lerko
6dfd56dcd4
Relay is on hold until after the rc dress rehearsal — without the secret the step exits cleanly instead of failing the release run. Adding the secret later enables it with no workflow change.
90 lines
2.8 KiB
YAML
90 lines
2.8 KiB
YAML
name: Release Binaries
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v[0-9]*"
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
shell: sh
|
|
steps:
|
|
- name: Install build tools
|
|
run: apk add --no-cache git
|
|
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "1.26"
|
|
|
|
- uses: actions/cache@v4
|
|
with:
|
|
path: |
|
|
~/go/pkg/mod
|
|
~/.cache/go-build
|
|
key: release-go-${{ hashFiles('go.sum') }}
|
|
restore-keys: release-go-
|
|
|
|
- name: Install git-cliff
|
|
run: |
|
|
apk add --no-cache curl
|
|
VERSION=2.13.1
|
|
curl -sSL "https://github.com/orhun/git-cliff/releases/download/v${VERSION}/git-cliff-${VERSION}-x86_64-unknown-linux-musl.tar.gz" | tar xz -C /tmp
|
|
mv /tmp/git-cliff-*/git-cliff /usr/local/bin/
|
|
git-cliff --version
|
|
|
|
- name: Generate release notes
|
|
run: git-cliff --current --strip header -o /tmp/release-notes.md
|
|
|
|
- name: Run GoReleaser
|
|
uses: goreleaser/goreleaser-action@v7
|
|
with:
|
|
distribution: goreleaser
|
|
version: "~> v2"
|
|
args: release --clean --release-notes=/tmp/release-notes.md
|
|
env:
|
|
GORELEASER_FORCE_TOKEN: gitea
|
|
GITEA_TOKEN: ${{ secrets.RELEASE_TOKEN }}
|
|
GITEA_API_URL: http://gitea:3000/api/v1
|
|
|
|
# GoReleaser publishes to exactly one SCM (Gitea). The push mirror
|
|
# carries git refs but not release artifacts, so relay the release to
|
|
# the GitHub mirror — README install links point there.
|
|
- name: Mirror release to GitHub
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GH_MIRROR_TOKEN }}
|
|
run: |
|
|
if [ -z "$GH_TOKEN" ]; then
|
|
echo "GH_MIRROR_TOKEN not set — skipping GitHub release relay"
|
|
exit 0
|
|
fi
|
|
apk add --no-cache github-cli
|
|
TAG="${{ github.ref_name }}"
|
|
|
|
# Nudge the push mirror, then wait for the tag to land on GitHub.
|
|
curl -sf -X POST \
|
|
-H "Authorization: token ${{ secrets.RELEASE_TOKEN }}" \
|
|
"http://gitea:3000/api/v1/repos/lerkolabs/uptop/push_mirrors-sync" || true
|
|
for i in $(seq 1 30); do
|
|
if gh api "repos/lerkolabs/uptop/git/ref/tags/${TAG}" >/dev/null 2>&1; then
|
|
break
|
|
fi
|
|
sleep 10
|
|
done
|
|
|
|
PRERELEASE=""
|
|
case "$TAG" in *-*) PRERELEASE="--prerelease";; esac
|
|
gh release create "$TAG" \
|
|
--repo lerkolabs/uptop \
|
|
--verify-tag \
|
|
--title "$TAG" \
|
|
--notes-file /tmp/release-notes.md \
|
|
$PRERELEASE \
|
|
dist/*.tar.gz dist/*.zip dist/*.deb dist/*.rpm dist/checksums.txt
|