501 lines
18 KiB
YAML
501 lines
18 KiB
YAML
name: Create release
|
|
|
|
permissions:
|
|
pull-requests: write
|
|
contents: write
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
bump_type:
|
|
description: "Specify the type of version bump"
|
|
required: true
|
|
default: "patch"
|
|
type: choice
|
|
options:
|
|
- patch
|
|
- minor
|
|
- major
|
|
|
|
jobs:
|
|
bump-version:
|
|
name: bump-version
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Configure SSH for Git
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.RELEASE_BOT_SSH_KEY }}" > ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan -H github.com >> ~/.ssh/known_hosts
|
|
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
with:
|
|
ssh-key: ${{ secrets.RELEASE_BOT_SSH_KEY }}
|
|
fetch-depth: 0
|
|
|
|
- name: Set up Python
|
|
uses: actions/setup-python@v4
|
|
with:
|
|
python-version: "3.10"
|
|
|
|
- name: Install Commitizen
|
|
run: |
|
|
python -m pip install --upgrade pip
|
|
pip install commitizen
|
|
npm install -g conventional-changelog-cli
|
|
|
|
- name: Configure Git user
|
|
run: |
|
|
git config user.name "github-actions[bot]"
|
|
git config user.email "github-actions[bot]@users.noreply.github.com"
|
|
|
|
- name: Bump version with Commitizen
|
|
run: |
|
|
cz bump --yes --increment ${{ github.event.inputs.bump_type }}
|
|
|
|
- name: Amend commit message to include '[skip ci]'
|
|
run: |
|
|
git commit --amend --no-edit -m "$(git log -1 --pretty=%B) [skip ci]"
|
|
|
|
- name: Install Rust stable
|
|
uses: dtolnay/rust-toolchain@stable
|
|
|
|
- name: Update the Cargo.lock
|
|
run: |
|
|
cargo update
|
|
git add Cargo.lock
|
|
git commit -m "chore: Bump the version in Cargo.lock"
|
|
|
|
- name: Get the new version tag
|
|
id: version
|
|
run: |
|
|
mkdir -p artifacts
|
|
NEW_TAG=$(cz version --project)
|
|
echo "New version: $NEW_TAG"
|
|
echo "version=$NEW_TAG" >> $GITHUB_ENV
|
|
echo "$NEW_TAG" > artifacts/release-version
|
|
|
|
- name: Get the previous version tag
|
|
id: prev_version
|
|
run: |
|
|
PREV_TAG=$(git describe --tags --abbrev=0 ${GITHUB_SHA}^)
|
|
echo "Previous tag: $PREV_TAG"
|
|
echo "prev_version=$PREV_TAG" >> $GITHUB_ENV
|
|
|
|
- name: Generate changelog for the version bump
|
|
id: changelog
|
|
run: |
|
|
changelog=$(conventional-changelog -p angular -i CHANGELOG.md -s --from ${{ env.prev_version }} --to ${{ env.version }})
|
|
echo "$changelog" > artifacts/changelog.md
|
|
echo "changelog_body=$(cat artifacts/changelog.md)" >> $GITHUB_ENV
|
|
|
|
- name: Push changes
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
git push origin --follow-tags
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
|
|
build-release-artifacts:
|
|
name: build-release
|
|
needs: [bump-version]
|
|
runs-on: ${{ matrix.job.os }}
|
|
env:
|
|
RUST_BACKTRACE: 1
|
|
strategy:
|
|
fail-fast: true
|
|
matrix:
|
|
# prettier-ignore
|
|
job:
|
|
- { name: "macOS-arm64", os: "macOS-latest", target: "aarch64-apple-darwin", artifact_suffix: "macos-arm64", use-cross: true }
|
|
- { name: "macOS-amd64", os: "macOS-latest", target: "x86_64-apple-darwin", artifact_suffix: "macos" }
|
|
- { name: "windows-amd64", os: "windows-latest", target: "x86_64-pc-windows-msvc", artifact_suffix: "windows" }
|
|
- { name: "windows-aarch64", os: "windows-latest", target: "aarch64-pc-windows-msvc", artifact_suffix: "windows-aarch64", use-cross: true }
|
|
- { name: "linux-gnu", os: "ubuntu-latest", target: "x86_64-unknown-linux-gnu", artifact_suffix: "linux" }
|
|
- { name: "linux-musl", os: "ubuntu-latest", target: "x86_64-unknown-linux-musl", artifact_suffix: "linux-musl", use-cross: true, }
|
|
- { name: "linux-aarch64-gnu", os: "ubuntu-latest", target: "aarch64-unknown-linux-gnu", artifact_suffix: "aarch64-gnu", use-cross: true, test-bin: "--bin managarr" }
|
|
- { name: "linux-aarch64-musl", os: "ubuntu-latest", target: "aarch64-unknown-linux-musl", artifact_suffix: "aarch64-musl", use-cross: true, test-bin: "--bin managarr" }
|
|
- { name: "linux-arm-gnu", os: "ubuntu-latest", target: "arm-unknown-linux-gnueabi", artifact_suffix: "armv6-gnu", use-cross: true, test-bin: "--bin managarr" }
|
|
- { name: "linux-arm-musl", os: "ubuntu-latest", target: "arm-unknown-linux-musleabihf", artifact_suffix: "armv6-musl", use-cross: true, test-bin: "--bin managarr" }
|
|
- { name: "linux-armv7-gnu", os: "ubuntu-latest", target: "armv7-unknown-linux-gnueabihf", artifact_suffix: "armv7-gnu", use-cross: true, test-bin: "--bin managarr" }
|
|
- { name: "linux-armv7-musl", os: "ubuntu-latest", target: "armv7-unknown-linux-musleabihf", artifact_suffix: "armv7-musl", use-cross: true, test-bin: "--bin managarr" }
|
|
rust: [stable]
|
|
|
|
steps:
|
|
- name: Check if actor is repository owner
|
|
if: ${{ github.actor != github.repository_owner }}
|
|
run: |
|
|
echo "You are not authorized to run this workflow."
|
|
exit 1
|
|
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Ensure repository is up-to-date
|
|
run: |
|
|
git fetch --all
|
|
git pull
|
|
|
|
- uses: actions/cache@v3
|
|
name: Cache Cargo registry
|
|
with:
|
|
path: ~/.cargo/registry
|
|
key: ${{ runner.os }}-cargo-registry-${{ hashFiles('Cargo.lock') }}
|
|
|
|
- uses: actions/cache@v3
|
|
if: startsWith(matrix.job.name, 'linux-')
|
|
with:
|
|
path: ~/.cargo/bin
|
|
key: ${{ runner.os }}-cargo-bin-${{ hashFiles('.github/workflows/release.yml') }}
|
|
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
name: Set Rust toolchain
|
|
with:
|
|
targets: ${{ matrix.job.target }}
|
|
|
|
- uses: taiki-e/setup-cross-toolchain-action@v1
|
|
with:
|
|
# NB: sets CARGO_BUILD_TARGET evar - do not need --target flag in build
|
|
target: ${{ matrix.job.target }}
|
|
|
|
- uses: taiki-e/install-action@cross
|
|
if: ${{ matrix.job.use-cross }}
|
|
|
|
- name: Installing needed Ubuntu dependencies
|
|
if: matrix.job.os == 'ubuntu-latest'
|
|
shell: bash
|
|
run: |
|
|
sudo apt-get -y update
|
|
case ${{ matrix.job.target }} in
|
|
