fix(ci): restore build-push-action to fix docker socket access in runner

.gitea/workflows/deploy.yml

@@ -36,8 +36,6 @@ jobs:
       short_sha:        ${{ steps.determine.outputs.short_sha }}
     container:
       image: catthehacker/ubuntu:act-latest
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -124,8 +122,6 @@ jobs:
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -176,8 +172,6 @@ jobs:
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -192,33 +186,28 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: bash scripts/registry-auth.sh
 
+      - name: 🐳 Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
       - name: 🔐 Registry Login
         run: echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
-      - name: 🏗️ Build and Push (Native Docker Buildkit)
+      - name: 🏗️ Build and Push
-        env:
+        uses: docker/build-push-action@v5
-          NEXT_PUBLIC_BASE_URL: ${{ needs.prepare.outputs.next_public_url }}
+        with:
-          NEXT_PUBLIC_TARGET: ${{ needs.prepare.outputs.target }}
+          context: .
-          NEXT_PUBLIC_APP_VERSION: ${{ needs.prepare.outputs.image_tag }}
+          push: true
-          UMAMI_WEBSITE_ID: ${{ secrets.UMAMI_WEBSITE_ID || vars.UMAMI_WEBSITE_ID }}
+          provenance: false
-          UMAMI_API_ENDPOINT: ${{ secrets.UMAMI_API_ENDPOINT || vars.UMAMI_API_ENDPOINT || 'https://analytics.infra.mintel.me' }}
+          platforms: linux/amd64
-          NPM_TOKEN: ${{ steps.auth.outputs.working_token }}
+          build-args: |
-          NPM_DOMAIN: ${{ steps.auth.outputs.working_domain }}
+            NEXT_PUBLIC_BASE_URL=${{ needs.prepare.outputs.next_public_url }}
-          IMAGE_TAG: ${{ needs.prepare.outputs.image_tag }}
+            NEXT_PUBLIC_TARGET=${{ needs.prepare.outputs.target }}
-        run: |
+            NEXT_PUBLIC_APP_VERSION=${{ needs.prepare.outputs.image_tag }}
-          echo "$NPM_TOKEN" > npm_token.txt
+            UMAMI_WEBSITE_ID=${{ secrets.UMAMI_WEBSITE_ID || vars.UMAMI_WEBSITE_ID }}
-          DOCKER_BUILDKIT=1 docker build \
+            UMAMI_API_ENDPOINT=${{ secrets.UMAMI_API_ENDPOINT || vars.UMAMI_API_ENDPOINT || 'https://analytics.infra.mintel.me' }}
-            --secret id=NPM_TOKEN,src=npm_token.txt \
+            NPM_TOKEN=${{ steps.auth.outputs.working_token }}
-            --build-arg NEXT_PUBLIC_BASE_URL="$NEXT_PUBLIC_BASE_URL" \
+            NPM_DOMAIN=${{ steps.auth.outputs.working_domain }}
-            --build-arg NEXT_PUBLIC_TARGET="$NEXT_PUBLIC_TARGET" \
+          tags: registry.infra.mintel.me/mintel/e-tib.com:${{ needs.prepare.outputs.image_tag }}
-            --build-arg NEXT_PUBLIC_APP_VERSION="$IMAGE_TAG" \
+          secrets: |
-            --build-arg UMAMI_WEBSITE_ID="$UMAMI_WEBSITE_ID" \
+            "NPM_TOKEN=${{ steps.auth.outputs.working_token }}"
-            --build-arg UMAMI_API_ENDPOINT="$UMAMI_API_ENDPOINT" \
-            --build-arg NPM_TOKEN="$NPM_TOKEN" \
-            --build-arg NPM_DOMAIN="$NPM_DOMAIN" \
-            -t registry.infra.mintel.me/mintel/e-tib.com:"$IMAGE_TAG" \
-            .
-          docker push registry.infra.mintel.me/mintel/e-tib.com:"$IMAGE_TAG"
-          rm -f npm_token.txt
 
   # ──────────────────────────────────────────────────────────────────────────────
   # JOB 4: Deploy
@@ -229,8 +218,6 @@ jobs:
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
     env:
       TARGET:               ${{ needs.prepare.outputs.target }}
       IMAGE_TAG:            ${{ needs.prepare.outputs.image_tag }}
@@ -374,8 +361,6 @@ jobs:
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -421,8 +406,6 @@ jobs:
     runs-on: docker
     container:
       image: catthehacker/ubuntu:act-latest
-      volumes:
-        - /var/run/docker.sock:/var/run/docker.sock
     steps:
       - name: 🔔 Gotify
         shell: bash