Dev → Main release tracking

.github/actions/docker-build-push/action.yml

@@ -14,6 +14,10 @@ inputs:
     description: True if the image should be published
     required: true
     default: "false"
+  load:
+    description: True to load the built image into the local Docker daemon (for post-build verification steps); ignored when push is true
+    required: false
+    default: "false"
   gcrJsonKey:
     description: JSON key for Google Container Registry service account (required if push is true)
     required: false
@@ -69,6 +73,7 @@ runs:
         labels: |
           revision=${{ github.sha }}
         push: ${{ inputs.push == 'true' }}
+        load: ${{ inputs.push != 'true' && inputs.load == 'true' }}
         cache-from: type=local,src=/tmp/.buildx-cache
         cache-to: type=local,dest=/tmp/.buildx-cache-new
 

.github/actions/install-yarn-deps/action.yml

@@ -41,6 +41,10 @@ runs:
         # Note: lockfile checksums remain enforced (YARN_CHECKSUM_BEHAVIOR
         # is left at its default), so per-package integrity is still checked.
         export YARN_ENABLE_HARDENED_MODE=0
+        # Git dependencies may run Corepack outside this workspace's pinned
+        # packageManager context. Use its known default there instead of
+        # querying yarn/latest, which can be rate-limited by the npm registry.
+        export COREPACK_DEFAULT_TO_LATEST=0
         corepack enable
         yarn --version
         unset_args=()