release.yml

name: New Release
permissions:
  contents: write
on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version number'
        required: true
jobs:
  release:
    runs-on: macos-latest
    env:
      VERSION: ${{ github.event.inputs.version }}
      TAG: v${{ github.event.inputs.version }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build Binary Tarball
        run: |
          swift build -c release --disable-sandbox
          mv .build/release/netcaps netcaps
          tar -czf netcaps-${{ env.VERSION }}-macos-arm64.tar.gz netcaps

      - name: Create Git Tag
        run: |
          echo "VERSION=$VERSION" >> $GITHUB_ENV
          echo "TAG=v$VERSION" >> $GITHUB_ENV
          if [ -f changelog.md ]; then
            CHANGELOG=$(cat changelog.md)
          else
            CHANGELOG="No release notes provided."
          fi
          echo "CHANGELOG<<EOF" >> $GITHUB_ENV
          echo "$CHANGELOG" >> $GITHUB_ENV
          echo "EOF" >> $GITHUB_ENV
          
          git config user.name "netcaps-bot"
          git config user.email "bot@users.noreply.github.com"
          git tag -a "v$VERSION" -m "Version $VERSION"
          git push origin "v$VERSION"

      - name: Push Release
        uses: softprops/action-gh-release@v1
        with:
          tag_name: ${{ env.TAG }}
          name: "Version ${{ env.VERSION }}"
          body: ${{ env.CHANGELOG }}
          files: |
            netcaps-${{ env.VERSION }}-macos-arm64.tar.gz
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Get Source Tarball sha256
        run: |
          SRC_URL="https://github.com/forcequitOS/netcaps/archive/refs/tags/${{ env.TAG }}.tar.gz"
          OUT="netcaps-${{ env.VERSION }}-src.tar.gz"
          for i in {1..10}; do
            if curl -sSLf -o "$OUT" "$SRC_URL"; then
              break
            fi
            echo "Source tarball not yet available (attempt $i); retrying..."
            sleep 3
          done
          if [ ! -s "$OUT" ]; then
            echo "Failed to download source tarball from $SRC_URL"
            exit 1
          fi
          SHA256=$(shasum -a 256 "$OUT" | cut -d ' ' -f 1)
          echo "SHA256=$SHA256" >> $GITHUB_ENV

      - name: Update Homebrew Tap
        run: |
          git clone https://x-access-token:${{ secrets.PAT_TOKEN }}@github.com/forcequitOS/homebrew-brew tap
          cd tap
          sed -i.bak \
            -e "s|url \".*\"|url \"https://github.com/forcequitOS/netcaps/archive/refs/tags/${{ env.TAG }}.tar.gz\"|" \
            -e "s|sha256 \".*\"|sha256 \"${{ env.SHA256 }}\"|" \
            -e "s|version \".*\"|version \"${{ env.VERSION }}\"|" \
            netcaps.rb
          git config user.name "netcaps-bot"
          git config user.email "bot@users.noreply.github.com"
          git add netcaps.rb
          git commit -m "netcaps ${{ env.VERSION }}"
          git push origin main
        env:
          PAT_TOKEN: ${{ secrets.PAT_TOKEN }}