obakesan/.github/workflows/release.yaml at dev · nandenjin/obakesan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
name: release

on:
  push:
    branches:
      - dev

permissions:
  contents: write
  issues: write
  pull-requests: write

jobs:
  release-please:
    runs-on: ubuntu-latest
    outputs:
      release_created: ${{ steps.release.outputs.release_created }}
      tag_name: ${{ steps.release.outputs.tag_name }}
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          release-type: node

  build-release:
    name: build-release
    needs: release-please
    if: ${{ needs.release-please.outputs.release_created }}
    permissions:
      contents: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: macos-latest
            script: build:mac
          - os: windows-latest
            script: build:win
          - os: ubuntu-latest
            script: build:linux
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version-file: .nvmrc
          cache: "npm"

      - name: Install dependencies
        run: npm ci

      - name: Decode and setup certificate for mac
        if: ${{ matrix.os == 'macos-latest' }}
        env:
          CSC_LINK: ${{ secrets.CSC_LINK }}
          APPLE_API_KEY: ${{ secrets.APPLE_APP_STORE_CONNECT_API_KEY }}
        run: |
          WORKSPACE_DIR=$(pwd)
          echo "$CSC_LINK" | base64 --decode > $WORKSPACE_DIR/certificate.p12
          echo "CSC_LINK=$WORKSPACE_DIR/certificate.p12" >> $GITHUB_ENV
          echo "$APPLE_API_KEY" | base64 --decode > $WORKSPACE_DIR/AuthKey.p8
          echo "APPLE_API_KEY=$WORKSPACE_DIR/AuthKey.p8" >> $GITHUB_ENV

      - name: Build and Package
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          ENABLE_APPLE_NOTARIZATION: ${{ matrix.os == 'macos-latest' }}
          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
          APPLE_API_KEY: ${{ env.APPLE_API_KEY }}
          APPLE_API_KEY_ID: ${{ secrets.APPLE_APP_STORE_CONNECT_API_KEY_ID }}
          APPLE_API_ISSUER: ${{ secrets.APPLE_APP_STORE_CONNECT_ISSUER_ID }}
        run: npm run ${{ matrix.script }}

      - name: Upload Release Assets
        uses: softprops/action-gh-release@v2
        if: success()
        with:
          tag_name: ${{ needs.release-please.outputs.tag_name }}
          files: |
            dist/*.dmg
            dist/*.pkg
            dist/*.zip
            dist/*.exe
            dist/*.AppImage
            dist/*.snap
            dist/*.deb
            dist/*.rpm
            dist/latest.yml
            dist/latest-*.yml
          # latest.yml is for auto update: https://www.electron.build/auto-update.html
          # - latest.yml for Windows
          # - latest-*.yml for macOS and Linux
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}