arm*-linux-*) sudo apt-get -y install gcc-arm-linux-gnueabihf ;;
|
|
aarch64-*-linux-*) sudo apt-get -y install gcc-aarch64-linux-gnu ;;
|
|
esac
|
|
|
|
- name: Build
|
|
run: cargo build --release --verbose --target=${{ matrix.job.target }} --locked
|
|
|
|
- name: Verify file
|
|
shell: bash
|
|
run: |
|
|
file target/${{ matrix.job.target }}/release/managarr
|
|
|
|
- name: Test
|
|
if: matrix.job.target != 'aarch64-apple-darwin' && matrix.job.target != 'aarch64-pc-windows-msvc'
|
|
run: cargo test --release --verbose --target=${{ matrix.job.target }} ${{ matrix.job.test-bin }}
|
|
|
|
- name: Packaging final binary (Windows)
|
|
if: matrix.job.os == 'windows-latest'
|
|
shell: bash
|
|
run: |
|
|
cd target/${{ matrix.job.target }}/release
|
|
BINARY_NAME=managarr.exe
|
|
if [ "${{ matrix.job.target }}" != "aarch64-pc-windows-msvc" ]; then
|
|
# strip the binary
|
|
strip $BINARY_NAME
|
|
fi
|
|
RELEASE_NAME=managarr-${{ matrix.job.artifact_suffix }}
|
|
mkdir -p artifacts
|
|
tar czvf $RELEASE_NAME.tar.gz $BINARY_NAME
|
|
# create sha checksum files
|
|
certutil -hashfile $RELEASE_NAME.tar.gz sha256 | grep -E [A-Fa-f0-9]{64} > $RELEASE_NAME.sha256
|
|
echo "RELEASE_NAME=$RELEASE_NAME" >> $GITHUB_ENV
|
|
|
|
- name: Packaging final binary (macOS and Linux)
|
|
if: matrix.job.os != 'windows-latest'
|
|
shell: bash
|
|
run: |
|
|
# set the right strip executable
|
|
STRIP="strip";
|
|
case ${{ matrix.job.target }} in
|
|
arm*-linux-*) STRIP="arm-linux-gnueabihf-strip" ;;
|
|
aarch64-*-linux-*) STRIP="aarch64-linux-gnu-strip" ;;
|
|
esac;
|
|
cd target/${{ matrix.job.target }}/release
|
|
BINARY_NAME=managarr
|
|
# strip the binary
|
|
"$STRIP" "$BINARY_NAME"
|
|
RELEASE_NAME=managarr-${{ matrix.job.artifact_suffix }}
|
|
tar czvf $RELEASE_NAME.tar.gz $BINARY_NAME
|
|
# create sha checksum files
|
|
shasum -a 256 $RELEASE_NAME.tar.gz > $RELEASE_NAME.sha256
|
|
echo "RELEASE_NAME=$RELEASE_NAME" >> $GITHUB_ENV
|
|
|
|
- name: Add artifacts
|
|
run: |
|
|
mkdir -p artifacts
|
|
cp target/${{ matrix.job.target }}/release/${{ env.RELEASE_NAME }}.tar.gz artifacts/
|
|
cp target/${{ matrix.job.target }}/release/${{ env.RELEASE_NAME }}.sha256 artifacts/
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: artifacts-${{ env.RELEASE_NAME }}
|
|
path: artifacts
|
|
overwrite: true
|
|
|
|
publish-github-release:
|
|
name: publish-github-release
|
|
needs: [build-release-artifacts]
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Download all artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
merge-multiple: true
|
|
|
|
- name: Ensure repository is up-to-date
|
|
run: |
|
|
git fetch --all
|
|
git pull
|
|
|
|
- name: Set environment variables
|
|
run: |
|
|
release_version="$(cat ./artifacts/release-version)"
|
|
echo "RELEASE_VERSION=$release_version" >> $GITHUB_ENV
|
|
changelog_body="$(cat ./artifacts/changelog.md)"
|
|
echo "changelog_body=$(cat artifacts/changelog.md)" >> $GITHUB_ENV
|
|
|
|
- name: Create a GitHub Release
|
|
uses: softprops/action-gh-release@v1
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
with:
|
|
files: |
|
|
artifacts/managarr-macos-arm64.tar.gz
|
|
artifacts/managarr-macos-arm64.sha256
|
|
artifacts/managarr-macos.tar.gz
|
|
artifacts/managarr-macos.sha256
|
|
artifacts/managarr-windows.tar.gz
|
|
artifacts/managarr-windows.sha256
|
|
artifacts/managarr-windows-aarch64.tar.gz
|
|
artifacts/managarr-windows-aarch64.sha256
|
|
artifacts/managarr-linux.tar.gz
|
|
artifacts/managarr-linux.sha256
|
|
artifacts/managarr-linux-musl.tar.gz
|
|
artifacts/managarr-linux-musl.sha256
|
|
artifacts/managarr-aarch64-gnu.tar.gz
|
|
artifacts/managarr-aarch64-gnu.sha256
|
|
artifacts/managarr-aarch64-musl.tar.gz
|
|
artifacts/managarr-aarch64-musl.sha256
|
|
artifacts/managarr-armv6-gnu.tar.gz
|
|
artifacts/managarr-armv6-gnu.sha256
|
|
artifacts/managarr-armv6-musl.tar.gz
|
|
artifacts/managarr-armv6-musl.sha256
|
|
artifacts/managarr-armv7-gnu.tar.gz
|
|
artifacts/managarr-armv7-gnu.sha256
|
|
artifacts/managarr-armv7-musl.tar.gz
|
|
artifacts/managarr-armv7-musl.sha256
|
|
tag_name: v${{ env.RELEASE_VERSION }}
|
|
name: "v${{ env.RELEASE_VERSION }}"
|
|
body: ${{ env.changelog_body }}
|
|
draft: false
|
|
prerelease: false
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
overwrite: true
|
|
|
|
publish-chocolatey-package:
|
|
needs: [publish-github-release]
|
|
name: Publish Chocolatey Package
|
|
runs-on: windows-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Get release artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
merge-multiple: true
|
|
|
|
- name: Set release assets and version
|
|
shell: pwsh
|
|
run: |
|
|
# Read the first column from the SHA256 file
|
|
$windows_sha = Get-Content ./artifacts/managarr-windows.sha256 | ForEach-Object { $_.Split(' ')[0] }
|
|
Add-Content -Path $env:GITHUB_ENV -Value "WINDOWS_SHA=$windows_sha"
|
|
|
|
# Read the release version from the release-version file
|
|
$release_version = Get-Content ./artifacts/release-version
|
|
Add-Content -Path $env:GITHUB_ENV -Value "RELEASE_VERSION=$release_version"
|
|
|
|
- name: Validate release environment variables
|
|
run: |
|
|
echo "Release SHA windows: ${{ env.WINDOWS_SHA }}"
|
|
echo "Release version: ${{ env.RELEASE_VERSION }}"
|
|
|
|
- name: Package and Publish package to Chocolatey
|
|
run: |
|
|
mkdir ./deployment/chocolatey/tools
|
|
# Run packaging script
|
|
python "./deployment/chocolatey/packager.py" ${{ env.RELEASE_VERSION }} "./deployment/chocolatey/managarr.nuspec.template" "./deployment/chocolatey/managarr.nuspec" ${{ env.WINDOWS_SHA }}
|
|
python "./deployment/chocolatey/packager.py" ${{ env.RELEASE_VERSION }} "./deployment/chocolatey/chocolateyinstall.ps1.template" "./deployment/chocolatey/tools/chocolateyinstall.ps1" ${{ env.WINDOWS_SHA }}
|
|
|
|
# Publish to Chocolatey
|
|
cd ./deployment/chocolatey
|
|
choco pack
|
|
echo y | choco install managarr -dv -s .
|
|
$version = managarr --version
|
|
$version = $version -replace " ", "."
|
|
choco push $version.nupkg -s https://push.chocolatey.org/ --api-key ${{ secrets.CHOCOLATEY_API_KEY }};
|
|
|
|
publish-homebrew-formula:
|
|
needs: [publish-github-release]
|
|
name: Update Homebrew formulas
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Get release artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
merge-multiple: true
|
|
|
|
- name: Set release assets and version
|
|
shell: bash
|
|
run: |
|
|
# Set environment variables
|
|
macos_sha="$(cat ./artifacts/managarr-macos.sha256 | awk '{print $1}')"
|
|
echo "MACOS_SHA=$macos_sha" >> $GITHUB_ENV
|
|
macos_sha_arm="$(cat ./artifacts/managarr-macos-arm64.sha256 | awk '{print $1}')"
|
|
echo "MACOS_SHA_ARM=$macos_sha_arm" >> $GITHUB_ENV
|
|
linux_sha="$(cat ./artifacts/managarr-linux-musl.sha256 | awk '{print $1}')"
|
|
echo "LINUX_SHA=$linux_sha" >> $GITHUB_ENV
|
|
release_version="$(cat ./artifacts/release-version)"
|
|
echo "RELEASE_VERSION=$release_version" >> $GITHUB_ENV
|
|
|
|
- name: Validate release environment variables
|
|
run: |
|
|
echo "Release SHA macos: ${{ env.MACOS_SHA }}"
|
|
echo "Release SHA macos-arm: ${{ env.MACOS_SHA_ARM }}"
|
|
echo "Release SHA linux musl: ${{ env.LINUX_SHA }}"
|
|
echo "Release version: ${{ env.RELEASE_VERSION }}"
|
|
|
|
- name: Execute Homebrew packaging script
|
|
run: |
|
|
# run packaging script
|
|
python "./deployment/homebrew/packager.py" ${{ env.RELEASE_VERSION }} "./deployment/homebrew/managarr.rb.template" "./managarr.rb" ${{ env.MACOS_SHA }} ${{ env.MACOS_SHA_ARM }} ${{ env.LINUX_SHA }}
|
|
|
|
- name: Push changes to Homebrew tap
|
|
env:
|
|
TOKEN: ${{ secrets.MANAGARR_GITHUB_TOKEN }}
|
|
run: |
|
|
# push to Git
|
|
git config --global user.name "Dark-Alex-17"
|
|
git config --global user.email "alex.j.tusa@gmail.com"
|
|
git clone https://Dark-Alex-17:${{ secrets.MANAGARR_GITHUB_TOKEN }}@github.com/Dark-Alex-17/homebrew-managarr.git
|
|
rm homebrew-managarr/Formula/managarr.rb
|
|
cp managarr.rb homebrew-managarr/Formula
|
|
cd homebrew-managarr
|
|
git add .
|
|
git diff-index --quiet HEAD || git commit -am "Update formula for Managarr release ${{ env.RELEASE_VERSION }}"
|
|
git push https://$TOKEN@github.com/Dark-Alex-17/homebrew-managarr.git
|
|
|
|
publish-docker-image:
|
|
needs: [publish-github-release]
|
|
name: Publishing Docker image to Docker Hub
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Get release artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
path: artifacts
|
|
merge-multiple: true
|
|
|
|
- name: Set version variable
|
|
run: |
|
|
version="$(cat artifacts/release-version)"
|
|
echo "version=$version" >> $GITHUB_ENV
|
|
|
|
- name: Validate release environment variables
|
|
run: |
|
|
echo "Release version: ${{ env.version }}"
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v3
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to Docker Hub
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
|
|
- name: Push to Docker Hub
|
|
uses: docker/build-push-action@v5
|
|
with:
|
|
context: .
|
|
file: Dockerfile
|
|
platforms: linux/amd64,linux/arm64
|
|
push: true
|
|
tags: darkalex17/managarr:latest, darkalex17/managarr:${{ env.version }}
|
|
|
|
publish-crate:
|
|
needs: publish-github-release
|
|
name: Publish Crate
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Check if actor is repository owner
|
|
if: ${{ github.actor != github.repository_owner }}
|
|
run: |
|
|
echo "You are not authorized to run this workflow."
|
|
exit 1
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Ensure repository is up-to-date
|
|
run: |
|
|
git fetch --all
|
|
git pull
|
|
|
|
- uses: actions/cache@v3
|
|
name: Cache Cargo registry
|
|
with:
|
|
path: ~/.cargo/registry
|
|
key: ${{ runner.os }}-cargo-registry-${{ hashFiles('Cargo.lock') }}
|
|
|
|
- uses: actions/cache@v3
|
|
with:
|
|
path: ~/.cargo/bin
|
|
key: ${{ runner.os }}-cargo-bin-${{ hashFiles('.github/workflows/release.yml') }}
|
|
|
|
- name: Install Rust stable
|
|
uses: dtolnay/rust-toolchain@stable
|
|
|
|
- uses: katyo/publish-crates@v2
|
|
with:
|
|
registry-token: ${{ secrets.CARGO_REGISTRY_TOKEN }}
|