Apply published main images to the production website

.gitea/workflows/container.yml

@@ -35,6 +35,7 @@ jobs:
           bash deploy/smoke-container.sh "$image"
 
       - name: Push the tested image to Gitea
+        id: publish
         if: ${{ gitea.ref == 'refs/heads/main' || gitea.ref == 'refs/heads/container-ci' }}
         shell: bash
         env:
@@ -53,6 +54,20 @@ jobs:
           digest=$(awk '$2 == "digest:" {print $3}' "$DOCKER_CONFIG/push.log")
           [[ $digest =~ ^sha256:[0-9a-f]{64}$ ]]
           echo "Published ${IMAGE_REPOSITORY}@${digest}"
+          echo "digest=$digest" >> "$GITHUB_OUTPUT"
+
+      - name: Request production update
+        if: ${{ gitea.ref == 'refs/heads/main' }}
+        shell: bash
+        env:
+          RELEASE_DIGEST: ${{ steps.publish.outputs.digest }}
+        run: |
+          set -euo pipefail
+          [[ $RELEASE_SHA =~ ^[0-9a-f]{40}$ && $RELEASE_DIGEST =~ ^sha256:[0-9a-f]{64}$ ]]
+          request=$(mktemp /release-request/request.XXXXXXXX)
+          trap 'rm -f -- "$request"' EXIT
+          printf '%s %s\n' "$RELEASE_SHA" "$RELEASE_DIGEST" > "$request"
+          mv -f -- "$request" /release-request/request
 
       - name: Remove the local image tag
         if: always()