mirror of
https://github.com/Llewellynvdm/starship.git
synced 2024-11-24 21:57:41 +00:00
ci: update deployment actions to depend on release-please
This commit is contained in:
Matan Kushner
parent
23be606516
commit
9804031d9b
126
.github/workflows/deploy.yml
vendored
126
.github/workflows/deploy.yml
vendored
@ -29,7 +29,7 @@ jobs:
|
|||||||
github_build:
|
github_build:
|
||||||
name: Build release binaries
|
name: Build release binaries
|
||||||
needs: release_please
|
needs: release_please
|
||||||
if: ${{ needs.release_please.outputs.release_created }}
|
if: ${{ needs.release_please.outputs.release_created == 'true' }}
|
||||||
strategy:
|
strategy:
|
||||||
fail-fast: false
|
fail-fast: false
|
||||||
matrix:
|
matrix:
|
||||||
@ -144,77 +144,77 @@ jobs:
|
|||||||
KEYCHAIN_FILENAME: app-signing.keychain-db
|
KEYCHAIN_FILENAME: app-signing.keychain-db
|
||||||
KEYCHAIN_ENTRY: AC_PASSWORD
|
KEYCHAIN_ENTRY: AC_PASSWORD
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
- name: Notarize | Set up secrets
|
- name: Notarize | Set up secrets
|
||||||
env:
|
env:
|
||||||
APP_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_APPSIGNKEY_BASE64 }}
|
APP_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_APPSIGNKEY_BASE64 }}
|
||||||
INSTALL_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_INSTALLERSIGNKEY_BASE64 }}
|
INSTALL_CERTIFICATE_BASE64: ${{ secrets.APPLEDEV_INSTALLERSIGNKEY_BASE64 }}
|
||||||
P12_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }}
|
P12_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }}
|
||||||
KEYCHAIN_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }}
|
KEYCHAIN_PASSWORD: ${{ secrets.APPLEDEV_SIGNKEY_PASS }}
|
||||||
APPLEID_USERNAME: ${{ secrets.APPLEDEV_ID_NAME }}
|
APPLEID_USERNAME: ${{ secrets.APPLEDEV_ID_NAME }}
|
||||||
APPLEID_TEAMID: ${{ secrets.APPLEDEV_TEAM_ID }}
|
APPLEID_TEAMID: ${{ secrets.APPLEDEV_TEAM_ID }}
|
||||||
APPLEID_PASSWORD: ${{ secrets.APPLEDEV_PASSWORD }}
|
APPLEID_PASSWORD: ${{ secrets.APPLEDEV_PASSWORD }}
|
||||||
run: |
|
run: |
|
||||||
APP_CERTIFICATE_PATH="$RUNNER_TEMP/app_certificate.p12"
|
APP_CERTIFICATE_PATH="$RUNNER_TEMP/app_certificate.p12"
|
||||||
INSTALL_CERTIFICATE_PATH="$RUNNER_TEMP/install_certificate.p12"
|
INSTALL_CERTIFICATE_PATH="$RUNNER_TEMP/install_certificate.p12"
|
||||||
KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME"
|
KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME"
|
||||||
|
|
||||||
# import certificates from secrets
|
# import certificates from secrets
|
||||||
echo -n "$APP_CERTIFICATE_BASE64" | base64 --decode --output $APP_CERTIFICATE_PATH
|
echo -n "$APP_CERTIFICATE_BASE64" | base64 --decode --output $APP_CERTIFICATE_PATH
|
||||||
echo -n "$INSTALL_CERTIFICATE_BASE64" | base64 --decode --output $INSTALL_CERTIFICATE_PATH
|
echo -n "$INSTALL_CERTIFICATE_BASE64" | base64 --decode --output $INSTALL_CERTIFICATE_PATH
|
||||||
|
|
||||||
# create temporary keychain
|
# create temporary keychain
|
||||||
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
|
security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
|
||||||
security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
|
security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
|
||||||
security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
|
security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
|
||||||
|
|
||||||
# import certificates to keychain
|
# import certificates to keychain
|
||||||
security import $APP_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
|
security import $APP_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
|
||||||
security import $INSTALL_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
|
security import $INSTALL_CERTIFICATE_PATH -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
|
||||||
security list-keychain -d user -s $KEYCHAIN_PATH
|
security list-keychain -d user -s $KEYCHAIN_PATH
|
||||||
|
|
||||||
# Add Apple Developer ID credentials to keychain
|
# Add Apple Developer ID credentials to keychain
|
||||||
xcrun notarytool store-credentials "$KEYCHAIN_ENTRY" --team-id "$APPLEID_TEAMID" --apple-id "$APPLEID_USERNAME" --password "$APPLEID_PASSWORD" --keychain "$KEYCHAIN_PATH"
