Merge pull request #395 from 1lck/codex/release-0.3.9 #22
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release macOS | |
| on: | |
| push: | |
| tags: | |
| - "v*.*.*" | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: "Semantic version to release, for example 0.1.0" | |
| required: true | |
| type: string | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: release-macos-${{ github.event_name == 'workflow_dispatch' && inputs.version || github.ref }} | |
| cancel-in-progress: false | |
| jobs: | |
| prepare: | |
| name: Resolve release version | |
| if: github.actor == github.repository_owner | |
| runs-on: ubuntu-latest | |
| outputs: | |
| version: ${{ steps.version.outputs.version }} | |
| tag: ${{ steps.version.outputs.tag }} | |
| build_number: ${{ steps.version.outputs.build_number }} | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@v7 | |
| - name: Resolve release version | |
| id: version | |
| env: | |
| EVENT_NAME: ${{ github.event_name }} | |
| MANUAL_VERSION: ${{ inputs.version }} | |
| shell: bash | |
| run: | | |
| if [[ "$EVENT_NAME" == "workflow_dispatch" ]]; then | |
| version="$MANUAL_VERSION" | |
| else | |
| version="${GITHUB_REF_NAME#v}" | |
| fi | |
| if [[ ! "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then | |
| echo "Release version must use the form MAJOR.MINOR.PATCH: $version" | |
| exit 1 | |
| fi | |
| { | |
| echo "version=$version" | |
| echo "tag=v$version" | |
| echo "build_number=$GITHUB_RUN_NUMBER" | |
| } >> "$GITHUB_OUTPUT" | |
| - name: Validate release notes | |
| env: | |
| LITHE_VERSION: ${{ steps.version.outputs.version }} | |
| shell: bash | |
| run: | | |
| notes_file="docs/releases/v${LITHE_VERSION}.md" | |
| node scripts/validate-stable-release-notes.mjs "$notes_file" | |
| build: | |
| name: Build ${{ matrix.architecture }} release | |
| needs: prepare | |
| runs-on: macos-14 | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| architecture: | |
| - arm64 | |
| - x86_64 | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@v7 | |
| - name: Set up Swift | |
| uses: swift-actions/setup-swift@v2 | |
| with: | |
| swift-version: "6.2" | |
| - name: Set up Rust target | |
| uses: dtolnay/rust-toolchain@stable | |
| with: | |
| targets: ${{ matrix.architecture == 'arm64' && 'aarch64-apple-darwin' || 'x86_64-apple-darwin' }} | |
| - name: Prepare verified dependency caches | |
| uses: ./.github/actions/prepare-macos-dependency-cache | |
| with: | |
| swiftpm: "true" | |
| cargo: "true" | |
| jdtls: "true" | |
| jdk: "true" | |
| jdk-architecture: ${{ matrix.architecture }} | |
| restore-only: "true" | |
| - name: Build and package the App | |
| env: | |
| LITHE_ARCH: ${{ matrix.architecture }} | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| LITHE_BUILD_NUMBER: ${{ needs.prepare.outputs.build_number }} | |
| run: | | |
| ./scripts/package-app.sh | |
| ./scripts/create-dmg.sh | |
| dmg_name="Lithe-${LITHE_VERSION}-${LITHE_ARCH}.dmg" | |
| (cd dist && shasum -a 256 "$dmg_name" > "$dmg_name.sha256") | |
| - name: Verify the bundle and disk image | |
| env: | |
| LITHE_ARCH: ${{ matrix.architecture }} | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| run: | | |
| app_path="dist/Lithe-${LITHE_ARCH}.app" | |
