Merge pull request #12 from NakaokaRei/codex/add-ci-dependabot-maintain-release

Add CI, Dependabot, and modernize release workflow

Author: NakaokaRei

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/release.yml

@@ -3,62 +3,71 @@ name: Release
 on:
   push:
     tags:
-      - '*'
+      - "*"
+
+permissions:
+  contents: write
 
 jobs:
-  build:
-    runs-on: macos-latest
-    env:
-      DEVELOPER_DIR: /Applications/Xcode_15.4.app/Contents/Developer
+  release:
+    runs-on: macos-26
+    timeout-minutes: 30
 
     steps:
-    - uses: actions/checkout@v2
+      - uses: actions/checkout@v6
+
+      - name: Import signing certificate
+        env:
+          CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
+          CERTIFICATE_P12: ${{ secrets.CERTIFICATE_P12 }}
+        run: |
+          KEYCHAIN_PATH="$RUNNER_TEMP/build.keychain-db"
+          CERTIFICATE_PATH="$RUNNER_TEMP/certificate.p12"
 
-    # See more details at https://docs.github.com/ja/actions/deployment/deploying-xcode-applications/installing-an-apple-certificate-on-macos-runners-for-xcode-development
-    - name: Import Certificate
-      env:
-        CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
-        CERTIFICATE_P12: ${{ secrets.CERTIFICATE_P12 }}
-      run: |
-        echo $CERTIFICATE_P12 | base64 --decode > certificate.p12
-        security create-keychain -p runner build.keychain
-        security default-keychain -s build.keychain
-        security unlock-keychain -p runner build.keychain
-        security import certificate.p12 -k build.keychain -P $CERTIFICATE_PASSWORD -T /usr/bin/codesign
+          printf '%s' "$CERTIFICATE_P12" | base64 --decode > "$CERTIFICATE_PATH"
+          security create-keychain -p runner "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p runner "$KEYCHAIN_PATH"
+          security import "$CERTIFICATE_PATH" \
+            -k "$KEYCHAIN_PATH" \
+            -P "$CERTIFICATE_PASSWORD" \
+            -T /usr/bin/codesign
+          security set-key-partition-list \
+            -S apple-tool:,apple: \
+            -s \
+            -k runner \
+            "$KEYCHAIN_PATH"
+          security list-keychains -d user -s "$KEYCHAIN_PATH"
 
-    - name: Allow keychain access
-      run: |
-        security set-key-partition-list -S apple-tool:,apple: -s -k runner build.keychain
+      - name: Run tests
+        run: |
+          xcodebuild test \
+            -project TrackpadAir.xcodeproj \
+            -scheme TrackpadAir \
+            -destination 'platform=macOS'
 
-    - name: Build app
-      run: xcodebuild -scheme TrackpadAir -project TrackpadAir.xcodeproj build 
+      - name: Archive app
+        run: |
+          xcodebuild archive \
+            -project TrackpadAir.xcodeproj \
+            -scheme TrackpadAir \
+            -archivePath "$RUNNER_TEMP/TrackpadAir.xcarchive"
 
-    - name: Archive app
-      run: xcodebuild -scheme TrackpadAir -project TrackpadAir.xcodeproj archive -archivePath TrackpadAir.xcarchive 
+      - name: Package app
+        run: |
+          ditto -c -k --keepParent \
+            "$RUNNER_TEMP/TrackpadAir.xcarchive/Products/Applications/TrackpadAir.app" \
+            TrackpadAir.app.zip
 
-    - name: Zip .app file from Archive
-      run: |
-        cd TrackpadAir.xcarchive/Products/Applications
-        zip -r TrackpadAir.app.zip TrackpadAir.app
-        mv TrackpadAir.app.zip ../../../
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "$GITHUB_REF_NAME" \
+            TrackpadAir.app.zip \
+            --generate-notes \
+            --verify-tag
 
-    - name: Create Release
-      id: create_release
-      uses: actions/create-release@v1
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        tag_name: ${{ github.ref }}
-        release_name: v${{ github.ref }}
-        draft: false
-        prerelease: false
-        
-    - name: Upload Release Asset
-      uses: actions/upload-release-asset@v1
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        upload_url: ${{ steps.create_release.outputs.upload_url }}
-        asset_path: ./TrackpadAir.app.zip
-        asset_name: TrackpadAir.app.zip
-        asset_content_type: application/zip
+      - name: Clean up keychain
+        if: always()
+        run: security delete-keychain "$RUNNER_TEMP/build.keychain-db" || true

.github/workflows/test.yml

@@ -0,0 +1,29 @@
+name: Test
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: test-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: macos-26
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Run tests
+        run: |
+          xcodebuild test \
+            -project TrackpadAir.xcodeproj \
+            -scheme TrackpadAir \
+            -destination 'platform=macOS' \
+            CODE_SIGNING_ALLOWED=NO

TrackpadAir/Manager/VideoCapture.swift

@@ -19,18 +19,24 @@ class VideoCapture: NSObject {
 
     func setup() {
         captureSession.beginConfiguration()
-        let device = AVCaptureDevice.default(.builtInWideAngleCamera, for: .video, position: .back)
         guard
-            let deviceInput = try? AVCaptureDeviceInput(device: device!),
+            let device = AVCaptureDevice.default(.builtInWideAngleCamera, for: .video, position: .back),
+            let deviceInput = try? AVCaptureDeviceInput(device: device),
             captureSession.canAddInput(deviceInput)
-            else { return }
+        else {
+            captureSession.commitConfiguration()
+            return
+        }
         captureSession.addInput(deviceInput)
 
         let videoDataOutput = AVCaptureVideoDataOutput()
         videoDataOutput.setSampleBufferDelegate(self, queue: DispatchQueue(label: "mydispatchqueue"))
         videoDataOutput.alwaysDiscardsLateVideoFrames = true
 
-        guard captureSession.canAddOutput(videoDataOutput) else { return }
+        guard captureSession.canAddOutput(videoDataOutput) else {
+            captureSession.commitConfiguration()
+            return
+        }
         captureSession.addOutput(videoDataOutput)
         captureSession.commitConfiguration()
     }
@@ -56,4 +62,3 @@ extension VideoCapture: AVCaptureVideoDataOutputSampleBufferDelegate {
         }
     }
 }
-