Update sync-build-release.yml

.github/workflows/sync-build-release.yml

@@ -67,11 +67,21 @@ jobs:
 
           echo "new_version=${CANDIDATE}" >> "$GITHUB_OUTPUT"
 
+      - name: Cleanup workspace (always, scoped)
+        if: ${{ always() }}
+        run: |
+          set -euxo pipefail
+          rm -rf "${GITHUB_WORKSPACE:?}/"* "${GITHUB_WORKSPACE:?}/."[!.]* 2>/dev/null || true
+  
   build-gh:
     name: Build on GitHub Runner (primary)
     needs: check-upstream
     if: needs.check-upstream.outputs.new_version != 'none'
     runs-on: ubuntu-latest
+    continue-on-error: true
+    outputs:
+      built:  ${{ steps.mark.outputs.built }}
+      digest: ${{ steps.build.outputs.digest }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -154,6 +164,7 @@ jobs:
           password: ${{ secrets.CR_PAT }}
 
       - name: Build and Push (GH runner)
+        id: build
         uses: docker/build-push-action@v6
         with:
           context: .
@@ -166,11 +177,19 @@ jobs:
             ${{ env.IMAGE_NAME }}:${{ needs.check-upstream.outputs.new_version }}
             ${{ env.IMAGE_NAME }}:latest
 
+      - name: Mark build success
+        id: mark
+        if: ${{ success() && steps.build.outputs.digest != '' }}
+        run: echo "built=true" >> "$GITHUB_OUTPUT"
+
   build-self:
     name: Build on Self-Hosted (fallback)
     needs: [check-upstream, build-gh]
-    if: ${{ always() && needs.check-upstream.outputs.new_version != 'none' && needs.build-gh.result != 'success' }}
+    if: needs.check-upstream.outputs.new_version != 'none' && needs.build-gh.outputs.built != 'true'
     runs-on: [self-hosted, linux, x64, homelab]
+    outputs:
+      built:  ${{ steps.mark.outputs.built }}
+      digest: ${{ steps.build.outputs.digest }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -199,17 +218,6 @@ jobs:
           git commit -m "Merge upstream/master, keep local README.md" || true
           git push origin master
 
-      - name: Show disk usage (pre)
-        run: df -h | sed 's/\s\+/ /g'
-
-      - name: Prune Docker caches (pre)
-        run: |
-          docker builder prune -af || true
-          docker system prune -af --volumes || true
-
-      - name: Show disk usage (post-clean)
-        run: df -h | sed 's/\s\+/ /g'
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
@@ -242,6 +250,7 @@ jobs:
           password: ${{ secrets.CR_PAT }}
 
       - name: Build and Push (self-hosted)
+        id: build
         uses: docker/build-push-action@v6
         with:
           context: .
@@ -254,10 +263,15 @@ jobs:
             ${{ env.IMAGE_NAME }}:${{ needs.check-upstream.outputs.new_version }}
             ${{ env.IMAGE_NAME }}:latest
 
+      - name: Mark build success
+        id: mark
+        if: ${{ success() && steps.build.outputs.digest != '' }}
+        run: echo "built=true" >> "$GITHUB_OUTPUT"
+
   publish:
     name: Publish Release
     needs: [check-upstream, build-gh, build-self]
-    if: ${{ needs.check-upstream.outputs.new_version != 'none' && (needs.build-gh.result == 'success' || needs.build-self.result == 'success') }}
+    if: needs.check-upstream.outputs.new_version != 'none' && (needs.build-gh.outputs.built == 'true' || needs.build-self.outputs.built == 'true')
     runs-on: ubuntu-latest
     steps:
       - name: Create GitHub Release