| dmg_path="dist/Lithe-${LITHE_VERSION}-${LITHE_ARCH}.dmg" | |
| codesign --verify --deep --strict "$app_path" | |
| /usr/libexec/PlistBuddy \ | |
| -c "Print :CFBundleShortVersionString" \ | |
| "$app_path/Contents/Info.plist" | |
| /usr/libexec/PlistBuddy \ | |
| -c "Print :CFBundleVersion" \ | |
| "$app_path/Contents/Info.plist" | |
| for build_key in \ | |
| LitheBuildGitRevision \ | |
| LitheBuildGitBranch \ | |
| LitheBuildGitDirty \ | |
| LitheBuildTimestamp; do | |
| /usr/libexec/PlistBuddy \ | |
| -c "Print :${build_key}" \ | |
| "$app_path/Contents/Info.plist" | |
| done | |
| lipo "$app_path/Contents/MacOS/Lithe" -verify_arch "$LITHE_ARCH" | |
| hdiutil imageinfo "$dmg_path" > /dev/null | |
| test -s "$dmg_path" | |
| (cd dist && shasum -a 256 -c "Lithe-${LITHE_VERSION}-${LITHE_ARCH}.dmg.sha256") | |
| - name: Upload release assets | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: macos-release-${{ matrix.architecture }} | |
| path: | | |
| dist/Lithe-${{ needs.prepare.outputs.version }}-${{ matrix.architecture }}.dmg | |
| dist/Lithe-${{ needs.prepare.outputs.version }}-${{ matrix.architecture }}.dmg.sha256 | |
| if-no-files-found: error | |
| retention-days: 7 | |
| publish: | |
| name: Publish macOS release | |
| needs: | |
| - prepare | |
| - build | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| outputs: | |
| version: ${{ needs.prepare.outputs.version }} | |
| tag: ${{ needs.prepare.outputs.tag }} | |
| steps: | |
| - name: Check out source | |
| uses: actions/checkout@v7 | |
| - name: Download release assets | |
| uses: actions/download-artifact@v8 | |
| with: | |
| pattern: macos-release-* | |
| path: dist | |
| merge-multiple: true | |
| - name: Verify downloaded assets | |
| env: | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| shell: bash | |
| run: | | |
| for architecture in arm64 x86_64; do | |
| (cd dist && shasum -a 256 -c "Lithe-${LITHE_VERSION}-${architecture}.dmg.sha256") | |
| done | |
| - name: Generate macOS update manifest | |
| env: | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| RELEASE_TAG: ${{ needs.prepare.outputs.tag }} | |
| run: | | |
| ruby scripts/create-macos-update-manifest.rb \ | |
| --version "$LITHE_VERSION" \ | |
| --repository "$GITHUB_REPOSITORY" \ | |
| --release-tag "$RELEASE_TAG" | |
| ruby -rjson -e 'manifest = JSON.parse(File.read("dist/latest-macos.json")); abort "Invalid schema" unless manifest["schemaVersion"] == 1' | |
| - name: Create or update GitHub Release | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| RELEASE_TAG: ${{ needs.prepare.outputs.tag }} | |
| LITHE_VERSION: ${{ needs.prepare.outputs.version }} | |
| shell: bash | |
| run: | | |
| notes_file="docs/releases/v${LITHE_VERSION}.md" | |
| create_args=( | |
| "$RELEASE_TAG" | |
| --repo "$GITHUB_REPOSITORY" | |
| --target "$GITHUB_SHA" | |
| --title "Lithe $RELEASE_TAG" | |
| ) | |
| edit_args=( | |
| "$RELEASE_TAG" | |
| --repo "$GITHUB_REPOSITORY" | |
| --target "$GITHUB_SHA" | |
| --title "Lithe $RELEASE_TAG" | |
| ) | |
| upload_args=( | |
| "dist/Lithe-${LITHE_VERSION}-arm64.dmg" | |
| "dist/Lithe-${LITHE_VERSION}-arm64.dmg.sha256" | |
| "dist/Lithe-${LITHE_VERSION}-x86_64.dmg" | |
