Update build-release.yml

.github/workflows/build-release.yml

@@ -144,3 +144,51 @@ jobs:
         if: ${{ steps.crpat.outputs.present == 'true' }}
         uses: docker/login-action@v3
         with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.CR_PAT }}
+
+      - name: Build and Push (self-hosted)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64
+          push: true
+          provenance: false
+          sbom: false
+          tags: |
+            ${{ env.IMAGE_NAME }}:${{ needs.check-tag.outputs.current_tag }}
+            ${{ env.IMAGE_NAME }}:latest
+
+  publish:
+    name: Update Release
+    needs: [check-tag, build-gh, build-self]
+    if: always() && (needs.build-gh.outputs.build_succeeded == 'true' || needs.build-self.result == 'success')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Update GitHub Release (same tag)
+        uses: softprops/action-gh-release@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tag_name: ${{ needs.check-tag.outputs.current_tag }}
+          name: Release ${{ needs.check-tag.outputs.current_tag }}
+          body: |
+            New version synced from upstream ComfyUI.
+            Docker image:
+            - docker pull ${{ env.IMAGE_NAME }}:${{ needs.check-tag.outputs.current_tag }}
+            - docker pull ${{ env.IMAGE_NAME }}:latest
+          draft: false
+          prerelease: false
+
+  finalize:
+    name: Finalize Outcome
+    needs: [check-tag, build-gh, build-self, publish]
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Fail if both build paths failed
+        if: ${{ !(needs.build-gh.outputs.build_succeeded == 'true' || needs.build-self.result == 'success') }}
+        run: |
+          echo "Manual rebuild failed on both GitHub-hosted and self-hosted paths."
+          exit 1