chore(cI): upload binaries to release

This commit is contained in:
Leafd 2025-10-04 14:00:36 -04:00
parent 20a6436db4
commit 224ba58a70
No known key found for this signature in database
GPG key ID: D44AE7A3699406BE

View file

@ -16,6 +16,9 @@ jobs:
runs-on: ubuntu-latest
outputs:
manifest: '${{ toJSON(steps.rp.outputs) }}'
release_created: '${{ steps.rp.outputs.releases_created }}'
tag_name: '${{ steps.rp.outputs.tag_name }}'
upload_url: '${{ steps.rp.outputs.upload_url }}'
steps:
- name: Generate App Token
uses: tibdex/github-app-token@v2
@ -147,22 +150,6 @@ jobs:
GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
TAURI_SIGNING_PRIVATE_KEY: '${{ secrets.TAURI_PRIVATE_KEY }}'
TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '${{ secrets.TAURI_KEY_PASSWORD }}'
# - name: Sign files with Trusted Signing
# if: 'startsWith(matrix.platform, ''windows'')'
# uses: azure/trusted-signing-action@v0.5.1
# with:
# azure-tenant-id: '${{ secrets.AZURE_TENANT_ID }}'
# azure-client-id: '${{ secrets.AZURE_CLIENT_ID }}'
# azure-client-secret: '${{ secrets.AZURE_CLIENT_SECRET }}'
# endpoint: 'https://weu.codesigning.azure.net/'
# trusted-signing-account-name: hackatime
# certificate-profile-name: Hackatime
# files-folder: '${{ github.workspace }}\target\release\bundle'
# files-folder-filter: 'msi,exe'
# files-folder-recurse: true
# file-digest: SHA256
# timestamp-rfc3161: 'http://timestamp.acs.microsoft.com'
# timestamp-digest: SHA256
- name: Attest macOS binaries
if: 'startsWith(matrix.platform, ''macos'')'
uses: actions/attest-build-provenance@v3
@ -215,6 +202,63 @@ jobs:
src-tauri/target/release/bundle/nsis/*.exe
src-tauri/target/release/bundle/nsis/*.nsis.zip
src-tauri/target/release/bundle/nsis/*.nsis.zip.sig
upload-github-release:
needs:
- build
- release-please
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- uses: actions/checkout@v4
with:
lfs: true
- name: Get version from manifest
id: get_version
run: |
version=$(jq -r '."."' .release-please-manifest.json)
echo "version=$version" >> $GITHUB_OUTPUT
- name: Download all artifacts
uses: actions/download-artifact@v4
with:
path: artifacts
- name: Print directory structure
run: ls -R artifacts
- name: Upload macOS binaries to release
uses: softprops/action-gh-release@v1
with:
tag_name: v${{ steps.get_version.outputs.version }}
files: |
artifacts/macos-latest/universal-apple-darwin/release/bundle/dmg/*.dmg
artifacts/macos-latest/universal-apple-darwin/release/bundle/macos/*.app.tar.gz
artifacts/macos-latest/universal-apple-darwin/release/bundle/macos/*.app.tar.gz.sig
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Upload Linux binaries to release
uses: softprops/action-gh-release@v1
with:
tag_name: v${{ steps.get_version.outputs.version }}
files: |
artifacts/ubuntu-22.04/release/bundle/appimage/*.AppImage
artifacts/ubuntu-22.04/release/bundle/appimage/*.AppImage.tar.gz
artifacts/ubuntu-22.04/release/bundle/appimage/*.AppImage.tar.gz.sig
artifacts/ubuntu-22.04/release/bundle/deb/*.deb
artifacts/ubuntu-22.04/release/bundle/rpm/*.rpm
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Upload Windows binaries to release
uses: softprops/action-gh-release@v1
with:
tag_name: v${{ steps.get_version.outputs.version }}
files: |
artifacts/windows-latest/release/bundle/nsis/*.exe
artifacts/windows-latest/release/bundle/nsis/*.nsis.zip
artifacts/windows-latest/release/bundle/nsis/*.nsis.zip.sig
artifacts/windows-latest/release/bundle/msi/*.msi
artifacts/windows-latest/release/bundle/msi/*.msi.zip
artifacts/windows-latest/release/bundle/msi/*.msi.zip.sig
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
upload-s3:
needs: build
runs-on: ubuntu-latest