mirror of
https://github.com/anthonyoteri/dredge.git
synced 2026-06-05 15:26:53 -04:00
Anthony Oteri
52910538df
- Add ci.yml: test matrix (ubuntu/macos/windows), lint, conventional commits check (cocogitto), cargo-deny, MSRV, and semver jobs - Add release.yml: tag-triggered publish to crates.io + GitHub release - Remove stale rust.yml and rust-clippy.yml workflows - Add deny.toml for cargo-deny license/advisory/ban/source checks - Add cog.toml for cocogitto conventional commits and changelog generation - Add Justfile with test, check, fmt, commits, release, push-tag targets - Add CHANGELOG.md seed file - Add PULL_REQUEST_TEMPLATE.md with conventional commits checklist - Update dependabot.yml: weekly schedule with grouped patch/minor updates
150 lines
4.7 KiB
YAML
150 lines
4.7 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v[0-9]*.[0-9]*.[0-9]*"
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
RUSTFLAGS: "-D warnings"
|
|
|
|
jobs:
|
|
# ---------------------------------------------------------------------------
|
|
# Gate: all CI checks must pass before we publish anything.
|
|
# ---------------------------------------------------------------------------
|
|
ci:
|
|
name: CI checks
|
|
uses: ./.github/workflows/ci.yml
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Publish to crates.io and create a GitHub release.
|
|
# ---------------------------------------------------------------------------
|
|
publish:
|
|
name: Publish
|
|
runs-on: ubuntu-latest
|
|
needs: ci
|
|
permissions:
|
|
contents: write
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Install stable toolchain
|
|
uses: dtolnay/rust-toolchain@stable
|
|
|
|
- name: Cache dependencies
|
|
uses: Swatinem/rust-cache@v2
|
|
|
|
- name: Install cocogitto
|
|
uses: cocogitto/cocogitto-action@v3
|
|
with:
|
|
check: false
|
|
|
|
- name: Generate release notes for this tag
|
|
id: changelog
|
|
run: |
|
|
VERSION="${GITHUB_REF_NAME#v}"
|
|
# Write release notes outside the repo so cargo publish does not
|
|
# see an untracked file and refuse to run.
|
|
cog changelog --at "$GITHUB_REF_NAME" > /tmp/release_notes.md || \
|
|
echo "No structured changelog available for $GITHUB_REF_NAME." > /tmp/release_notes.md
|
|
echo "version=$VERSION" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Publish dredge-tool to crates.io
|
|
run: cargo publish
|
|
env:
|
|
CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
|
|
|
|
- name: Create GitHub release
|
|
run: |
|
|
gh release create "$GITHUB_REF_NAME" \
|
|
--title "$GITHUB_REF_NAME" \
|
|
--notes-file /tmp/release_notes.md
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Build release binaries and attach them to the GitHub release.
|
|
# Runs in parallel across platforms after the release is created.
|
|
# ---------------------------------------------------------------------------
|
|
build-binaries:
|
|
name: Build binary (${{ matrix.upload_name }})
|
|
needs: publish
|
|
runs-on: ${{ matrix.os }}
|
|
permissions:
|
|
contents: write
|
|
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- os: ubuntu-latest
|
|
artifact: dredge
|
|
upload_name: dredge-linux-x86_64.tar.gz
|
|
target: x86_64-unknown-linux-musl
|
|
artifact_dir: target/x86_64-unknown-linux-musl/release
|
|
|
|
- os: macos-latest
|
|
artifact: dredge
|
|
upload_name: dredge-macos-aarch64.tar.gz
|
|
target: ""
|
|
artifact_dir: target/release
|
|
|
|
- os: macos-latest
|
|
artifact: dredge
|
|
upload_name: dredge-macos-x86_64.tar.gz
|
|
target: x86_64-apple-darwin
|
|
artifact_dir: target/x86_64-apple-darwin/release
|
|
|
|
- os: windows-latest
|
|
artifact: dredge.exe
|
|
upload_name: dredge-windows-x86_64.exe
|
|
target: ""
|
|
artifact_dir: target/release
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Install stable toolchain
|
|
uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
targets: ${{ matrix.target }}
|
|
|
|
- name: Install musl tools (Linux only)
|
|
if: matrix.target == 'x86_64-unknown-linux-musl'
|
|
run: sudo apt-get install -y musl-tools
|
|
|
|
- name: Cache dependencies
|
|
uses: Swatinem/rust-cache@v2
|
|
|
|
- name: Build release binary
|
|
run: >
|
|
cargo build --release
|
|
${{ matrix.target != '' && format('--target {0}', matrix.target) || '' }}
|
|
|
|
- name: Strip binary (Unix only)
|
|
if: runner.os != 'Windows'
|
|
run: strip ${{ matrix.artifact_dir }}/${{ matrix.artifact }}
|
|
|
|
- name: Ad-hoc sign binary (macOS only)
|
|
if: runner.os == 'macOS'
|
|
run: codesign --sign - --force --preserve-metadata=entitlements,requirements,flags,runtime ${{ matrix.artifact_dir }}/${{ matrix.artifact }}
|
|
|
|
- name: Package binary (Unix)
|
|
if: runner.os != 'Windows'
|
|
shell: bash
|
|
run: tar -czf "${{ matrix.upload_name }}" -C "${{ matrix.artifact_dir }}" "${{ matrix.artifact }}"
|
|
|
|
- name: Copy binary (Windows)
|
|
if: runner.os == 'Windows'
|
|
shell: bash
|
|
run: cp "${{ matrix.artifact_dir }}/${{ matrix.artifact }}" "${{ matrix.upload_name }}"
|
|
|
|
- name: Upload to GitHub release
|
|
run: gh release upload "${{ github.ref_name }}" "${{ matrix.upload_name }}" --clobber
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|