Split out the self-host latest-tagging job from the releasing job (#40932)

Allows us to release on every push to release branch, but only tag manually once/week when we want to deploy a new self-host.

GitOrigin-RevId: 1690d64c40484b52ac362f6132df7c2077df119d

Author: nipunn1313

.github/workflows/release_self_hosted_images.yml

@@ -2,12 +2,6 @@ name: Release Self-Hosted Images
 
 on:
   workflow_dispatch:
-    inputs:
-      tag_latest:
-        description: "Tag images as latest"
-        type: boolean
-        default: true
-        required: true
   push:
     branches:
       - release
@@ -54,23 +48,9 @@ jobs:
             --amend ghcr.io/get-convex/convex-backend@${{ needs.release_backend.outputs.backend_arm64_digest }}
           docker manifest push ghcr.io/get-convex/convex-backend:${{ github.sha }}
 
-          if [[ "${{ github.event_name == 'workflow_dispatch' && inputs.tag_latest || false }}" == "true" ]]; then
-            docker manifest create ghcr.io/get-convex/convex-backend:latest \
-              --amend ghcr.io/get-convex/convex-backend@${{ needs.release_backend.outputs.backend_x64_digest }} \
-              --amend ghcr.io/get-convex/convex-backend@${{ needs.release_backend.outputs.backend_arm64_digest }}
-            docker manifest push ghcr.io/get-convex/convex-backend:latest
-          fi
-
       - name: Tag and push dashboard manifest
         run: |
           docker manifest create ghcr.io/get-convex/convex-dashboard:${{ github.sha }} \
             --amend ghcr.io/get-convex/convex-dashboard@${{ needs.release_dashboard.outputs.dashboard_x64_digest }} \
             --amend ghcr.io/get-convex/convex-dashboard@${{ needs.release_dashboard.outputs.dashboard_arm64_digest }}
           docker manifest push ghcr.io/get-convex/convex-dashboard:${{ github.sha }}
-
-          if [[ "${{ github.event_name == 'workflow_dispatch' && inputs.tag_latest || false }}" == "true" ]]; then
-            docker manifest create ghcr.io/get-convex/convex-dashboard:latest \
-              --amend ghcr.io/get-convex/convex-dashboard@${{ needs.release_dashboard.outputs.dashboard_x64_digest }} \
-              --amend ghcr.io/get-convex/convex-dashboard@${{ needs.release_dashboard.outputs.dashboard_arm64_digest }}
-            docker manifest push ghcr.io/get-convex/convex-dashboard:latest
-          fi

.github/workflows/tag_self_hosted_images_latest.yml

@@ -0,0 +1,40 @@
+name: Tag Self-Hosted Images as latest
+
+on:
+  workflow_dispatch:
+    inputs:
+      github_sha:
+        description: "Rev to tag as latest. Pick from https://github.com/get-convex/convex-backend/pkgs/container/convex-backend"
+        type: string
+        required: true
+
+jobs:
+  tag_images_as_latest:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Modify convex-backend manifest with latest tag
+        run: |
+          digests=$(docker manifest inspect ghcr.io/get-convex/convex-backend:${{ inputs.github_sha }} | jq -r '.manifests[].digest')
+          args=()
+          for digest in $digests; do
+            args+=(--amend "ghcr.io/get-convex/convex-backend@$digest")
+          done
+          docker manifest create ghcr.io/get-convex/convex-backend:latest "${args[@]}"
+          docker manifest push ghcr.io/get-convex/convex-backend:latest
+
+      - name: Modify dashboard manifest with latest tag
+        run: |
+          digests=$(docker manifest inspect ghcr.io/get-convex/convex-dashboard:${{ inputs.github_sha }} | jq -r '.manifests[].digest')
+          args=()
+          for digest in $digests; do
+            args+=(--amend "ghcr.io/get-convex/convex-dashboard@$digest")
+          done
+          docker manifest create ghcr.io/get-convex/convex-dashboard:latest "${args[@]}"
+          docker manifest push ghcr.io/get-convex/convex-dashboard:latest