86 lines
2.7 KiB
YAML
86 lines
2.7 KiB
YAML
name: Release
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
version:
|
|
description: Version from MARKETING_VERSION, without the v prefix
|
|
required: true
|
|
type: string
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: meetingnotes-release
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: macos-15
|
|
env:
|
|
VERSION: ${{ inputs.version }}
|
|
APPLE_ID: ${{ secrets.APPLE_ID }}
|
|
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
|
|
APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }}
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Validate release secrets
|
|
env:
|
|
APPLE_CERTIFICATE_P12: ${{ secrets.APPLE_CERTIFICATE_P12 }}
|
|
APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
|
|
run: |
|
|
for variable in APPLE_CERTIFICATE_P12 APPLE_CERTIFICATE_PASSWORD APPLE_ID APPLE_TEAM_ID APPLE_APP_PASSWORD; do
|
|
if [[ -z "${!variable:-}" ]]; then
|
|
echo "Missing GitHub Actions secret: $variable" >&2
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
- name: Import Developer ID certificate
|
|
uses: apple-actions/import-codesign-certs@v7
|
|
with:
|
|
p12-file-base64: ${{ secrets.APPLE_CERTIFICATE_P12 }}
|
|
p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
|
|
|
|
- name: Locate Developer ID identity
|
|
run: |
|
|
signing_identity=$(security find-identity -v -p codesigning | awk -F '"' '/Developer ID Application/{print $2; exit}')
|
|
if [[ -z "$signing_identity" ]]; then
|
|
echo "The .p12 does not contain a Developer ID Application identity" >&2
|
|
exit 1
|
|
fi
|
|
echo "SIGNING_IDENTITY=$signing_identity" >> "$GITHUB_ENV"
|
|
|
|
- name: Build, sign, and submit for notarization
|
|
timeout-minutes: 30
|
|
run: scripts/package_release.sh
|
|
|
|
- name: Preserve signed build while Apple processes it
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: meetingnotes-notarization-${{ github.run_id }}
|
|
path: ${{ runner.temp }}/meetingnotes-release/pending
|
|
if-no-files-found: error
|
|
retention-days: 30
|
|
|
|
- name: Create GitHub release
|
|
if: ${{ false }}
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
run: |
|
|
tag="v$VERSION"
|
|
if git rev-parse "$tag" >/dev/null 2>&1; then
|
|
echo "Tag already exists: $tag" >&2
|
|
exit 1
|
|
fi
|
|
gh release create "$tag" \
|
|
"$RUNNER_TEMP/meetingnotes-release/release/Meetingnotes-$VERSION.zip" \
|
|
"$RUNNER_TEMP/meetingnotes-release/release/appcast.xml" \
|
|
--target "$GITHUB_SHA" \
|
|
--title "Meetingnotes $VERSION" \
|
|
--generate-notes
|