corin/.github/workflows/release.yml at develop · codecoradev/corin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
name: Release

# Release is triggered by pushing a vX.Y.Z tag.
#
# PREREQUISITE: Before tagging, merge develop → main via PR.
# The tag must point to a commit on main, NOT develop.
# GitFlow: develop (default) → PR → main → tag → release.

on:
  push:
    tags:
      - "v*"

env:
  CARGO_TERM_COLOR: always
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

permissions:
  contents: write

jobs:
  # ── Verify tag is on main ──
  verify-main:
    name: Verify tag is on main
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Check tag is on main
        run: |
          git fetch origin main
          TAG_SHA=$(git rev-parse "${{ github.ref }}^{commit}")
          MAIN_SHA=$(git rev-parse origin/main)
          echo "Tag: $TAG_SHA"
          echo "main: $MAIN_SHA"
          if [ "$TAG_SHA" = "$MAIN_SHA" ]; then
            echo "✅ Tag is main HEAD"
          elif git merge-base --is-ancestor "$TAG_SHA" origin/main 2>/dev/null; then
            echo "✅ Tag commit $TAG_SHA is in main history"
          else
            echo "::error::Tag commit $TAG_SHA is NOT on main."
            echo "Merge develop → main via PR before tagging."
            exit 1
          fi

  # ── Publish tauri-action ──
  publish-tauri:
    name: Build ${{ matrix.settings.platform }}
    needs: [verify-main]
    permissions:
      contents: write
    strategy:
      fail-fast: false
      matrix:
        include:
          - settings:
              platform: macos-latest
              args: "--target aarch64-apple-darwin"
          - settings:
              platform: macos-latest
              args: "--target x86_64-apple-darwin"
          - settings:
              platform: ubuntu-24.04
              args: ""
          - settings:
              platform: windows-latest
              args: ""

    runs-on: ${{ matrix.settings.platform }}
    steps:
      - uses: actions/checkout@v7

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: 22
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.settings.platform == 'macos-latest' && 'aarch64-apple-darwin,x86_64-apple-darwin' || '' }}

      - name: Rust cache
        uses: Swatinem/rust-cache@v2
        with:
          workspaces: src-tauri

      - name: Install Linux dependencies
        if: matrix.settings.platform == 'ubuntu-24.04'
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libglib2.0-dev libgtk-3-dev libsoup-3.0-dev libjavascriptcoregtk-4.1-dev

      # tauri signer generate -w ~/.tauri/corin.key
      # Secrets needed: TAURI_SIGNING_PRIVATE_KEY, TAURI_SIGNING_PRIVATE_KEY_PASSWORD
      - name: Build and release
        uses: tauri-apps/tauri-action@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        with:
          tagName: ${{ github.ref_name }}
          releaseName: "CorIn ${{ github.ref_name }}"
          releaseBody: |
            See the assets below to download this version.
          releaseDraft: false
          prerelease: ${{ contains(github.ref_name, '-') }}
          updaterJsonPreferNsis: true
          updaterKeepSingleGroup: true
          args: ${{ matrix.settings.args }}