initial commit
This commit is contained in:
@@ -0,0 +1,199 @@
|
||||
name: Release Artifacts
|
||||
|
||||
on:
|
||||
push:
|
||||
tags:
|
||||
- "*"
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
validate-tag:
|
||||
name: Validate release tag
|
||||
runs-on: ubuntu-latest
|
||||
outputs:
|
||||
tag: ${{ steps.meta.outputs.tag }}
|
||||
prerelease: ${{ steps.meta.outputs.prerelease }}
|
||||
steps:
|
||||
- name: Validate tag and determine prerelease flag
|
||||
id: meta
|
||||
shell: bash
|
||||
run: |
|
||||
set -eu
|
||||
tag="${{ gitea.ref_name }}"
|
||||
echo "tag=${tag}" >> "${GITHUB_OUTPUT}"
|
||||
|
||||
# Allowed tags:
|
||||
# - Stable: 1.2.3
|
||||
# - Prerelease: 1.2.3-alpha1 | 1.2.3-beta1 | 1.2.3-rc1
|
||||
if [[ "${tag}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||||
echo "prerelease=false" >> "${GITHUB_OUTPUT}"
|
||||
elif [[ "${tag}" =~ ^[0-9]+\.[0-9]+\.[0-9]+-(alpha|beta|rc)[0-9]+$ ]]; then
|
||||
echo "prerelease=true" >> "${GITHUB_OUTPUT}"
|
||||
else
|
||||
echo "Invalid tag format: ${tag}"
|
||||
echo "Expected one of:"
|
||||
echo " - 1.2.3"
|
||||
echo " - 1.2.3-alpha1"
|
||||
echo " - 1.2.3-beta1"
|
||||
echo " - 1.2.3-rc1"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
build-and-release-executables:
|
||||
name: Build and release executables
|
||||
needs: validate-tag
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Setup Go
|
||||
uses: actions/setup-go@v5
|
||||
with:
|
||||
go-version-file: go.mod
|
||||
cache: true
|
||||
|
||||
- name: Verify Go modules
|
||||
run: go mod verify
|
||||
|
||||
- name: Setup Node
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: "20"
|
||||
cache: npm
|
||||
cache-dependency-path: ui/package-lock.json
|
||||
|
||||
- name: Install UI deps
|
||||
run: npm --prefix ./ui ci
|
||||
|
||||
- name: Build UI assets
|
||||
run: npm --prefix ./ui run build
|
||||
|
||||
- name: Run tests
|
||||
run: make test
|
||||
|
||||
- name: Build release binaries
|
||||
shell: bash
|
||||
run: |
|
||||
set -eu
|
||||
tag="${{ needs.validate-tag.outputs.tag }}"
|
||||
commit="$(git rev-parse --short HEAD)"
|
||||
mkdir -p dist
|
||||
|
||||
for arch in amd64 arm64; do
|
||||
out="dist/helix-proxy-linux-${arch}"
|
||||
|
||||
CGO_ENABLED=0 GOOS=linux GOARCH="${arch}" \
|
||||
go build -trimpath \
|
||||
-ldflags "-s -w -X helix-proxy/internal/version.Version=${tag} -X helix-proxy/internal/version.Commit=${commit}" \
|
||||
-o "${out}" ./cmd/helix-proxy
|
||||
|
||||
file "${out}" | grep -q "statically linked"
|
||||
done
|
||||
|
||||
- name: Package release archives
|
||||
shell: bash
|
||||
run: |
|
||||
set -eu
|
||||
rm -rf release-packages
|
||||
mkdir -p release-packages
|
||||
|
||||
for bin in dist/helix-proxy-linux-*; do
|
||||
name="$(basename "${bin}")"
|
||||
archive="helix-proxy-${{ needs.validate-tag.outputs.tag }}-${name#helix-proxy-}.tar.gz"
|
||||
stage="release-packages/${name}"
|
||||
|
||||
rm -rf "${stage}"
|
||||
mkdir -p "${stage}"
|
||||
cp README.md "${stage}/"
|
||||
cp "${bin}" "${stage}/helix-proxy"
|
||||
tar -C "${stage}" -czf "${archive}" .
