fix(release): stabilize binary publication (#10976)

* fix(release): stabilize binary publication

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: gustavovalverde

.github/workflows/release-binaries.yml

@@ -64,20 +64,19 @@ jobs:
 
   dockerhub-description:
     if: github.repository_owner == 'ZcashFoundation' && startsWith(github.event.release.tag_name, 'v')
-    # Updating Docker Hub metadata must not turn a successfully published
-    # release image into a failed release.
-    continue-on-error: true
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2
         with:
           persist-credentials: false
 
       - name: Docker Hub Description
+        # This metadata-only update is advisory.
+        continue-on-error: true
         uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa #v5.0.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_PASSWORD }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
           repository: zfnd/zebra
           short-description: ${{ github.event.repository.description }}
 

.github/workflows/zfnd-release-binaries.yml

@@ -61,8 +61,9 @@ jobs:
 
       - name: Install build dependencies
         run: |
-          sudo apt-get -qq update
-          sudo apt-get -qq install -y --no-install-recommends \
+          sudo sed -i 's|http://ports.ubuntu.com/ubuntu-ports|https://ports.ubuntu.com/ubuntu-ports|g' /etc/apt/sources.list
+          sudo apt-get -o Acquire::Retries=3 -qq update
+          sudo apt-get -o Acquire::Retries=3 -qq install -y --no-install-recommends \
             clang libclang-dev cmake protobuf-compiler
 
       # Toolchain version comes from rust-toolchain.toml.