From bb33cb043260fab255967b4fadf4dfa0e9b3db6c Mon Sep 17 00:00:00 2001
From: satsura <satsura@gmail.com>
Date: Mon, 10 Aug 2026 20:35:49 +0300
Subject: [PATCH] Force a fresh image pull on every run

Self-hosted runners keep a persistent Docker cache, so a bare
`docker run image:latest` silently reuses whatever's on disk and
never checks the registry. Found live: the API-key auth release
never reached sportsid-inc's self-hosted runners because of this.
---
 action.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 20264f3..0e0ed09 100644
--- a/action.yml
+++ b/action.yml
@@ -92,12 +92,16 @@ runs:
         # `pull-requests: write`, in which case the report stays in the summary.
         GITHUB_TOKEN: ${{ inputs.registry-token || github.token }}
       run: |
+        # Self-hosted runners keep a persistent Docker cache — plain `docker
+        # run image:latest` reuses whatever :latest already sits on disk and
+        # never checks the registry, so a release here can silently never
+        # reach them. --pull always forces the freshness check every run.
         dns_args=""
         if [ -n "${{ inputs.dns }}" ]; then
           IFS=',' read -ra servers <<< "${{ inputs.dns }}"
           for s in "${servers[@]}"; do dns_args="$dns_args --dns $(echo "$s" | tr -d ' ')"; done
         fi
-        docker run --rm $dns_args \
+        docker run --rm --pull always $dns_args \
           -v "${{ github.workspace }}:/src" \
           -v "${GITHUB_STEP_SUMMARY}:/tmp/summary.md" \
           -w "/src/${{ inputs.path }}" \