|
||||
done
|
||||
|
||||
- name: Generate release notes
|
||||
shell: bash
|
||||
run: |
|
||||
set -eu
|
||||
current_tag="${{ needs.validate-tag.outputs.tag }}"
|
||||
prev_tag="$(git tag --sort=-creatordate | awk -v cur="${current_tag}" '$0 != cur { print; exit }')"
|
||||
|
||||
{
|
||||
echo "## Release ${current_tag}"
|
||||
echo
|
||||
if [ -n "${prev_tag}" ]; then
|
||||
echo "Changes since \`${prev_tag}\`:"
|
||||
echo
|
||||
git log --pretty='- %h %s' "${prev_tag}..${current_tag}"
|
||||
else
|
||||
echo "Changes in this release:"
|
||||
echo
|
||||
git log --pretty='- %h %s' "${current_tag}"
|
||||
fi
|
||||
} > RELEASE_NOTES.md
|
||||
|
||||
- name: Create release and upload archives
|
||||
uses: https://gitea.com/actions/gitea-release-action@v1
|
||||
with:
|
||||
tag_name: ${{ needs.validate-tag.outputs.tag }}
|
||||
name: ${{ needs.validate-tag.outputs.tag }}
|
||||
prerelease: ${{ needs.validate-tag.outputs.prerelease }}
|
||||
body_path: RELEASE_NOTES.md
|
||||
files: |-
|
||||
helix-proxy-${{ needs.validate-tag.outputs.tag }}-linux-*.tar.gz
|
||||
|
||||
build-and-release-docker-image:
|
||||
name: Build and release Docker image
|
||||
needs: [validate-tag, build-and-release-executables]
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
code: read
|
||||
packages: write
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Resolve registry and image names
|
||||
id: image
|
||||
shell: bash
|
||||
run: |
|
||||
set -eu
|
||||
host="${{ gitea.server_url }}"
|
||||
host="${host#http://}"
|
||||
host="${host#https://}"
|
||||
host="${host%%/*}"
|
||||
repo="$(printf '%s' "${{ gitea.repository }}" | tr '[:upper:]' '[:lower:]')"
|
||||
image="${host}/${repo}"
|
||||
echo "registry_host=${host}" >> "${GITHUB_OUTPUT}"
|
||||
echo "repository_lower=${repo}" >> "${GITHUB_OUTPUT}"
|
||||
echo "image=${image}" >> "${GITHUB_OUTPUT}"
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
|
||||
- name: Login to registry
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ secrets.GIT_REGISTRY || steps.image.outputs.registry_host }}
|
||||
username: ${{ secrets.GIT_USER || gitea.actor }}
|
||||
password: ${{ secrets.GIT_PACKAGES_TOKEN || secrets.GITEA_TOKEN }}
|
||||
|
||||
- name: Extract Docker metadata
|
||||
id: meta
|
||||
uses: docker/metadata-action@v5
|
||||
with:
|
||||
images: ${{ secrets.GIT_REGISTRY || steps.image.outputs.registry_host }}/${{ steps.image.outputs.repository_lower }}
|
||||
tags: |
|
||||
type=raw,value=${{ needs.validate-tag.outputs.tag }}
|
||||
type=raw,value=latest,enable=${{ needs.validate-tag.outputs.prerelease == 'false' }}
|
||||
|
||||
- name: Build and push Docker image
|
||||
uses: docker/build-push-action@v5
|
||||
with:
|
||||
context: .
|
||||
push: true
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
cache-from: type=gha
|
||||
cache-to: type=gha,mode=max
|
||||
Reference in New Issue
Block a user