Show control features

.github/workflows/build.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Install non-Qt dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y libxkbcommon-dev liblo-dev libasound2-dev build-essential cmake
+          sudo apt-get install -y libxkbcommon-dev liblo-dev libasound2-dev build-essential cmake rpm file
 
       - name: Install Qt
         uses: jurplel/install-qt-action@v4
@@ -42,11 +42,17 @@ jobs:
         env:
           QT_QPA_PLATFORM: offscreen
 
-      - name: Upload artifact
+      - name: Package (deb/rpm/tarball)
+        run: cd build && cpack
+
+      - name: Upload installers
         uses: actions/upload-artifact@v4
         with:
           name: OpenMix-linux
-          path: build/OpenMix
+          path: |
+            build/*.deb
+            build/*.rpm
+            build/*.tar.gz
 
   build-windows:
     runs-on: windows-latest
@@ -71,6 +77,9 @@ jobs:
       - name: Install liblo via vcpkg
         run: vcpkg install liblo:x64-windows
 
+      - name: Install NSIS
+        run: choco install nsis -y
+
       - name: Set up MSVC
         uses: ilammy/msvc-dev-cmd@v1
         with:
@@ -94,17 +103,17 @@ jobs:
         env:
           QT_QPA_PLATFORM: offscreen
 
-      - name: Deploy Qt
+      - name: Package (NSIS installer)
         run: |
-          mkdir build\deploy
-          copy build\OpenMix.exe build\deploy\
-          C:\Qt\6.11.0\msvc2022_64\bin\windeployqt --release build\deploy\OpenMix.exe
+          $env:PATH = "C:\Qt\6.11.0\msvc2022_64\bin;C:\Program Files (x86)\NSIS;$env:PATH"
+          cd build
+          cpack -G NSIS
 
-      - name: Upload artifact
+      - name: Upload installer
         uses: actions/upload-artifact@v4
         with:
           name: OpenMix-windows
-          path: build/deploy/
+          path: build/*.exe
 
   build-macos:
     runs-on: macos-latest
@@ -134,19 +143,16 @@ jobs:
         env:
           QT_QPA_PLATFORM: offscreen
 
-      - name: Deploy, sign, & package
+      - name: Package (DMG)
         run: |
-          /opt/homebrew/opt/qt@6/bin/macdeployqt build/OpenMix.app
-          xattr -cr build/OpenMix.app
-          codesign --force --deep -s - build/OpenMix.app
-          cd build
-          ditto -c -k --sequesterRsrc --keepParent OpenMix.app OpenMix.zip
+          export PATH="/opt/homebrew/opt/qt@6/bin:$PATH"
+          cd build && cpack -G DragNDrop
 
-      - name: Upload artifact
+      - name: Upload installer
         uses: actions/upload-artifact@v4
         with:
           name: OpenMix-macos
-          path: build/OpenMix.zip
+          path: build/*.dmg
 
   release:
     if: startsWith(github.ref, 'refs/tags/v')
@@ -158,16 +164,85 @@ jobs:
       - name: Download artifacts
         uses: actions/download-artifact@v4
 
-      - name: Package
-        run: |
-          cd OpenMix-linux && tar czf ../OpenMix-linux.tar.gz OpenMix && cd ..
-          cd OpenMix-windows && zip -r ../OpenMix-windows.zip . && cd ..
-          mv OpenMix-macos/OpenMix.zip OpenMix-macos.zip
-
       - name: Create Release
         uses: softprops/action-gh-release@v1
         with:
           files: |
-            OpenMix-linux.tar.gz
-            OpenMix-windows.zip
-            OpenMix-macos.zip
+            OpenMix-linux/*
+            OpenMix-windows/*
+            OpenMix-macos/*
+
+  # generate the Sparkle/WinSparkle appcasts that the app polls, and publish
+  # them to GitHub Pages. Requires a Sparkle EdDSA private key in the
+  # OPENMIX_SPARKLE_ED_PRIVATE_KEY secret (see docs/AUTOUPDATE.md).
+  appcast:
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs: [release]
+    runs-on: macos-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Sparkle tools
+        run: brew install --cask sparkle || brew install sparkle
+
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+
+      - name: Build appcasts
+        env:
+          SPARKLE_KEY: ${{ secrets.OPENMIX_SPARKLE_ED_PRIVATE_KEY }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          VERSION="${TAG#v}"
+          BASE="https://github.com/johnqherman/OpenMix/releases/download/${TAG}"
+          mkdir -p site
+
+          # macOS: sign the DMG with Sparkle's EdDSA key and emit a full appcast
+          SIGN=$(find /opt/homebrew /usr/local -name sign_update -type f 2>/dev/null | head -1)
+          DMG=$(ls OpenMix-macos/*.dmg | head -1)
+          if [ -n "$SPARKLE_KEY" ] && [ -n "$SIGN" ] && [ -n "$DMG" ]; then
+            echo "$SPARKLE_KEY" > /tmp/ed_key
+            SIG=$("$SIGN" -f /tmp/ed_key "$DMG")   # prints sparkle:edSignature=... length=...
+            LEN=$(stat -f%z "$DMG")
+            cat > site/appcast-macos.xml <<EOF
+          <?xml version="1.0"?>
+          <rss xmlns:sparkle="http://www.andymatuschak.org/xml-namespaces/sparkle" version="2.0">
+            <channel>
+              <item>
+                <title>OpenMix ${VERSION}</title>
+                <sparkle:version>${VERSION}</sparkle:version>
+                <sparkle:shortVersionString>${VERSION}</sparkle:shortVersionString>
+                <enclosure url="${BASE}/$(basename "$DMG")" ${SIG} sparkle:version="${VERSION}" length="${LEN}" type="application/octet-stream"/>
+              </item>
+            </channel>
+          </rss>
+          EOF
+          else
+            echo "::warning::No Sparkle key/tool/DMG; skipping macOS appcast (updates will not verify)"
+          fi
+
+          # Windows: WinSparkle RSS appcast
+          EXE=$(ls OpenMix-windows/*.exe | head -1)
+          if [ -n "$EXE" ]; then
+            cat > site/appcast-windows.xml <<EOF
+          <?xml version="1.0"?>
+          <rss xmlns:sparkle="http://www.andymatuschak.org/xml-namespaces/sparkle" version="2.0">
+            <channel>
+              <item>
+                <title>OpenMix ${VERSION}</title>
+                <sparkle:version>${VERSION}</sparkle:version>
+                <enclosure url="${BASE}/$(basename "$EXE")" sparkle:version="${VERSION}" type="application/octet-stream"/>
+              </item>
+            </channel>
+          </rss>
+          EOF
+          fi
+
+      - name: Publish to GitHub Pages
+        uses: peaceiris/actions-gh-pages@v4
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          publish_dir: ./site
+          keep_files: true