sayit/.github/workflows/release-linux.yml at master · ildella/sayit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
# Tag v* → signed Linux packages + GitHub Release + updater latest.json.
# PR/master CI stays unsigned (ci-linux.yml). Do not merge the two.
name: release-linux

on:
  push:
    tags: ["v*"]

permissions:
  contents: write

concurrency:
  group: release-linux-${{ github.ref }}
  cancel-in-progress: true

env:
  APPIMAGE_EXTRACT_AND_RUN: "1"

jobs:
  linux:
    name: publish (ubuntu-24.04)
    runs-on: ubuntu-24.04

    steps:
      - uses: actions/checkout@v7

      - name: Install Linux WebKitGTK + rpm tooling
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev patchelf rpm

      - uses: actions/setup-node@v7
        with:
          node-version: 26
          cache: npm
          cache-dependency-path: |
            package-lock.json
            app/package-lock.json
            sidecar/package-lock.json

      - uses: dtolnay/rust-toolchain@stable

      - uses: swatinem/rust-cache@v2
        with:
          workspaces: ./src-tauri -> target

      - name: Install JS deps
        run: |
          npm ci
          npm --prefix app ci

      - uses: tauri-apps/tauri-action@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        with:
          tagName: ${{ github.ref_name }}
          releaseName: ${{ github.ref_name }}
          generateReleaseNotes: true
          args: >-
            -b deb,rpm,appimage
            --config {"bundle":{"createUpdaterArtifacts":true}}