From 65e35bd9840062519d410492ef3622a951e2322c Mon Sep 17 00:00:00 2001
From: YiWang24 <yiwang2457@gmail.com>
Date: Mon, 25 May 2026 20:58:10 -0400
Subject: [PATCH] fix(ci): resolve Docker build and auto-release failures

- ci.yml: add paths filter to push trigger so Docker build only runs
  when Dockerfile, source code, or ci.yml itself changes. Prevents the
  'Dockerfile not found' error on OpenCI's own repo (no Dockerfile).
- auto-release.yml: replace secrets.MY_GITHUB_TOKEN with github.token.
  MY_GITHUB_TOKEN was not configured, causing 401 on tag creation.
  github.token has contents:write permission which is sufficient.
---
 .github/workflows/auto-release.yml | 2 +-
 .github/workflows/ci.yml           | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/auto-release.yml b/.github/workflows/auto-release.yml
index 066bba3..beaf48c 100644
--- a/.github/workflows/auto-release.yml
+++ b/.github/workflows/auto-release.yml
@@ -180,7 +180,7 @@ jobs:
         if: steps.guard.outputs.skip != 'true' && steps.analyze.outputs.bump != 'none'
         env:
           NEW_TAG: ${{ steps.version.outputs.tag }}
-          GH_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           set -euo pipefail
           echo "Creating tag: $NEW_TAG"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9a40191..409e485 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,13 @@ name: ci
 on:
   push:
     branches: [main]
+    paths:
+      - "Dockerfile*"
+      - "docker-compose*.yml"
+      - ".dockerignore"
+      - "src/**"
+      - "*.dockerfile"
+      - ".github/workflows/ci.yml"
   workflow_dispatch:
 
 permissions: