haskal
/
starship
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ci: update deployment actions to depend on release-please

This commit is contained in:
Matan Kushner 2022-04-15 18:12:44 -03:00
parent 23be606516
commit 9804031d9b
No known key found for this signature in database
GPG Key ID: BFF10DF8EAA776DD
1 changed files with 63 additions and 63 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

126
.github/workflows/deploy.yml vendored
View File

@ -29,7 +29,7 @@ jobs:
github_build: github_build:
name: Build release binaries name: Build release binaries
needs: release_please needs: release_please
if: ${{ needs.release_please.outputs.release_created }} if: ${{ needs.release_please.outputs.release_created == 'true' }}
strategy: strategy:
fail-fast: false fail-fast: false
matrix: matrix:
@ -144,77 +144,77 @@ jobs:
KEYCHAIN_FILENAME: app-signing.keychain-db KEYCHAIN_FILENAME: app-signing.keychain-db
KEYCHAIN_ENTRY: AC_PASSWORD KEYCHAIN_ENTRY: AC_PASSWORD
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v3 uses: actions/checkout@v3
- name: Notarize | Set up secrets - name: Notarize | Set up secrets
env: env:
APP_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_APPSIGNKEY_BASE64 }} APP_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_APPSIGNKEY_BASE64 }}
INSTALL_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_INSTALLERSIGNKEY_BASE64 }} INSTALL_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_INSTALLERSIGNKEY_BASE64 }}
P12_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }} P12_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }}
KEYCHAIN_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }} KEYCHAIN_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }}
APPLEID_USERNAME: ${{ secrets.APPLEDEV_ID_NAME }} APPLEID_USERNAME: ${{ secrets.APPLEDEV_ID_NAME }}
APPLEID_TEAMID: ${{ secrets.APPLEDEV_TEAM_ID }} APPLEID_TEAMID: ${{ secrets.APPLEDEV_TEAM_ID }}
APPLEID_PASSWORD: ${{ secrets.APPLEDEV_PASSWORD }} APPLEID_PASSWORD: ${{ secrets.APPLEDEV_PASSWORD }}
run: | run: |
APP_CERTIFICATE_PATH="$RUNNER_TEMP/app_certificate.p12" APP_CERTIFICATE_PATH="$RUNNER_TEMP/app_certificate.p12"
INSTALL_CERTIFICATE_PATH="$RUNNER_TEMP/install_certificate.p12" INSTALL_CERTIFICATE_PATH="$RUNNER_TEMP/install_certificate.p12"
KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME" KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME"
# import certificates from secrets # import certificates from secrets
echo -n "$APP_CERTIFICATE_BASE64" | base64 --decode --output $APP_CERTIFICATE_PATH echo -n "$APP_CERTIFICATE_BASE64" | base64 --decode --output $APP_CERTIFICATE_PATH
echo -n "$INSTALL_CERTIFICATE_BASE64" | base64 --decode --output $INSTALL_CERTIFICATE_PATH echo -n "$INSTALL_CERTIFICATE_BASE64" | base64 --decode --output $INSTALL_CERTIFICATE_PATH
# create temporary keychain # create temporary keychain
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH" security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH" security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
# import certificates to keychain # import certificates to keychain
security import $APP_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH security import $APP_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
security import $INSTALL_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH security import $INSTALL_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
security list-keychain -d user -s $KEYCHAIN_PATH security list-keychain -d user -s $KEYCHAIN_PATH
# Add Apple Developer ID credentials to keychain # Add Apple Developer ID credentials to keychain
xcrun notarytool store-credentials "$KEYCHAIN_ENTRY" --team-id "$APPLEID_TEAMID" --apple-id "$APPLEID_USERNAME" --password "$APPLEID_PASSWORD" --keychain "$KEYCHAIN_PATH" xcrun notarytool store-credentials "$KEYCHAIN_ENTRY" --team-id "$APPLEID_TEAMID" --apple-id "$APPLEID_USERNAME" --password "$APPLEID_PASSWORD" --keychain "$KEYCHAIN_PATH"
- name: Notarize | Build docs - name: Notarize | Build docs
run: | run: |
cd docs cd docs
npm install npm install
npm run build npm run build
- name: Notarize | Download artifacts - name: Notarize | Download artifacts
uses: actions/download-artifact@v3 uses: actions/download-artifact@v3
with: with:
name: ${{ matrix.name }} name: ${{ matrix.name }}
path: artifacts path: artifacts
- name: Notarize | Unpack Binaries - name: Notarize | Unpack Binaries
run: tar xf artifacts/${{ matrix.name }} run: tar xf artifacts/${{ matrix.name }}
- name: Notarize | Build, Sign, and Notarize Pkg - name: Notarize | Build, Sign, and Notarize Pkg
run: bash install/macos_packages/build_and_notarize.sh starship docs ${{ matrix.arch }} ${{ matrix.pkgname }} run: bash install/macos_packages/build_and_notarize.sh starship docs ${{ matrix.arch }} ${{ matrix.pkgname }}
- name: Notarize | Upload Notarized Flat Installer - name: Notarize | Upload Notarized Flat Installer
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v3
with: with:
name: ${{ matrix.pkgname }} name: ${{ matrix.pkgname }}
path: ${{ matrix.pkgname }} path: ${{ matrix.pkgname }}
- name: Notarize | Package Notarized Binary - name: Notarize | Package Notarized Binary
run: tar czvf ${{ matrix.name }} starship run: tar czvf ${{ matrix.name }} starship
- name: Notarize | Upload Notarized Binary - name: Notarize | Upload Notarized Binary
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v3
with: with:
name: ${{ matrix.name }} name: ${{ matrix.name }}
path: ${{ matrix.name }} path: ${{ matrix.name }}
- name: Cleanup Secrets - name: Cleanup Secrets
if: ${{ always() }} if: ${{ always() }}
run: | run: |
KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME" KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME"
security delete-keychain $KEYCHAIN_PATH security delete-keychain $KEYCHAIN_PATH
# Create GitHub release with Rust build targets and release notes # Create GitHub release with Rust build targets and release notes
upload_artifacts: upload_artifacts:
@ -244,7 +244,7 @@ jobs:
name: Publish Cargo Package name: Publish Cargo Package
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: release_please needs: release_please
if: ${{ needs.release_please.outputs.release_created }} if: ${{ needs.release_please.outputs.release_created == 'true' }}
steps: steps:
- name: Setup | Checkout - name: Setup | Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3
@ -263,7 +263,7 @@ jobs:
name: Update Brew Formula name: Update Brew Formula
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: release_please needs: release_please
if: ${{ needs.release_please.outputs.release_created }} if: ${{ needs.release_please.outputs.release_created == 'true' }}
steps: steps:
- uses: mislav/bump-homebrew-formula-action@v1.16 - uses: mislav/bump-homebrew-formula-action@v1.16
with: with:
@ -275,7 +275,7 @@ jobs:
name: Publish docs to Netlify name: Publish docs to Netlify
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: release_please needs: release_please
if: ${{ needs.release_please.outputs.release_created }} if: ${{ needs.release_please.outputs.release_created == 'true' }}
steps: steps:
- name: Setup | Checkout - name: Setup | Checkout
uses: actions/checkout@v3 uses: actions/checkout@v3