chore(main): release apps 1.12.4 (#22) #34
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| 'on': | |
| workflow_dispatch: null | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - apps/** | |
| - packages/** | |
| concurrency: | |
| group: '${{ github.workflow }}' | |
| cancel-in-progress: false | |
| permissions: | |
| contents: read | |
| pages: write | |
| id-token: write | |
| jobs: | |
| release-please: | |
| runs-on: blacksmith-2vcpu-ubuntu-2204 | |
| outputs: | |
| manifest: '${{ toJSON(steps.rp.outputs) }}' | |
| steps: | |
| - name: Generate App Token | |
| uses: tibdex/github-app-token@v2 | |
| id: generate-token | |
| with: | |
| app_id: '${{ secrets.APP_ID }}' | |
| private_key: '${{ secrets.APP_PRIVATE_KEY }}' | |
| - name: Release Please | |
| id: rp | |
| uses: GoogleCloudPlatform/release-please-action@v4.1.3 | |
| with: | |
| token: '${{ steps.generate-token.outputs.token }}' | |
| build: | |
| name: Build | |
| needs: | |
| - release-please | |
| if: >- | |
| ${{ fromJSON(needs.release-please.outputs.manifest).releases_created == | |
| 'true' }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| platform: | |
| - macos-latest | |
| - windows-latest | |
| - ubuntu-22.04 | |
| runs-on: '${{ matrix.platform }}' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Rust setup (mac) | |
| if: 'startsWith(matrix.platform, ''macos'')' | |
| uses: dtolnay/rust-toolchain@stable | |
| with: | |
| components: 'rustfmt, clippy' | |
| targets: 'aarch64-apple-darwin, x86_64-apple-darwin' | |
| - name: Rust setup | |
| if: '!startsWith(matrix.platform, ''macos'')' | |
| uses: dtolnay/rust-toolchain@stable | |
| with: | |
| components: 'rustfmt, clippy' | |
| - name: Setup rust cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| target/** | |
| !target/*/release/bundle/*/*.dmg | |
| !target/*/release/bundle/*/*.app.tar.gz | |
| !target/*/release/bundle/*/*.app.tar.gz.sig | |
| !target/release/bundle/*/*.dmg | |
| !target/release/bundle/*/*.app.tar.gz | |
| !target/release/bundle/*/*.app.tar.gz.sig | |
| !target/release/bundle/appimage/*.AppImage | |
| !target/release/bundle/appimage/*.AppImage.tar.gz | |
| !target/release/bundle/appimage/*.AppImage.tar.gz.sig | |
| !target/release/bundle/deb/*.deb | |
| !target/release/bundle/rpm/*.rpm | |
| !target/release/bundle/msi/*.msi | |
| !target/release/bundle/msi/*.msi.zip | |
| !target/release/bundle/msi/*.msi.zip.sig | |
| !target/release/bundle/nsis/*.exe | |
| !target/release/bundle/nsis/*.nsis.zip | |
| !target/release/bundle/nsis/*.nsis.zip.sig | |
| key: '${{ runner.os }}-rust-target-${{ hashFiles(''**/Cargo.lock'') }}' | |
| restore-keys: | | |
| ${{ runner.os }}-rust-target- | |
| - name: Use Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - name: Install pnpm via corepack | |
| shell: bash | |
| run: | | |
| corepack enable | |
| corepack prepare --activate | |
| - name: Get pnpm store directory | |
| id: pnpm-cache | |
| shell: bash | |
| run: | | |
| echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT | |
| - name: Setup pnpm cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: '${{ steps.pnpm-cache.outputs.STORE_PATH }}' | |
| key: '${{ runner.os }}-pnpm-store-${{ hashFiles(''**/pnpm-lock.yaml'') }}' | |
| restore-keys: | | |
| ${{ runner.os }}-pnpm-store- | |
| - name: install dependencies (ubuntu only) | |
| if: 'startsWith(matrix.platform, ''ubuntu'')' | |
| run: > | |
| sudo apt-get update | |
| sudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl | |
| wget file libxdo-dev libssl-dev pkg-config | |
