Refactor/sync agi workflows

.github/workflows/build-and-verify-image.yml

@@ -0,0 +1,42 @@
+name: Build and Verify Docker Image
+
+on:
+  workflow_call:
+
+jobs:
+  build-and-verify:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Oasis CLI
+        env:
+          CLI_VERSION: 0.16.0
+        run: |
+          mkdir -p /tmp/oasis-cli
+          cd /tmp/oasis-cli
+          wget "https://github.com/oasisprotocol/cli/releases/download/v${CLI_VERSION}/oasis_cli_${CLI_VERSION}_linux_amd64.tar.gz" -O cli.tar.gz
+          tar --strip-components 1 -xf cli.tar.gz
+          echo "/tmp/oasis-cli" >> ${GITHUB_PATH}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to ghcr.io
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Talos Docker image
+        run: |
+          OUTPUT_IMAGE_NAME_PATH="/tmp/image-name" ./scripts/build_and_push_container_image.sh
+          echo "EXPECTED_TALOS_AGENT_IMAGE=$(cat /tmp/image-name)" >> ${GITHUB_ENV}
+
+      - name: Verify image digest matches the compose file
+        run: ./scripts/verify_container_image.sh

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Set up Python
       uses: actions/setup-python@v4

.github/workflows/docs.yml

@@ -47,7 +47,7 @@ jobs:
 
       - name: Upload artifact
         if: github.ref == 'refs/heads/main'
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v4
         with:
           path: ./site
 

.github/workflows/release-rofl.yml

@@ -7,8 +7,12 @@ on:
   workflow_dispatch:
 
 jobs:
+  build-and-verify:
+    uses: ./.github/workflows/build-and-verify-image.yml
+
   release-rofl:
     runs-on: ubuntu-latest
+    needs: build-and-verify
     permissions:
       contents: read
       packages: write
@@ -30,24 +34,6 @@ jobs:
           tar --strip-components 1 -xf cli.tar.gz
           echo "/tmp/oasis-cli" >> ${GITHUB_PATH}
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to ghcr.io
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Build and push Talos Docker image
-        run: |
-          OUTPUT_IMAGE_NAME_PATH="/tmp/image-name" ./scripts/build_and_push_container_image.sh
-          echo "EXPECTED_TALOS_AGENT_IMAGE=$(cat /tmp/image-name)" >> ${GITHUB_ENV}
-
-      - name: Verify image digest matches the compose file
-        run: ./scripts/verify_container_image.sh
-
       # run: oasis rofl build --deployment ${DEPLOYMENT}
       - name: Build ROFL ORC for deployment, verify it matches the manifest
         run: oasis rofl build --deployment ${DEPLOYMENT} --offline --verify

.github/workflows/thread_sentiment.yml

@@ -9,11 +9,11 @@ jobs:
   post_question:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up Python
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@v4
         with:
-          python-version: '3.x'
+          python-version: '3.12'
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
@@ -26,7 +26,7 @@ jobs:
           TWITTER_ACCESS_TOKEN_SECRET: ${{ secrets.TWITTER_ACCESS_TOKEN_SECRET }}
         run: python -c "from src.thread_sentiment.main import post_question; post_question()"
       - name: Upload tweet ID
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: tweet_id
           path: tweet_id.txt
@@ -35,17 +35,17 @@ jobs:
     runs-on: ubuntu-latest
     needs: post_question
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Set up Python
-        uses: actions/setup-python@v3
+        uses: actions/setup-python@v4
         with:
-          python-version: '3.x'
+          python-version: '3.12'
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
           pip install tweepy
       - name: Download tweet ID
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: tweet_id
       - name: Analyze and post sentiment

.github/workflows/verify-docker-image.yml

@@ -4,43 +4,5 @@ on:
   workflow_dispatch:
 
 jobs:
-  verify-docker-image:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-    env:
-      DEPLOYMENT: mainnet
-      SAFE_ADDRESS: "0x70739eB50e269f1f1eb27c6f8932f63389B1Cb63"
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      # TODO: Move this to dedicated GitHub Action for CLI install.
-      - name: Install Oasis CLI
-        env:
-          CLI_VERSION: 0.16.0
-        run: |
-          mkdir -p /tmp/oasis-cli
-          cd /tmp/oasis-cli
-          wget "https://github.com/oasisprotocol/cli/releases/download/v${CLI_VERSION}/oasis_cli_${CLI_VERSION}_linux_amd64.tar.gz" -O cli.tar.gz
-          tar --strip-components 1 -xf cli.tar.gz
-          echo "/tmp/oasis-cli" >> ${GITHUB_PATH}
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to ghcr.io
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Build and push Talos Docker image
-        run: |
-          OUTPUT_IMAGE_NAME_PATH="/tmp/image-name" ./scripts/build_and_push_container_image.sh
-          echo "EXPECTED_TALOS_AGENT_IMAGE=$(cat /tmp/image-name)" >> ${GITHUB_ENV}
-
-      - name: Verify image digest matches the compose file
-        run: ./scripts/verify_container_image.sh
+  build-and-verify:
+    uses: ./.github/workflows/build-and-verify-image.yml