Enhance GitHub Actions workflow by adding steps for importing and verifying Apple Developer certificates, and implementing a new deployment process for GitHub Pages. Updated dependency installation to use dynamic versioning for distribution URL.

Author: Sjj1024

.github/workflows/build.yml

@@ -144,12 +144,116 @@ jobs:
             - name: Install Dependencies
               if: ${{ matrix.enabled }}
               run: |
-                  curl -L -f -o dist.zip "${{ secrets.VITE_DIST_URL }}2.8.8.zip"
+                  curl -L -f -o dist.zip "${{ secrets.VITE_DIST_URL }}${{ env.VERSION }}.zip"
                   unzip -o dist.zip -d dist
 
-            - name: Build the app
+            - name: import Apple Developer Certificate
+              if: ${{ matrix.enabled && matrix.platform == 'macos-latest'}}
+              env:
+                  APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+                  APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+                  KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
               run: |
-                  VERSION=$(node -p "require('./package.json').version")
-                  echo "VERSION=$VERSION" >> $GITHUB_ENV
-                  echo "Current version: $VERSION"
-              shell: bash
+                  echo $APPLE_CERTIFICATE | base64 --decode > certificate.p12
+                  security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
+                  security default-keychain -s build.keychain
+                  security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
+                  security set-keychain-settings -t 3600 -u build.keychain
+                  security import certificate.p12 -k build.keychain -P "$APPLE_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
+                  security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
+                  security find-identity -v -p codesigning build.keychain
+
+            - name: verify certificate
+              if: ${{ matrix.enabled && matrix.platform == 'macos-latest'}}
+              run: |
+                  CERT_INFO=$(security find-identity -v -p codesigning build.keychain | grep "Developer ID Application")
+                  CERT_ID=$(echo "$CERT_INFO" | awk -F'"' '{print $2}')
+                  echo "CERT_ID=$CERT_ID" >> $GITHUB_ENV
+                  echo "Certificate imported."
+
+            - uses: tauri-apps/tauri-action@v0
+              if: ${{ matrix.enabled }}
+              env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  APPLE_ID: ${{ secrets.APPLE_ID }}
+                  APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+                  APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+                  APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+                  APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+                  APPLE_SIGNING_IDENTITY: ${{ env.CERT_ID }}
+                  TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}
+                  TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}
+                  VITE_GITHUB_DOMAIN: ${{ secrets.VITE_GITHUB_DOMAIN }}
+                  VITE_PAYJS_DOMAIN: ${{ secrets.VITE_PAYJS_DOMAIN }}
+                  VITE_PAYJS_MCHID: ${{ secrets.VITE_PAYJS_MCHID }}
+                  VITE_PAYJS_SIGN_KEY: ${{ secrets.VITE_PAYJS_SIGN_KEY }}
+                  VITE_YUNPAY_DOMAIN: ${{ secrets.VITE_YUNPAY_DOMAIN }}
+                  VITE_YUNPAY_MCHID: ${{ secrets.VITE_YUNPAY_MCHID }}
+                  VITE_YUNPAY_SIGN_KEY: ${{ secrets.VITE_YUNPAY_SIGN_KEY }}
+                  VITE_ZPAY_DOMAIN: ${{ secrets.VITE_ZPAY_DOMAIN }}
+                  VITE_ZPAY_MCHID: ${{ secrets.VITE_ZPAY_MCHID }}
+                  VITE_ZPAY_SIGN_KEY: ${{ secrets.VITE_ZPAY_SIGN_KEY }}
+                  VITE_GTAG_ID: ${{ secrets.VITE_GTAG_ID }}
+                  VITE_UPSTREAM_USER: ${{ secrets.VITE_UPSTREAM_USER }}
+                  VITE_WEB_BRANCH: ${{ secrets.VITE_WEB_BRANCH }}
+                  VITE_DEV_BRANCH: ${{ secrets.VITE_DEV_BRANCH }}
+                  VITE_MAIN_BRANCH: ${{ secrets.VITE_MAIN_BRANCH }}
+                  VITE_FILE_LIMIT_SIZE: ${{ secrets.VITE_FILE_LIMIT_SIZE }}
+                  VITE_FILE_LIMIT_NUMBER: ${{ secrets.VITE_FILE_LIMIT_NUMBER }}
+                  VITE_LOCAL_RHEXE: ${{ secrets.VITE_LOCAL_RHEXE }}
+              with:
+                  tagName: 'PakePlus-v__VERSION__'
+                  releaseName: 'PakePlus v__VERSION__'
+                  body_path: ./Note.md
+                  releaseDraft: true
+                  prerelease: false
+                  args: ${{ matrix.args }}
+
+    deploy-pages:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout
+              uses: actions/checkout@v4
+              with:
+                  fetch-depth: 0
+
+            - uses: pnpm/action-setup@v3
+              with:
+                  version: 9
+
+            - name: Setup Node
+              uses: actions/setup-node@v4
+              with:
+                  node-version: 20
+                  cache: pnpm
+
+            - name: Setup Pages
+              uses: actions/configure-pages@v4
+
+            - name: Install dependencies
+              run: pnpm install
+
+            - name: GitPress Config
+              run: node ./scripts/gitpress.cjs gitBase
+
+            - name: Build with VitePress
+              run: pnpm run docs:build
+
+            - name: Copy Static
+              run: node ./scripts/gitpress.cjs copyStatic
+
+            - name: Upload artifact
+              uses: actions/upload-pages-artifact@v3
+              with:
+                  path: docs/dist
+
+    deploy:
+        environment:
+            name: github-pages
+            url: ${{ steps.deployment.outputs.page_url }}
+        needs: deploy-pages
+        runs-on: ubuntu-latest
+        steps:
+            - name: Deploy to GitHub Pages
+              id: deployment
+              uses: actions/deploy-pages@v4