|
xcrun notarytool store-credentials "$KEYCHAIN_ENTRY" --team-id "$APPLEID_TEAMID" --apple-id "$APPLEID_USERNAME" --password "$APPLEID_PASSWORD" --keychain "$KEYCHAIN_PATH"
|
||||||
|
|
||||||
- name: Notarize | Build docs
|
- name: Notarize | Build docs
|
||||||
run: |
|
run: |
|
||||||
cd docs
|
cd docs
|
||||||
npm install
|
npm install
|
||||||
npm run build
|
npm run build
|
||||||
|
|
||||||
- name: Notarize | Download artifacts
|
- name: Notarize | Download artifacts
|
||||||
uses: actions/download-artifact@v3
|
uses: actions/download-artifact@v3
|
||||||
with:
|
with:
|
||||||
name: ${{ matrix.name }}
|
name: ${{ matrix.name }}
|
||||||
path: artifacts
|
path: artifacts
|
||||||
|
|
||||||
- name: Notarize | Unpack Binaries
|
- name: Notarize | Unpack Binaries
|
||||||
run: tar xf artifacts/${{ matrix.name }}
|
run: tar xf artifacts/${{ matrix.name }}
|
||||||
|
|
||||||
- name: Notarize | Build, Sign, and Notarize Pkg
|
- name: Notarize | Build, Sign, and Notarize Pkg
|
||||||
run: bash install/macos_packages/build_and_notarize.sh starship docs ${{ matrix.arch }} ${{ matrix.pkgname }}
|
run: bash install/macos_packages/build_and_notarize.sh starship docs ${{ matrix.arch }} ${{ matrix.pkgname }}
|
||||||
|
|
||||||
- name: Notarize | Upload Notarized Flat Installer
|
- name: Notarize | Upload Notarized Flat Installer
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v3
|
||||||
with:
|
with:
|
||||||
name: ${{ matrix.pkgname }}
|
name: ${{ matrix.pkgname }}
|
||||||
path: ${{ matrix.pkgname }}
|
path: ${{ matrix.pkgname }}
|
||||||
|
|
||||||
- name: Notarize | Package Notarized Binary
|
- name: Notarize | Package Notarized Binary
|
||||||
run: tar czvf ${{ matrix.name }} starship
|
run: tar czvf ${{ matrix.name }} starship
|
||||||
|
|
||||||
- name: Notarize | Upload Notarized Binary
|
- name: Notarize | Upload Notarized Binary
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v3
|
||||||
with:
|
with:
|
||||||
name: ${{ matrix.name }}
|
name: ${{ matrix.name }}
|
||||||
path: ${{ matrix.name }}
|
path: ${{ matrix.name }}
|
||||||
|
|
||||||
- name: Cleanup Secrets
|
- name: Cleanup Secrets
|
||||||
if: ${{ always() }}
|
if: ${{ always() }}
|
||||||
run: |
|
run: |
|
||||||
KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME"
|
KEYCHAIN_PATH="$RUNNER_TEMP/$KEYCHAIN_FILENAME"
|
||||||
security delete-keychain $KEYCHAIN_PATH
|
security delete-keychain $KEYCHAIN_PATH
|
||||||
|
|
||||||
# Create GitHub release with Rust build targets and release notes
|
# Create GitHub release with Rust build targets and release notes
|
||||||
upload_artifacts:
|
upload_artifacts:
|
||||||
@ -244,7 +244,7 @@ jobs:
|
|||||||
name: Publish Cargo Package
|
name: Publish Cargo Package
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: release_please
|
needs: release_please
|
||||||
if: ${{ needs.release_please.outputs.release_created }}
|
if: ${{ needs.release_please.outputs.release_created == 'true' }}
|
||||||
steps:
|
steps:
|
||||||
- name: Setup | Checkout
|
- name: Setup | Checkout
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
@ -263,7 +263,7 @@ jobs:
|
|||||||
name: Update Brew Formula
|
name: Update Brew Formula
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: release_please
|
needs: release_please
|
||||||
if: ${{ needs.release_please.outputs.release_created }}
|
if: ${{ needs.release_please.outputs.release_created == 'true' }}
|
||||||
steps:
|
steps:
|
||||||
- uses: mislav/bump-homebrew-formula-action@v1.16
|
- uses: mislav/bump-homebrew-formula-action@v1.16
|
||||||
with:
|
with:
|
||||||
@ -275,7 +275,7 @@ jobs:
|
|||||||
name: Publish docs to Netlify
|
name: Publish docs to Netlify
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: release_please
|
needs: release_please
|
||||||
if: ${{ needs.release_please.outputs.release_created }}
|
if: ${{ needs.release_please.outputs.release_created == 'true' }}
|
||||||
steps:
|
steps:
|
||||||
- name: Setup | Checkout
|
- name: Setup | Checkout
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user