Major Enhancements.

● Fixed.
- Pipeline From Rebuilding On Every Push.
- Mermaid Graph In ReadMe.
- Temporary Disabled Docker Cache.
- Typo In Some Contexts.
● Added.
- Dependabot Configuration For Weekly Updates.
- Dependabot Configuration For Docker.
- Force Rebuild For Security Reasons.
- Updated Docker Image To Forky-Slim.
- Updated Actions/Checkout To v7.
- Updated Runner To Ubuntu v26.04
- Updated The Cleanup Logic For Force Build.
- Updated Build Schedule At 11:50 PM UTC On Tuesdays, Thursdays & Saturdays.
- Defensive Check Inside GitHub Release To Prevent Race Condition Issues.

★ Signed-Off-By: Oliver ★
★ Co-Authored-By: Subhasish, James, Mark, Steffen ★

Author: encodebot

.github/dependabot.yml

@@ -3,4 +3,15 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "monthly"
+      interval: "weekly"
+    groups:
+      everything:
+        patterns: ["*"]
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      everything:
+        patterns: ["*"]

.github/workflows/mediainfo-builder.yml

@@ -3,8 +3,8 @@ name: Build MediaInfo
 on:
   push:
   schedule:
-    # Runs at 00:00 UTC on Tuesdays, Thursdays, and Saturdays
-    - cron: '0 0 * * 2,4,6'
+    # Runs Every Week At 11:50 PM UTC On Tuesdays, Thursdays & Saturdays.
+    - cron: '50 23 * * 2,4,6'
   workflow_dispatch:
 
 permissions:
@@ -13,14 +13,14 @@ permissions:
 jobs:
   check-version:
     name: Safety Measure & Version Check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     timeout-minutes: 140
     outputs:
       build_needed: ${{ steps.check.outputs.build_needed }}
       version: ${{ steps.check.outputs.version }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Check Upstream Version vs Latest Release
         id: check
@@ -39,35 +39,36 @@ jobs:
           echo "💡 Current repository latest release: $LATEST_RELEASE"
 
           if [ "v$MI_URL" == "$LATEST_RELEASE" ]; then
-            echo "✅ Version v$MI_URL is already built. Exiting workflow early with success."
-            echo "build_needed=false" >> $GITHUB_OUTPUT
+            echo "✅ Version v$MI_URL is already built. Forcing rebuild for security updates. 💚"
+            echo "build_needed=true" >> $GITHUB_OUTPUT
+            echo "version=$MI_URL" >> $GITHUB_OUTPUT
           else
             echo "🚀 New version detected! Proceeding to build v$MI_URL."
             echo "build_needed=true" >> $GITHUB_OUTPUT
             echo "version=$MI_URL" >> $GITHUB_OUTPUT
           fi
 
   build-binaries:
-    # Uses the visual_arch for human readability (x64 and ARM64)
+    # Uses the visual_arch (x64 and ARM64)
     name: Compile Binaries (${{ matrix.visual_arch }})
     needs: check-version
-    if: needs.check-version.outputs.build_needed == 'true'
+    if: (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && needs.check-version.outputs.build_needed == 'true'
     runs-on: ${{ matrix.runner }}
     timeout-minutes: 240 # 4-hour safety net for heavy compilation
     strategy:
       matrix:
         include:
           - arch: amd64
             visual_arch: x64
-            runner: ubuntu-latest
+            runner: ubuntu-26.04
             ext_name: linux64
           - arch: arm64
             visual_arch: ARM64
-            runner: ubuntu-24.04-arm
+            runner: ubuntu-26.04-arm
             ext_name: linuxarm64
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -77,12 +78,13 @@ jobs:
           set -euo pipefail
           mkdir -p ./output ./artifacts
 
+          # 🔜 Disabled Docker Cache, Re-Enable Later If Needed.
+          # --cache-to type=gha,mode=max,scope=mediainfo-${{ matrix.arch }} \
+          # --cache-from type=gha,scope=mediainfo-${{ matrix.arch }} \
           docker buildx build \
             --platform linux/${{ matrix.arch }} \
             --build-arg MI_VERSION=${{ needs.check-version.outputs.version }} \
             --output type=local,dest=./output \
-            --cache-to type=gha,mode=max,scope=mediainfo-${{ matrix.arch }} \
-            --cache-from type=gha,scope=mediainfo-${{ matrix.arch }} \
             -f Dockerfile .
 
