Add "latest" tag to Docker images built from main branch

[Copilot]

Docker images built from the main branch CI workflow were not being tagged as "latest".

Changes

Modified .github/workflows/docker-publish.yml to explicitly configure tag generation in the docker/metadata-action step:

- name: Extract Docker metadata
  id: meta
  uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
  with:
    images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
    tags: |
      type=ref,event=branch
      type=ref,event=pr
      type=semver,pattern={{version}}
      type=semver,pattern={{major}}.{{minor}}
      type=semver,pattern={{major}}
      type=raw,value=latest,enable={{is_default_branch}}

The type=raw,value=latest,enable={{is_default_branch}} rule ensures images are tagged as "latest" when built from the default branch (main).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• http://crl3.digicert.com:443/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl
• http://crl3.digicert.com:443/DigiCertTrustedRootG4.crl

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

I want to have all docker images built as part of the main CI be tagged as "latest"

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.