[MNT] add Dockerfile + use image for CI/CD

Author: SimonBlanke

.github/docker/Dockerfile

@@ -1,16 +1,16 @@
 # Hyperactive CI Docker Image
 # Pre-installs all dependencies to speed up CI runs
 #
-# Build with: docker build --build-arg PYTHON_VERSION=3.11 -t ghcr.io/simonblanke/hyperactive-ci:py3.11 .
-# Push with:  docker push ghcr.io/simonblanke/hyperactive-ci:py3.11
+# Build with: docker build --build-arg PYTHON_VERSION=3.11 -t ghcr.io/hyperactive-project/hyperactive-ci:py3.11 .
+# Push with:  docker push ghcr.io/hyperactive-project/hyperactive-ci:py3.11
 
 ARG PYTHON_VERSION=3.11
 
 FROM python:${PYTHON_VERSION}-slim
 
 ARG PYTHON_VERSION
 
-LABEL org.opencontainers.image.source="https://github.com/SimonBlanke/Hyperactive"
+LABEL org.opencontainers.image.source="https://github.com/hyperactive-project/Hyperactive"
 LABEL org.opencontainers.image.description="Hyperactive CI image with pre-installed dependencies (Python ${PYTHON_VERSION})"
 LABEL org.opencontainers.image.licenses="MIT"
 

.github/workflows/build-ci-image.yml

@@ -1,15 +1,9 @@
-name: Build CI Images
+name: Build CI Images (Manual)
+
+# This workflow is for manual rebuilds only.
+# Automatic rebuilds are handled by the test.yml workflow when dependencies change.
 
 on:
-  push:
-    branches:
-      - main
-      - dev
-    paths:
-      - 'pyproject.toml'
-      - 'docs/requirements.txt'
-      - '.github/docker/Dockerfile'
-      - '.github/workflows/build-ci-image.yml'
   workflow_dispatch:
     inputs:
       python_versions:
@@ -19,7 +13,7 @@ on:
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: simonblanke/hyperactive-ci
+  IMAGE_NAME: hyperactive-project/hyperactive-ci
 
 jobs:
   build-and-push:
@@ -115,5 +109,5 @@ jobs:
           echo "  test:" >> $GITHUB_STEP_SUMMARY
           echo "    runs-on: ubuntu-latest" >> $GITHUB_STEP_SUMMARY
           echo "    container:" >> $GITHUB_STEP_SUMMARY
-          echo "      image: ghcr.io/simonblanke/hyperactive-ci:py3.11" >> $GITHUB_STEP_SUMMARY
+          echo "      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11" >> $GITHUB_STEP_SUMMARY
           echo "\`\`\`" >> $GITHUB_STEP_SUMMARY

.github/workflows/docs.yml

@@ -27,7 +27,7 @@ jobs:
     name: test-doc-snippets
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py${{ matrix.python-version }}
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py${{ matrix.python-version }}
     strategy:
       matrix:
         python-version: ['3.10', '3.11', '3.12']
@@ -52,7 +52,7 @@ jobs:
     name: build-docs
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.12
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.12
     needs: test-snippets
 
     steps:

.github/workflows/test.yml

@@ -15,7 +15,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  CI_IMAGE: ghcr.io/simonblanke/hyperactive-ci
+  CI_IMAGE: ghcr.io/hyperactive-project/hyperactive-ci
 
 jobs:
   # ===========================================================================
@@ -33,6 +33,7 @@ jobs:
       docs: ${{ steps.filter.outputs.docs }}
       examples: ${{ steps.filter.outputs.examples }}
       any_src: ${{ steps.filter.outputs.any_src }}
+      deps_changed: ${{ steps.filter.outputs.deps_changed }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -111,14 +112,84 @@ jobs:
             echo "any_src=false" >> $GITHUB_OUTPUT
           fi
 