| libayatana-appindicator3-dev librsvg2-dev | |
| - name: Install frontend dependencies | |
| run: pnpm install | |
| - name: build app (macos) | |
| run: >- | |
| pnpm --filter=@modrinth/app run tauri build --target | |
| universal-apple-darwin --config "tauri-release.conf.json" | |
| if: 'startsWith(matrix.platform, ''macos'')' | |
| env: | |
| GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}' | |
| ENABLE_CODE_SIGNING: '${{ secrets.CSC_LINK }}' | |
| APPLE_CERTIFICATE: '${{ secrets.CSC_LINK }}' | |
| APPLE_CERTIFICATE_PASSWORD: '${{ secrets.CSC_KEY_PASSWORD }}' | |
| APPLE_SIGNING_IDENTITY: '${{ secrets.APPLE_SIGNING_IDENTITY }}' | |
| APPLE_ID: '${{ secrets.APPLE_ID }}' | |
| APPLE_TEAM_ID: '${{ secrets.APPLE_TEAM_ID }}' | |
| APPLE_PASSWORD: '${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}' | |
| TAURI_SIGNING_PRIVATE_KEY: '${{ secrets.TAURI_PRIVATE_KEY }}' | |
| TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '${{ secrets.TAURI_KEY_PASSWORD }}' | |
| - name: build app | |
| run: >- | |
| pnpm --filter=@modrinth/app run tauri build --config | |
| "tauri-release.conf.json" | |
| id: build_os | |
| if: '!startsWith(matrix.platform, ''macos'')' | |
| env: | |
| GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}' | |
| TAURI_SIGNING_PRIVATE_KEY: '${{ secrets.TAURI_PRIVATE_KEY }}' | |
| TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '${{ secrets.TAURI_KEY_PASSWORD }}' | |
| - name: Sign files with Trusted Signing | |
| if: 'startsWith(matrix.platform, ''windows'')' | |
| uses: azure/trusted-signing-action@v0.5.1 | |
| with: | |
| azure-tenant-id: '${{ secrets.AZURE_TENANT_ID }}' | |
| azure-client-id: '${{ secrets.AZURE_CLIENT_ID }}' | |
| azure-client-secret: '${{ secrets.AZURE_CLIENT_SECRET }}' | |
| endpoint: 'https://weu.codesigning.azure.net/' | |
| trusted-signing-account-name: marcusklauncher | |
| certificate-profile-name: MarcuskStudioLauncher | |
| files-folder: '${{ github.workspace }}\target\release\bundle' | |
| files-folder-filter: 'msi,exe' | |
| files-folder-recurse: true | |
| file-digest: SHA256 | |
| timestamp-rfc3161: 'http://timestamp.acs.microsoft.com' | |
| timestamp-digest: SHA256 | |
| - name: 'upload ${{ matrix.platform }}' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: '${{ matrix.platform }}' | |
| path: | | |
| target/*/release/bundle/*/*.dmg | |
| target/*/release/bundle/*/*.app.tar.gz | |
| target/*/release/bundle/*/*.app.tar.gz.sig | |
| target/release/bundle/*/*.dmg | |
| target/release/bundle/*/*.app.tar.gz | |
| target/release/bundle/*/*.app.tar.gz.sig | |
| target/release/bundle/*/*.AppImage | |
| target/release/bundle/*/*.AppImage.tar.gz | |
| target/release/bundle/*/*.AppImage.tar.gz.sig | |
| target/release/bundle/*/*.deb | |
| target/release/bundle/*/*.rpm | |
| target/release/bundle/msi/*.msi | |
| target/release/bundle/msi/*.msi.zip | |
| target/release/bundle/msi/*.msi.zip.sig | |
| target/release/bundle/nsis/*.exe | |
| target/release/bundle/nsis/*.nsis.zip | |
| target/release/bundle/nsis/*.nsis.zip.sig | |
| upload-s3: | |
| needs: build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Get version from manifest | |
| id: get_version | |
| run: | | |
| version=$(jq -r '.apps' .release-please-manifest.json) | |
| echo "version=$version" >> $GITHUB_OUTPUT | |
| - name: Download all artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| path: artifacts | |
| - name: Print directory structure | |
| run: ls -R artifacts | |
| - name: Generate update manifest | |