           # Navigate to output, make executable, and compress into a real tar.xz archive
@@ -102,12 +104,12 @@ jobs:
   release-and-cleanup:
     name: Publish Release & Purge Old
     needs: [check-version, build-binaries]
-    if: needs.check-version.outputs.build_needed == 'true'
-    runs-on: ubuntu-latest
+    if: (github.event_name == 'schedule' || github.event_name == 'workflow_dispatch') && needs.check-version.outputs.build_needed == 'true'
+    runs-on: ubuntu-26.04
     timeout-minutes: 72 # Safety net for GitHub API uploads
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 2 # Required to fetch the previous commit hash
 
@@ -147,13 +149,19 @@ jobs:
           set -euo pipefail
 
           TAG_NAME="v$VERSION"
+          # Defensive check: Ensure release doesn't already exist to prevent race conditions
+          if gh release view "$TAG_NAME" >/dev/null 2>&1; then
+            echo "♻️ Release $TAG_NAME already exists. Deleting to recreate a fresh build... ☣️"
+            gh release delete "$TAG_NAME" --cleanup-tag -y
+            sleep 5
+          fi
 
           # Generate dynamic text variables
           DATE_STR=$(date -u +'%d/%m/%Y At %H:%M')
           COMMIT_MSG=$(git log -1 --pretty=%B | head -n 1)
           PREV_HASH=$(git log -2 --pretty=%H | tail -n 1)
 
-          # Create the exact release body you requested
+          # Create The Release Body.
           cat <<EOF > release_notes.txt
           This Latest Stable Automated Build Of MediaInfo Created On $DATE_STR
           $COMMIT_MSG
@@ -188,12 +196,12 @@ jobs:
 
   keepalive:
     name: Repository Keepalive
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-26.04
     if: github.event_name == 'schedule'
     timeout-minutes: 61 # Safety net for git push
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

Dockerfile

@@ -1,14 +1,14 @@
-FROM debian:trixie-slim AS builder
+FROM debian:forky-slim AS builder
 
-# Enforce strict error handling. Instantly aborts on any hidden failure.
+# Enforce Strict Error Handling. Instantly Aborts On Any Hidden Failure.
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
-# Set non-interactive frontend for apt to prevent hanging prompts
+# Set Non-Interactive Frontend For Apt To Prevent Hanging Prompts.
 ENV DEBIAN_FRONTEND=noninteractive
-# Accept MediaInfo version as a dynamic build argument
+# Accept MediaInfo Version As A Dynamic Build Argument.
 ARG MI_VERSION
-# Install prerequisites required for MediaInfo compilation
-# Intentionally omit extra libraries to ensure the binary remains highly portable.
+# Intentionally Omit Extra Libraries To Ensure The Binary Remains Highly Portable.
+# 1. Install Prerequisites Required For MediaInfo Compilation.
 RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
     curl \
@@ -22,19 +22,19 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     zlib1g-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Download and extract MediaInfo source safely with CI-friendly wget progress
+# 2. Download & Extract Mediainfo Source Safely With CI-Friendly wget Progress.
 RUN wget --progress=dot:giga "https://mediaarea.net/download/binary/mediainfo/${MI_VERSION}/MediaInfo_CLI_${MI_VERSION}_GNU_FromSource.tar.xz" -O mediainfo_src.tar.xz && \
     tar -xf mediainfo_src.tar.xz
 
 WORKDIR /MediaInfo_CLI_GNU_FromSource
 
-# Compile with multi-core support to cut build time in half
+# 3. Compile With Multi-Core Support To Cut Build Time In Half.
 RUN export MAKEFLAGS="-j$(nproc)" && \
     ./CLI_Compile.sh
 
-# Strip debugging symbols. --strip-all is the correct standard for final executables.
+# 4. Strip Debugging Symbols From The Actual Binaries To Shrink The Final Size.
 RUN strip --strip-all MediaInfo/Project/GNU/CLI/mediainfo
 
-# Use a scratch image to export ONLY the compiled binary back to the host
+# 5. Use A Scratch Image To Export ONLY The Portable Directory Structure Back To The Host.
 FROM scratch AS export-stage
 COPY --from=builder /MediaInfo_CLI_GNU_FromSource/MediaInfo/Project/GNU/CLI/mediainfo /

