release.yml

name: signed-release
on:
  workflow_dispatch:
  push:
    tags: ['v*']

permissions:
  contents: write

jobs:
  windows:
    runs-on: windows-latest
    env:
      TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
      TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
      OPENCODEGOBOARD_UPDATER_PUBKEY: ${{ vars.UPDATER_PUBLIC_KEY }}
      OPENCODEGOBOARD_UPDATER_ENDPOINT: https://github.com/${{ github.repository }}/releases/latest/download/latest.json
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        with: { version: 10 }
      - uses: actions/setup-node@v4
        with: { node-version: 22, cache: pnpm }
      - uses: dtolnay/rust-toolchain@stable
      - uses: swatinem/rust-cache@v2
        with: { workspaces: src-tauri }
      - run: pnpm install --frozen-lockfile
      - run: pnpm test
      - run: cargo test --manifest-path src-tauri/Cargo.toml
      - uses: tauri-apps/tauri-action@v0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tagName: v__VERSION__
          releaseName: OpenCodeGoBoard v__VERSION__
          releaseDraft: true
          prerelease: false
          args: --config src-tauri/tauri.release.conf.json
      - run: pnpm release:checksums
      - run: pnpm release:verify
      - uses: actions/upload-artifact@v4
        with:
          name: windows-release-checksums
          path: src-tauri/target/release/bundle/SHA256SUMS