| id: generate_manifest | |
| env: | |
| DOWNLOAD_URL_BASE: 'https://cdn.marcuskstudio.live' | |
| VERSION: '${{ steps.get_version.outputs.version }}' | |
| run: > | |
| # Read signatures into variables | |
| DARWIN_SIGNATURE=$(cat | |
| artifacts/macos-latest/universal-apple-darwin/release/bundle/macos/*.app.tar.gz.sig) | |
| LINUX_SIGNATURE=$(cat | |
| artifacts/ubuntu-22.04/release/bundle/appimage/*.AppImage.tar.gz.sig) | |
| WINDOWS_SIGNATURE=$(cat | |
| "artifacts/windows-latest/release/bundle/nsis/MARCUSK | |
| Launcher_${VERSION}_x64-setup.nsis.zip.sig") | |
| # Generate JSON file | |
| cat > update-manifest.json <<EOF | |
| { | |
| "version": "${VERSION}", | |
| "notes": "A new version of the MARCUSK Launcher is out!", | |
| "pub_date": "$(date -u +"%Y-%m-%dT%H:%M:%SZ")", | |
| "platforms": { | |
| "darwin-x86_64": { | |
| "signature": "${DARWIN_SIGNATURE}", | |
| "url": "${DOWNLOAD_URL_BASE}/releases/${VERSION}/macos-latest/universal-apple-darwin/release/bundle/macos/MARCUSK%20Launcher.app.tar.gz", | |
| "install_urls": [ | |
| "${DOWNLOAD_URL_BASE}/releases/${VERSION}/macos-latest/universal-apple-darwin/release/bundle/dmg/MARCUSK%20Launcher_${VERSION}_universal.dmg" | |
| ] | |
| }, | |
| "darwin-aarch64": { | |
| "signature": "${DARWIN_SIGNATURE}", | |
| "url": "${DOWNLOAD_URL_BASE}/releases/${VERSION}/macos-latest/universal-apple-darwin/release/bundle/macos/MARCUSK%20Launcher.app.tar.gz", | |
| "install_urls": [ | |
| "${DOWNLOAD_URL_BASE}/releases/${VERSION}/macos-latest/universal-apple-darwin/release/bundle/macos/MARCUSK%20Launcher.app.tar.gz" | |
| ] | |
| }, | |
| "linux-x86_64": { | |
| "signature": "${LINUX_SIGNATURE}", | |
| "url": "${DOWNLOAD_URL_BASE}/releases/${VERSION}/ubuntu-22.04/release/bundle/appimage/MARCUSK%20Launcher_${VERSION}_amd64.AppImage.tar.gz", | |
| "install_urls": [ | |
| "${DOWNLOAD_URL_BASE}/releases/${VERSION}/ubuntu-22.04/release/bundle/deb/MARCUSK%20Launcher_${VERSION}_amd64.deb", | |
| "${DOWNLOAD_URL_BASE}/releases/${VERSION}/ubuntu-22.04/release/bundle/appimage/MARCUSK%20Launcher_${VERSION}_amd64.AppImage", | |
| "${DOWNLOAD_URL_BASE}/releases/${VERSION}/ubuntu-22.04/release/bundle/rpm/MARCUSK%20Launcher-${VERSION}-1.x86_64.rpm" | |
| ] | |
| }, | |
| "windows-x86_64": { | |
| "signature": "${WINDOWS_SIGNATURE}", | |
| "url": "${DOWNLOAD_URL_BASE}/releases/${VERSION}/windows-latest/release/bundle/nsis/MARCUSK%20Launcher_${VERSION}_x64-setup.nsis.zip", | |
| "install_urls": [ | |
| "${DOWNLOAD_URL_BASE}/releases/${VERSION}/windows-latest/release/bundle/nsis/MARCUSK%20Launcher_${VERSION}_x64-setup.exe" | |
| ] | |
| } | |
| } | |
| } | |
| EOF | |
| - name: Upload artifacts to R2 | |
| uses: ryand56/r2-upload-action@latest | |
| with: | |
| r2-account-id: '${{ secrets.CLOUDFLARE_ACCOUNT_ID }}' | |
| r2-access-key-id: '${{ secrets.CLOUDFLARE_R2_ACCESS_KEY_ID }}' | |
| r2-secret-access-key: '${{ secrets.CLOUDFLARE_R2_SECRET_ACCESS_KEY }}' | |
| r2-bucket: launcherbinaries | |
| destination-dir: 'releases/${{ steps.get_version.outputs.version }}' | |
| source-dir: artifacts | |
| keep-file-fresh: true | |
| - name: Upload update manifest to R2 | |
| uses: ryand56/r2-upload-action@latest | |
| with: | |
| r2-account-id: '${{ secrets.CLOUDFLARE_ACCOUNT_ID }}' | |
| r2-access-key-id: '${{ secrets.CLOUDFLARE_R2_ACCESS_KEY_ID }}' | |
| r2-secret-access-key: '${{ secrets.CLOUDFLARE_R2_SECRET_ACCESS_KEY }}' | |
| r2-bucket: launcherbinaries | |
| source-dir: update-manifest.json | |
| destination-dir: ./ | |
| keep-file-fresh: true |