| "dist/Lithe-${LITHE_VERSION}-x86_64.dmg.sha256" | |
| "dist/latest-macos.json" | |
| ) | |
| create_args+=(--notes-file "$notes_file") | |
| edit_args+=(--notes-file "$notes_file") | |
| if ! gh release view "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then | |
| gh release create "${create_args[@]}" || \ | |
| gh release view "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY" >/dev/null | |
| fi | |
| gh release edit "${edit_args[@]}" | |
| gh release upload "$RELEASE_TAG" "${upload_args[@]}" \ | |
| --repo "$GITHUB_REPOSITORY" --clobber | |
| update-cask: | |
| name: Update Homebrew Cask | |
| needs: publish | |
| runs-on: macos-14 | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Check out the default branch | |
| uses: actions/checkout@v7 | |
| with: | |
| ref: main | |
| - name: Download release checksums | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| RELEASE_TAG: ${{ needs.publish.outputs.tag }} | |
| LITHE_VERSION: ${{ needs.publish.outputs.version }} | |
| run: | | |
| checksum_dir="$RUNNER_TEMP/lithe-release" | |
| mkdir -p "$checksum_dir" | |
| gh release download "$RELEASE_TAG" \ | |
| --repo "$GITHUB_REPOSITORY" \ | |
| --pattern "*.dmg.sha256" \ | |
| --dir "$checksum_dir" | |
| echo "CHECKSUM_DIR=$checksum_dir" >> "$GITHUB_ENV" | |
| - name: Update the Cask metadata | |
| env: | |
| LITHE_VERSION: ${{ needs.publish.outputs.version }} | |
| run: | | |
| arm_sha=$(awk 'NR == 1 { print $1 }' "$CHECKSUM_DIR/Lithe-${LITHE_VERSION}-arm64.dmg.sha256") | |
| intel_sha=$(awk 'NR == 1 { print $1 }' "$CHECKSUM_DIR/Lithe-${LITHE_VERSION}-x86_64.dmg.sha256") | |
| LITHE_ARM64_SHA256="$arm_sha" \ | |
| LITHE_X86_64_SHA256="$intel_sha" \ | |
| ruby scripts/update-homebrew-cask.rb | |
| - name: Validate the Cask | |
| env: | |
| HOMEBREW_GITHUB_API_TOKEN: ${{ github.token }} | |
| run: | | |
| brew tap 1lck/lithe https://github.com/1lck/Lithe-IDEA.git | |
| tap_path="$(brew --repository)/Library/Taps/1lck/homebrew-lithe" | |
| cp "$GITHUB_WORKSPACE/Casks/lithe.rb" "$tap_path/Casks/lithe.rb" | |
| brew style --cask 1lck/lithe/lithe | |
| brew audit --cask --online 1lck/lithe/lithe | |
| - name: Create or update the Cask pull request | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| LITHE_VERSION: ${{ needs.publish.outputs.version }} | |
| run: | | |
| branch="automation/homebrew-cask-v${LITHE_VERSION}" | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git checkout -b "$branch" | |
| git add Casks/lithe.rb | |
| if git diff --cached --quiet; then | |
| exit 0 | |
| fi | |
| git commit -m "lithe ${LITHE_VERSION}" | |
| git fetch origin "$branch" || true | |
| git push --force-with-lease origin "HEAD:refs/heads/$branch" | |
| existing_pr=$(gh pr list \ | |
| --repo "$GITHUB_REPOSITORY" \ | |
| --base main \ | |
| --head "$branch" \ | |
| --state open \ | |
| --json url \ | |
| --jq '.[0].url // empty') | |
| if [[ -n "$existing_pr" ]]; then | |
| echo "Updated existing pull request: $existing_pr" | |
| exit 0 | |
| fi | |
| gh pr create \ | |
| --repo "$GITHUB_REPOSITORY" \ | |
| --base main \ | |
| --head "$branch" \ | |
| --title "lithe ${LITHE_VERSION}" \ | |
| --body "Automated Homebrew Cask metadata update for Lithe ${LITHE_VERSION}." |