fix: use oci-layout scheme for Docker multi-platform push (#318)

* fix: add retry logic to artifact search to handle race conditions

Added exponential backoff retry logic to the determine-artifact.sh script
to handle race conditions where the Publish workflow starts before GitHub's
API has indexed the completed Main workflow run.

Changes:
- Retry up to 5 times with increasing delays (5s, 10s, 15s, 20s, 25s)
- Total retry window of ~75 seconds
- Clear logging of retry attempts

This fixes the issue where releases fail because:
1. Main workflow creates GitHub release
2. Release event triggers Publish workflow immediately
3. Publish workflow queries for Main workflow run
4. GitHub API hasn't yet indexed the just-completed workflow
5. Query returns empty results even though workflow succeeded

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* fix: use oci-layout scheme for Docker multi-platform push

- Extract OCI layout from tar archive
- Use docker buildx imagetools create with oci-layout:// scheme
- Properly handles multi-platform manifest lists
- Fixes "unknown flag: --tag" error from buildx imagetools import

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: sapientpants

.changeset/fix-artifact-search-retry.md

@@ -0,0 +1,10 @@
+---
+'sonarqube-mcp-server': patch
+---
+
+Fix race condition in artifact determination script
+
+- Add retry logic with exponential backoff to determine-artifact.sh
+- Wait up to 5 attempts with increasing delays (5s, 10s, 15s, 20s, 25s)
+- Fixes race condition where Publish workflow starts before Main workflow is indexed by GitHub API
+- Total retry window: ~75 seconds, giving GitHub's API time to index completed workflow runs

.changeset/fix-docker-buildx-oci-layout.md

@@ -0,0 +1,10 @@
+---
+'sonarqube-mcp-server': patch
+---
+
+Fix Docker Hub publishing for multi-platform OCI images
+
+- Extract OCI layout from tar archive
+- Use `docker buildx imagetools create` with `oci-layout://` scheme
+- Properly handles multi-platform manifest lists for linux/amd64 and linux/arm64
+- Fixes "unknown flag: --tag" error from incorrect buildx imagetools import syntax

.github/workflows/publish.yml

@@ -358,32 +358,36 @@ jobs:
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Push Docker image
-        # Push the pre-built OCI image directly to Docker Hub using buildx imagetools
+        # Push the pre-built OCI multi-platform image to Docker Hub
         if: steps.check-docker.outputs.has_credentials == 'true'
         run: |
-          echo "📥 Decompressing Docker image..."
+          echo "📥 Decompressing and extracting OCI image..."
           gunzip ./docker-artifact/${{ steps.artifact.outputs.artifact_name }}.tar.gz
 
+          # Extract OCI layout from tar
+          mkdir -p oci-layout
+          tar -xf ./docker-artifact/${{ steps.artifact.outputs.artifact_name }}.tar -C oci-layout
+
           TARGET_REPO="${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }}"
           VERSION="${{ steps.version.outputs.version }}"
 
-          echo "📤 Importing and pushing OCI image to Docker Hub..."
-          # Use docker buildx imagetools to import from OCI archive and push to Docker Hub
+          echo "📤 Pushing multi-platform OCI image to Docker Hub..."
+          # Use docker buildx imagetools create to push from OCI layout
           # This properly handles multi-platform manifest lists
-          docker buildx imagetools import \
+          docker buildx imagetools create \
             --tag $TARGET_REPO:$VERSION \
-            ./docker-artifact/${{ steps.artifact.outputs.artifact_name }}.tar
+            oci-layout://oci-layout
 
           echo "🏷️ Creating additional tags..."
-          # Also add latest, major, and major.minor tags by creating aliases
+          # Create alias tags for latest, major, and major.minor versions
           MAJOR=$(echo "$VERSION" | cut -d. -f1)
           MINOR=$(echo "$VERSION" | cut -d. -f2)
 
           docker buildx imagetools create --tag $TARGET_REPO:latest $TARGET_REPO:$VERSION
           docker buildx imagetools create --tag $TARGET_REPO:$MAJOR $TARGET_REPO:$VERSION
           docker buildx imagetools create --tag $TARGET_REPO:$MAJOR.$MINOR $TARGET_REPO:$VERSION
 
-          echo "✅ Docker image published successfully"
+          echo "✅ Docker image published successfully to Docker Hub"
 
   # =============================================================================
   # NOTIFICATION