-
-
Notifications
You must be signed in to change notification settings - Fork 1
215 lines (197 loc) · 7.85 KB
/
release.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
name: Release
on:
push:
tags:
- 'v*.*'
permissions:
contents: write
jobs:
build-linux:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
lfs: true
- name: Set up Go
uses: actions/setup-go@v5
with:
go-version: 1.22
- name: Install fyne-cross
run: go install github.com/fyne-io/fyne-cross@latest
- name: Cross-compile for Linux
run: fyne-cross linux
- name: Upload Linux artifact
uses: actions/upload-artifact@v4
with:
name: linux-build
path: fyne-cross/bin/linux-amd64
build-windows:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
lfs: true
- name: Set up Go
uses: actions/setup-go@v5
with:
go-version: 1.22
- name: Install fyne-cross
run: go install github.com/fyne-io/fyne-cross@latest
- name: Cross-compile for Windows
run: fyne-cross windows
- name: Upload Windows artifact
uses: actions/upload-artifact@v4
with:
name: windows-build
path: fyne-cross/bin/windows-amd64
build-mac:
runs-on: macos-latest
env:
APPLE_ID: ${{ secrets.APPLE_ID }}
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
steps:
- uses: actions/checkout@v4
with:
lfs: true
- name: Set up Go
uses: actions/setup-go@v5
with:
go-version: 1.22
- name: Compile for MacOS
run: |
GOOS=darwin GOARCH=arm64 go build -o SoundscapeSync_arm64
CGO_ENABLED=1 GOOS=darwin GOARCH=amd64 go build -o SoundscapeSync_amd64
lipo -create -output SoundscapeSync SoundscapeSync_amd64 SoundscapeSync_arm64
mkdir -p SoundscapeSync.app/Contents/MacOS
mv SoundscapeSync SoundscapeSync.app/Contents/MacOS/SoundscapeSync
echo '<?xml version="1.0" encoding="UTF-8"?>' > SoundscapeSync.app/Contents/Info.plist
echo '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">' >> SoundscapeSync.app/Contents/Info.plist
echo '<plist version="1.0">' >> SoundscapeSync.app/Contents/Info.plist
echo '<dict>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <key>CFBundleName</key>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <string>SoundscapeSync</string>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <key>CFBundleVersion</key>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <string>1.0</string>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <key>CFBundleIdentifier</key>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <string>com.cloonar.soundscape-sync</string>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <key>Executable</key>' >> SoundscapeSync.app/Contents/Info.plist
echo ' <string>SoundscapeSync</string>' >> SoundscapeSync.app/Contents/Info.plist
echo '</dict>' >> SoundscapeSync.app/Contents/Info.plist
echo '</plist>' >> SoundscapeSync.app/Contents/Info.plist
chmod +x SoundscapeSync.app/Contents/MacOS/SoundscapeSync
- name: Install certificate
if: ${{ env.APPLE_ID != '' && env.APPLE_TEAM_ID != '' && env.APPLE_PASSWORD != '' }}
env:
MAC_CERT_P12: ${{ secrets.MAC_CERT_P12 }}
MAC_CERT_P12_PASSWORD: ${{ secrets.MAC_CERT_P12_PASSWORD }}
run: |
mkdir -p ~/certs
echo "$MAC_CERT_P12" | base64 --decode > ~/certs/mac_dev_cert.p12
security create-keychain -p "" build.keychain
security import ~/certs/mac_dev_cert.p12 -k build.keychain -P "$MAC_CERT_P12_PASSWORD" -A
security set-key-partition-list -S apple-tool:,apple: -s -k "" build.keychain
security default-keychain -s build.keychain
security unlock-keychain -p "" build.keychain
- name: Sign App
if: ${{ env.APPLE_ID != '' && env.APPLE_TEAM_ID != '' && env.APPLE_PASSWORD != '' }}
env:
MAC_CERT_NAME: ${{ secrets.MAC_CERT_NAME }}
run: |
codesign --deep --force --options runtime --sign "$MAC_CERT_NAME" SoundscapeSync.app
- name: Verify signature
if: ${{ env.APPLE_ID != '' && env.APPLE_TEAM_ID != '' && env.APPLE_PASSWORD != '' }}
run: codesign --verify --deep --strict --verbose=2 SoundscapeSync.app
- name: Zip macOS build
run: zip -r SoundscapeSync.app.zip SoundscapeSync.app
- name: Notarize App
if: ${{ env.APPLE_ID != '' && env.APPLE_TEAM_ID != '' && env.APPLE_PASSWORD != '' }}
run: |
xcrun notarytool submit SoundscapeSync.app.zip \
--apple-id "$APPLE_ID" \
--team-id "$APPLE_TEAM_ID" \
--password "$APPLE_PASSWORD" \
--wait
- name: Staple Notarization
if: ${{ env.APPLE_ID != '' && env.APPLE_TEAM_ID != '' && env.APPLE_PASSWORD != '' }}
run: xcrun stapler staple SoundscapeSync.app
- name: Re-zip macOS build
if: ${{ env.APPLE_ID != '' && env.APPLE_TEAM_ID != '' && env.APPLE_PASSWORD != '' }}
run: zip -r SoundscapeSync.app.zip SoundscapeSync.app
- name: Upload macOS artifact
uses: actions/upload-artifact@v4
with:
name: macos-build
path: SoundscapeSync.app.zip
create-release:
runs-on: ubuntu-latest
needs: [build-linux, build-windows, build-mac]
steps:
- name: Generate Changelog
id: changelog
uses: requarks/changelog-action@v1
with:
token: ${{ secrets.GITHUB_TOKEN }}
tag: ${{ github.ref_name }}
- name: Create Release
id: create_release
uses: actions/create-release@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
tag_name: ${{ github.ref_name }}
release_name: Release ${{ github.ref_name }}
body: ${{ steps.changelog.outputs.changes }}
draft: false
prerelease: true
- uses: actions/download-artifact@v4
with:
name: linux-build
- name: Upload Linux Asset
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ steps.create_release.outputs.upload_url }}
asset_path: soundscape-sync
asset_name: soundscape-sync-linux-x86
asset_content_type: application/octet-stream
- uses: actions/download-artifact@v4
with:
name: windows-build
- name: Upload Windows Asset
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ steps.create_release.outputs.upload_url }}
asset_path: SoundscapeSync.exe
asset_name: SoundscapeSync.exe
asset_content_type: application/x-msdownload
- uses: actions/download-artifact@v4
with:
name: macos-build
- name: Upload MacOS Asset
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ steps.create_release.outputs.upload_url }}
asset_path: SoundscapeSync.app.zip
asset_name: MacOS.zip
asset_content_type: application/zip
- name: Generate checksum
uses: jmgilman/actions-generate-checksum@v1
with:
patterns: |
SoundscapeSync.exe
SoundscapeSync.app.zip
- name: Upload checksum
uses: actions/upload-release-asset@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ steps.create_release.outputs.upload_url }}
asset_path: checksum.txt
asset_name: checksum.txt
asset_content_type: text/plain