fix: Use Woodpecker Kaniko plugin with destinations format

Switch from raw gcr.io/kaniko-project/executor:debug to
woodpeckerci/plugin-kaniko with destinations setting. Also use
npm install instead of npm ci (no lock file in templates) and
skip-tls-verify for self-signed registry certs.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

changelog/v0.10.5.md

@@ -0,0 +1,15 @@
+# v0.10.5
+
+**Released:** 2026-01-28
+
+## Changes
+
+Fix Kaniko templates to use Woodpecker plugin with destinations format:
+- Switch from raw Kaniko executor to `woodpeckerci/plugin-kaniko`
+- Use `destinations` setting for multi-tag pushes
+- Use `skip-tls-verify` for self-signed registry certs
+- Fix Dockerfile to use `npm install` instead of `npm ci`
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.10.5`

internal/adapter/templates/templates/astro-landing/.woodpecker.yml

@@ -2,7 +2,7 @@ steps:
   install:
     image: node:20-alpine
     commands:
-      - npm ci
+      - npm install
     when:
       - event: [push, pull_request]
 
@@ -14,16 +14,13 @@ steps:
       - event: [push, pull_request]
 
   docker:
-    image: gcr.io/kaniko-project/executor:debug
+    image: woodpeckerci/plugin-kaniko
-    commands:
+    settings:
-      - >
+      destinations:
-        /kaniko/executor
+        - zot.orchard9.ai/{{PROJECT_NAME}}:latest
-        --context .
+        - zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --dockerfile Dockerfile
+      cache: true
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:latest
+      skip-tls-verify: true
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --cache=true
-        --insecure
     when:
       - event: push
         branch: main

internal/adapter/templates/templates/astro-landing/Dockerfile

@@ -4,7 +4,7 @@ FROM node:20-alpine AS build
 WORKDIR /app
 
 COPY package*.json ./
-RUN npm ci
+RUN npm install
 
 COPY . .
 RUN npm run build

internal/adapter/templates/templates/default/.woodpecker.yml

@@ -1,15 +1,12 @@
 steps:
   docker:
-    image: gcr.io/kaniko-project/executor:debug
+    image: woodpeckerci/plugin-kaniko
-    commands:
+    settings:
-      - >
+      destinations:
-        /kaniko/executor
+        - zot.orchard9.ai/{{PROJECT_NAME}}:latest
-        --context .
+        - zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --dockerfile Dockerfile
+      cache: true
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:latest
+      skip-tls-verify: true
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --cache=true
-        --insecure
     when:
       - event: push
         branch: main

internal/adapter/templates/templates/go-api/.woodpecker.yml

@@ -14,16 +14,13 @@ steps:
       - event: [push, pull_request]
 
   docker:
-    image: gcr.io/kaniko-project/executor:debug
+    image: woodpeckerci/plugin-kaniko
-    commands:
+    settings:
-      - >
+      destinations:
-        /kaniko/executor
+        - zot.orchard9.ai/{{PROJECT_NAME}}:latest
-        --context .
+        - zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --dockerfile Dockerfile
+      cache: true
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:latest
+      skip-tls-verify: true
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --cache=true
-        --insecure
     when:
       - event: push
         branch: main