Allow latest tag to be published, restrict SAST jobs to approved MR

.gitlab-ci.yml

@@ -145,3 +145,7 @@ weekly-build-scheduler:
 code_quality:
   rules:
     - if: $CI_MERGE_REQUEST_APPROVED
+
+semgrep-sast:
+  rules:
+    - if: $CI_MERGE_REQUEST_APPROVED

CHANGELOG.md

@@ -19,13 +19,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 <!-- --/>
 -->
 
+## [3.2.2] - 2024/06/09
+### Fixed
+- Allow the latest tag to be applied to the v9 versions. (#54)
+- Restricted SAST jobs to approved pipelines. (#58)
+
+[3.2.2]: https://gitlab.com/florian.anceau/docker-seafile-client/-/tags/3.2.2
+<!-- /3.2.2 -->
+
 ## [3.2.1] - 2024/06/09
 ### Added
 - Merge requests pipeline only runs when merge request has been approved.
 ### Changed
 - Badges are rendered from the Gitlab project itself, not from code. (#62)
 
-[3.2.1]: [url_to_tag](https://gitlab.com/florian.anceau/docker-seafile-client/-/tags/3.2.0)
+[3.2.1]: https://gitlab.com/florian.anceau/docker-seafile-client/-/tags/3.2.1
 <!-- /3.2.1 -->
 
 ## [3.2.0] - 2024/06/06

scripts/publish-images.sh

@@ -41,7 +41,7 @@ echo $version >> "versions/$TARGET"
 
 # Generate version tags.
 tags=()
-#[[ "$TARGET" =~ "unstable" ]] && tags+=("latest")
+[[ "$TARGET" =~ "unstable" ]] && tags+=("latest")
 for version_component in $(echo $version | tr '.' '\n'); do
     tag+="$version_component"
     tags+=("$tag")