "Release $TAG" || echo "   tag already exists, reusing"
git push origin "$TAG"

echo ">> Building and pushing ${IMAGE}:${TAG} (linux/amd64 + linux/arm64)"
# Build context comes from `git archive` of the tag: only tracked files are
# sent to the builder, so local secrets (.env) can never leak into the image.
git archive "$TAG" | docker buildx build \
  --platform linux/amd64,linux/arm64 \
  -t "${IMAGE}:${TAG}" -t "${IMAGE}:latest" \
  --push -

echo ">> Creating GitHub release ${TAG}"
if [ -n "$NOTES_FILE" ]; then
  gh release create "$TAG" --title "$TAG" --notes-file "$NOTES_FILE"
else
  gh release create "$TAG" --title "$TAG" --generate-notes
fi

echo ">> Done: https://github.com/Redislabs-Solution-Architects/redis-langcache-python-example/releases/tag/${TAG}"
echo ">>       https://hub.docker.com/r/gacerioni/gabs-redis-langcache/tags"