Check image refs against release tag

Author: Wuodan

.github/workflows/ci_release.yml

@@ -56,6 +56,15 @@ jobs:
             exit 1
           fi
 
+      - name: Verify ghcr-manager image refs use current release
+        run: |
+          set -euo pipefail
+          if grep -RInP "ghcr\.io/ghcr-manager/[^:\s]+:v(?!${GITHUB_REF_NAME#v}\b)\S*" .
+          then
+            echo "Found ghcr-manager image refs not pinned to ${GITHUB_REF_NAME}" >&2
+            exit 1
+          fi
+
       - name: Verify package.json uses current tag version
         run: |
           set -euo pipefail

visualizer/README.md

@@ -79,7 +79,7 @@ Example:
 ```sh
 docker run --rm -p 8080:8080 \
   -v "$PWD:/data:ro" \
-  ghcr.io/ghcr-manager/ghcr-cleanup-manager-visualizer:v1.1.3 \
+  ghcr.io/ghcr-manager/ghcr-cleanup-manager-visualizer:v1.1.4 \
   --db /data/acme__demo.sqlite
 ```