+          # dependencies changed (triggers CI image rebuild)
+          if echo "$CHANGED_FILES" | grep -qE "^pyproject.toml$|^docs/requirements.txt$|^.github/docker/Dockerfile$"; then
+            echo "deps_changed=true" >> $GITHUB_OUTPUT
+            echo "Dependencies changed - CI images will be rebuilt"
+          else
+            echo "deps_changed=false" >> $GITHUB_OUTPUT
+          fi
+
+  # ===========================================================================
+  # STAGE 0.5: Rebuild CI images if dependencies changed
+  # ===========================================================================
+  rebuild-ci-images:
+    name: rebuild-ci-images
+    needs: [detect-changes]
+    if: needs.detect-changes.outputs.deps_changed == 'true'
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: .github/docker/Dockerfile
+          push: true
+          tags: ghcr.io/hyperactive-project/hyperactive-ci:py${{ matrix.python-version }}
+          build-args: |
+            PYTHON_VERSION=${{ matrix.python-version }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  # Gate job: ensures images are ready before tests run
+  images-ready:
+    name: images-ready
+    needs: [detect-changes, rebuild-ci-images]
+    if: always()
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check image status
+        run: |
+          if [[ "${{ needs.detect-changes.outputs.deps_changed }}" == "true" ]]; then
+            if [[ "${{ needs.rebuild-ci-images.result }}" != "success" ]]; then
+              echo "CI image rebuild failed"
+              exit 1
+            fi
+            echo "CI images rebuilt successfully"
+          else
+            echo "No dependency changes - using existing CI images"
+          fi
+
   # ===========================================================================
-  # STAGE 1: Fast checks (code-quality + doctest)
+  # STAGE 1: Fast checks (code-quality)
   # ===========================================================================
   code-quality:
     name: code-quality
+    needs: [images-ready]
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -158,7 +229,7 @@ jobs:
       fail-fast: false
 
     runs-on: ${{ matrix.os }}
-    container: ${{ matrix.os == 'ubuntu-latest' && format('{0}:py{1}', 'ghcr.io/simonblanke/hyperactive-ci', matrix.python-version) || '' }}
+    container: ${{ matrix.os == 'ubuntu-latest' && format('{0}:py{1}', 'ghcr.io/hyperactive-project/hyperactive-ci', matrix.python-version) || '' }}
     timeout-minutes: 30
 
     steps:
@@ -203,7 +274,7 @@ jobs:
       fail-fast: false
 
     runs-on: ${{ matrix.os }}
-    container: ${{ matrix.os == 'ubuntu-latest' && format('{0}:py{1}', 'ghcr.io/simonblanke/hyperactive-ci', matrix.python-version) || '' }}
+    container: ${{ matrix.os == 'ubuntu-latest' && format('{0}:py{1}', 'ghcr.io/hyperactive-project/hyperactive-ci', matrix.python-version) || '' }}
     timeout-minutes: 30
 
     steps:
@@ -239,7 +310,7 @@ jobs:
     needs: [targeted-tests-gate]
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py${{ matrix.python-version }}
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py${{ matrix.python-version }}
 
     strategy:
       fail-fast: false
@@ -271,7 +342,7 @@ jobs:
     if: needs.detect-changes.outputs.core == 'true' || needs.detect-changes.outputs.any_src == 'false'
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 10
 
     steps:
@@ -291,7 +362,7 @@ jobs:
     if: needs.detect-changes.outputs.sklearn == 'true'
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 10
 
     steps:
@@ -311,7 +382,7 @@ jobs:
     if: needs.detect-changes.outputs.sktime == 'true'
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 10
 
     steps:
@@ -331,7 +402,7 @@ jobs:
     if: needs.detect-changes.outputs.skpro == 'true'
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 10
 
     steps:
@@ -351,7 +422,7 @@ jobs:
     if: needs.detect-changes.outputs.utils == 'true'
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 10
 
     steps:
@@ -399,7 +470,7 @@ jobs:
     needs: [targeted-tests-gate]
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 15
 
     steps:
@@ -425,7 +496,7 @@ jobs:
     needs: [targeted-tests-gate]
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 20
 
     steps:
@@ -444,7 +515,7 @@ jobs:
     needs: [targeted-tests-gate]
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/simonblanke/hyperactive-ci:py3.11
+      image: ghcr.io/hyperactive-project/hyperactive-ci:py3.11
     timeout-minutes: 15
 
     steps: