Release macOS #10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release macOS | |
| on: | |
| push: | |
| tags: | |
| - "v*.*.*" | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: "Semantic version to release, for example 0.1.0" | |
| required: true | |
| type: string | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: release-macos-${{ github.ref }} | |
| cancel-in-progress: false | |
| jobs: | |
| prepare: | |
| name: Resolve release version | |
| if: github.actor == github.repository_owner | |
| runs-on: ubuntu-latest | |
| outputs: | |
| version: ${{ steps.version.outputs.version }} | |
| tag: ${{ steps.version.outputs.tag }} | |
| build_number: ${{ steps.version.outputs.build_number }} | |
| steps: | |
| - name: Resolve release version | |
| id: version | |
| env: | |
| EVENT_NAME: ${{ github.event_name }} | |
| MANUAL_VERSION: ${{ inputs.version }} | |
| shell: bash | |
| run: | | |
| if [[ "$EVENT_NAME" == "workflow_dispatch" ]]; then | |
| version="$MANUAL_VERSION" | |
| else | |
| version="${GITHUB_REF_NAME#v}" | |
| fi | |
| if [[ ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then | |
| echo "Release version must use the form MAJOR.MINOR.PATCH: $version" | |
| exit 1 | |
| fi | |
| { | |
| echo "version=$version" | |
| echo "tag=v$version" | |
| echo "build_number=$GITHUB_RUN_NUMBER" | |
| } >> "$GITHUB_OUTPUT" | |
| build: | |
| name: Build ${{ matrix.architecture }} release | |
| needs: prepare | |
| runs-on: macos-14 | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| architecture: | |
| - arm64 | |
| - x86_64 | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@v7 | |
| - name: Set up Swift | |
| uses: swift-actions/setup-swift@v2 | |
| with: | |
| swift-version: "6.2" | |
| - name: Set up Rust target | |
| uses: dtolnay/rust-toolchain@stable | |
| with: | |
| targets: ${{ matrix.architecture == 'arm64' && 'aarch64-apple-darwin' || 'x86_64-apple-darwin' }} | |
| - name: Restore SwiftPM dependencies | |
| uses: actions/cache@v6 | |
| with: | |
| path: | | |
| .build/checkouts | |
| .build/repositories | |
| ~/.cache/org.swift.swiftpm | |
| key: swiftpm-${{ runner.os }}-6.2-${{ hashFiles('Package.resolved') }} | |
| - name: Restore Cargo dependencies | |
| uses: actions/cache@v6 | |
| with: | |
| path: | | |
| ~/.cargo/git | |
| ~/.cargo/registry | |
| key: cargo-dependencies-${{ runner.os }}-${{ hashFiles('rust/Cargo.lock') }} | |
| - name: Build and package the App | |
| env: | |
| LITHE_ARCH: ${{ matrix.architecture }} | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| LITHE_BUILD_NUMBER: ${{ needs.prepare.outputs.build_number }} | |
| run: | | |
| ./scripts/package-app.sh | |
| ./scripts/create-dmg.sh | |
| dmg_name="Lithe-${LITHE_VERSION}-${LITHE_ARCH}.dmg" | |
| (cd dist && shasum -a 256 "$dmg_name" > "$dmg_name.sha256") | |
| - name: Verify the bundle and disk image | |
| env: | |
| LITHE_ARCH: ${{ matrix.architecture }} | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| run: | | |
| app_path="dist/Lithe-${LITHE_ARCH}.app" | |
| dmg_path="dist/Lithe-${LITHE_VERSION}-${LITHE_ARCH}.dmg" | |
| codesign --verify --deep --strict "$app_path" | |
| /usr/libexec/PlistBuddy \ | |
| -c "Print :CFBundleShortVersionString" \ | |
| "$app_path/Contents/Info.plist" | |
| /usr/libexec/PlistBuddy \ | |
| -c "Print :CFBundleVersion" \ | |
| "$app_path/Contents/Info.plist" | |
| lipo "$app_path/Contents/MacOS/Lithe" -verify_arch "$LITHE_ARCH" | |
| hdiutil imageinfo "$dmg_path" > /dev/null | |
| test -s "$dmg_path" | |
| (cd dist && shasum -a 256 -c "Lithe-${LITHE_VERSION}-${LITHE_ARCH}.dmg.sha256") | |
| - name: Upload release assets | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: macos-release-${{ matrix.architecture }} | |
| path: | | |
| dist/Lithe-${{ needs.prepare.outputs.version }}-${{ matrix.architecture }}.dmg | |
| dist/Lithe-${{ needs.prepare.outputs.version }}-${{ matrix.architecture }}.dmg.sha256 | |
| if-no-files-found: error | |
| retention-days: 7 | |
| publish: | |
| name: Publish macOS release | |
| needs: | |
| - prepare | |
| - build | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| outputs: | |
| version: ${{ needs.prepare.outputs.version }} | |
| tag: ${{ needs.prepare.outputs.tag }} | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@v7 | |
| - name: Download release assets | |
| uses: actions/download-artifact@v8 | |
| with: | |
| pattern: macos-release-* | |
| path: dist | |
| merge-multiple: true | |
| - name: Verify downloaded assets | |
| env: | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| shell: bash | |
| run: | | |
| for architecture in arm64 x86_64; do | |
| (cd dist && shasum -a 256 -c "Lithe-${LITHE_VERSION}-${architecture}.dmg.sha256") | |
| done | |
| - name: Create GitHub Release | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| RELEASE_TAG: ${{ needs.prepare.outputs.tag }} | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| shell: bash | |
| run: | | |
| notes_file="docs/releases/v${LITHE_VERSION}.md" | |
| release_args=( | |
| "$RELEASE_TAG" | |
| "dist/Lithe-${LITHE_VERSION}-arm64.dmg" | |
| "dist/Lithe-${LITHE_VERSION}-arm64.dmg.sha256" | |
| "dist/Lithe-${LITHE_VERSION}-x86_64.dmg" | |
| "dist/Lithe-${LITHE_VERSION}-x86_64.dmg.sha256" | |
| --repo "$GITHUB_REPOSITORY" | |
| --target "$GITHUB_SHA" | |
| --title "Lithe $RELEASE_TAG" | |
| ) | |
| if [[ -f "$notes_file" ]]; then | |
| release_args+=(--notes-file "$notes_file") | |
| else | |
| release_args+=(--generate-notes) | |
| fi | |
| gh release create "${release_args[@]}" | |
| update-cask: | |
| name: Update Homebrew Cask | |
| needs: publish | |
| runs-on: macos-14 | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Check out the default branch | |
| uses: actions/checkout@v7 | |
| with: | |
| ref: main | |
| - name: Download release checksums | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| RELEASE_TAG: ${{ needs.publish.outputs.tag }} | |
| LITHE_VERSION: ${{ needs.publish.outputs.version }} | |
| run: | | |
| checksum_dir="$RUNNER_TEMP/lithe-release" | |
| mkdir -p "$checksum_dir" | |
| gh release download "$RELEASE_TAG" \ | |
| --repo "$GITHUB_REPOSITORY" \ | |
| --pattern "*.dmg.sha256" \ | |
| --dir "$checksum_dir" | |
| echo "CHECKSUM_DIR=$checksum_dir" >> "$GITHUB_ENV" | |
| - name: Update the Cask metadata | |
| env: | |
| LITHE_VERSION: ${{ needs.publish.outputs.version }} | |
| run: | | |
| arm_sha=$(awk 'NR == 1 { print $1 }' "$CHECKSUM_DIR/Lithe-${LITHE_VERSION}-arm64.dmg.sha256") | |
| intel_sha=$(awk 'NR == 1 { print $1 }' "$CHECKSUM_DIR/Lithe-${LITHE_VERSION}-x86_64.dmg.sha256") | |
| LITHE_ARM64_SHA256="$arm_sha" \ | |
| LITHE_X86_64_SHA256="$intel_sha" \ | |
| ruby scripts/update-homebrew-cask.rb | |
| - name: Validate the Cask | |
| env: | |
| HOMEBREW_GITHUB_API_TOKEN: ${{ github.token }} | |
| run: | | |
| brew tap 1lck/lithe https://github.com/1lck/Lithe-IDEA.git | |
| tap_path="$(brew --repository)/Library/Taps/1lck/homebrew-lithe" | |
| cp "$GITHUB_WORKSPACE/Casks/lithe.rb" "$tap_path/Casks/lithe.rb" | |
| brew style --cask 1lck/lithe/lithe | |
| brew audit --cask --online 1lck/lithe/lithe | |
| - name: Create or update the Cask pull request | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| LITHE_VERSION: ${{ needs.publish.outputs.version }} | |
| run: | | |
| branch="automation/homebrew-cask-v${LITHE_VERSION}" | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git checkout -b "$branch" | |
| git add Casks/lithe.rb | |
| if git diff --cached --quiet; then | |
| exit 0 | |
| fi | |
| git commit -m "lithe ${LITHE_VERSION}" | |
| git fetch origin "$branch" || true | |
| git push --force-with-lease origin "HEAD:refs/heads/$branch" | |
| existing_pr=$(gh pr list \ | |
| --repo "$GITHUB_REPOSITORY" \ | |
| --base main \ | |
| --head "$branch" \ | |
| --state open \ | |
| --json url \ | |
| --jq '.[0].url // empty') | |
| if [[ -n "$existing_pr" ]]; then | |
| echo "Updated existing pull request: $existing_pr" | |
| exit 0 | |
| fi | |
| gh pr create \ | |
| --repo "$GITHUB_REPOSITORY" \ | |
| --base main \ | |
| --head "$branch" \ | |
| --title "lithe ${LITHE_VERSION}" \ | |
| --body "Automated Homebrew Cask metadata update for Lithe ${LITHE_VERSION}." |