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright Copyright (c) 2026 Oliver <oliver@nanoskin.vn>
+Copyright (c) 2026 Oliver <oliver@nanoskin.vn>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

README.md

@@ -11,7 +11,8 @@ An optimized, cloud-native automation pipeline that monitors upstream releases o
 
 * **Native Multi-Architecture Compilation**: Avoids slow QEMU emulation overhead by utilizing GitHub’s native AMD64 and ARM64 runners.
 * **Minimalistic & Highly Portable**: Compiled exclusively against critical system dependencies (`zlib1g-dev`) to maximize static binary portability across various Linux environments.
-* **Robust Docker Remote Caching**: Implements `--cache-to/from type=gha` layers to guarantee subsequent code builds complete within minutes.
+<!-- ❌ Delete This Block Later, When Re-Enable Caching. ❌
+* **Robust Docker Remote Caching**: Implements `--cache-to/from type=gha` layers to guarantee subsequent code builds complete within minutes. -->
 * **Automatic Security Checksums**: Every build dynamically computes and attaches an authoritative `SHA256SUMS` verification manifest to the GitHub Release.
 * **Autonomous Pipeline Maintenance**: Integrated self-cleaning logic stores only the latest 4 production releases while automated keepalive protocols prevent GitHub Actions from sleeping.
 
@@ -20,8 +21,8 @@ An optimized, cloud-native automation pipeline that monitors upstream releases o
 ## ⚙️ Automated Pipeline Policies
 
 ### 🕒 Build Schedule
-* **Execution Interval**: Builds trigger automatically at **00:00 UTC on Tuesdays, Thursdays, and Saturdays**, as well as on manual execution via `workflow_dispatch`.
-* **Smart Verification**: The compiler checks upstream releases first. A compilation run triggers **only** if a brand-new upstream version of MediaInfo is detected. If no updates exist, the workflow safely exits early to save system resources.
+* **Execution Interval**: Builds trigger automatically every week at **11:50 PM UTC On Tuesdays, Thursdays & Saturdays**, as well as on manual execution via `workflow_dispatch`.
+* **Smart Verification**: The compiler checks upstream releases first. If a brand-new upstream version of `MediaInfo` is detected, a **Clean Build** is triggered. If no upstream updates exist, the workflow automatically force-rebuilds the current version to apply the latest security patches to all bundled dependencies.
 
 ### 💻 Target Architectures
 This project focuses explicitly on delivering high-performance, optimized **64-bit Linux environments**. 
@@ -41,19 +42,26 @@ To prevent repository bloat while maintaining quick access to stable historical
 ```mermaid
 graph TD
     A[Cron Schedule / Manual Dispatch] --> B{Version Check}
-    B -- Upstream == Local Tag --> C[Skip Execution]
-    B -- New Version Found --> D[Parallel Build Matrix]
-    
-    subgraph Build Platforms
-    D --> E[linux/amd64 <br> ubuntu-latest]
-    D --> F[linux/arm64 <br> ubuntu-24.04-arm64]
+    B -- Upstream == Local Tag --> C[Force Rebuild <br> Security Updates]
+    B -- New Version Found --> D[New Release <br> Clean Build]
+    C --> M[Parallel Build Matrix]
+    D --> M
+
+    subgraph Build Platforms.
+    M --> E[linux/amd64 <br> ubuntu-26.04]
+    M --> F[linux/arm64 <br> ubuntu-26.04-arm]
     end
-    
+
     E --> G[Generate Hashes <br> sha256sum]
     F --> G
-    G --> H[GitHub Release <br> Publishes Assets & Purges Old Releases]
-    
-    style C fill:#f9f,stroke:#333,stroke-width:2px
-    style H fill:#bbf,stroke:#333,stroke-width:2px
+    G --> H[Overwrites Old Tag <br> If Rebuilding]
+    H --> I[Publishes Assets]
+    I --> J[Purges Old Releases]
+
+    style C fill:#ffeb99,stroke:#333,stroke-width:2px
+    style D fill:#baffc9,stroke:#333,stroke-width:2px
+    style H fill:#e3a6c3,stroke:#333,stroke-width:2px
+    style I fill:#e3a6c3,stroke:#333,stroke-width:2px
+    style J fill:#e3a6c3,stroke:#333,stroke-width:2px
 ```
 ---