Openssl not vendored #127
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # When a tag is push on the repo, this workflow will run to create a release and add some artifact to it. | |
| name: Releaser | |
| on: | |
| pull_request: | |
| paths: | |
| - .github/workflows/package-server.yml | |
| - .github/workflows/releaser.yml | |
| push: | |
| tags: | |
| - v[0-9]+.[0-9]+.[0-9]+* | |
| permissions: | |
| contents: write | |
| # We set `concurrency` to prevent having this workflow being more than once for the same tag. | |
| concurrency: | |
| group: releaser-${{ github.workflow }}-${{ github.ref_name }} | |
| cancel-in-progress: true | |
| jobs: | |
| version: | |
| runs-on: ubuntu-22.04 | |
| outputs: | |
| full: ${{ steps.version.outputs.full }} | |
| pep440: ${{ steps.version.outputs.pep440 }} | |
| major: ${{ steps.version.outputs.major }} | |
| minor: ${{ steps.version.outputs.minor }} | |
| patch: ${{ steps.version.outputs.patch }} | |
| prerelease: ${{ steps.version.outputs.prerelease }} | |
| dev: ${{ steps.version.outputs.dev }} | |
| local: ${{ steps.version.outputs.local }} | |
| steps: | |
| - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # pin v4.0.0 | |
| timeout-minutes: 5 | |
| - name: Parse version for event ${{ github.event_name }} | |
| id: version | |
| run: | | |
| set -o pipefail | |
| function parse_version { | |
| PYTHONPATH=. python3 misc/releaser.py version "$@" | |
| } | |
| case "${{ github.event_name }}" in | |
| push) | |
| echo "Triggered by a Push" | |
| parse_version "${{ github.ref_name }}" | tee -a $GITHUB_OUTPUT | |
| ;; | |
| workflow_dispatch) | |
| # If workflow dispatch trigger from a tag, we use the tag as a version else we behave like pull_request | |
| TAG="${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || '' }}" | |
| # If TAG isn't empty use it. | |
| if [ -n $TAG ]; then | |
| parse_version $TAG | tee -a $GITHUB_OUTPUT | |
| else | |
| parse_version --uniq-dev | tee -a $GITHUB_OUTPUT | |
| fi | |
| ;; | |
| pull_request) | |
| echo "Triggered by a Pull-Request" | |
| parse_version --uniq-dev | tee -a $GITHUB_OUTPUT | |
| ;; | |
| *) | |
| echo "Unsupported event type ${{ github.event_name }}" >&2 | |
| exit 1 | |
| ;; | |
| esac | |
| package-parsec-server: | |
| needs: | |
| - version | |
| uses: ./.github/workflows/package-server.yml | |
| with: | |
| version: ${{ needs.version.outputs.full }} | |
| releaser: | |
| needs: | |
| - version | |
| - package-parsec-server | |
| name: 🚛 Releaser | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: Download every artifact generated (and uploaded) | |
| uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # pin v3.0.2 | |
| with: | |
| path: artifacts | |
| timeout-minutes: 5 | |
| - name: List downloaded artifacts | |
| run: tree artifacts | |
| - name: Create the folder that will contain the release files | |
| run: mkdir release-files | |
| - name: Copy python wheels | |
| run: | | |
| set -ex | |
| cp -v artifacts/Linux-X64-wheel/parsec_cloud-${{ needs.version.outputs.pep440 }}-*.whl release-files | |
| cp -v artifacts/macOS-X64-wheel/parsec_cloud-${{ needs.version.outputs.pep440 }}-*.whl release-files | |
| cp -v artifacts/Windows-X64-wheel/parsec_cloud-${{ needs.version.outputs.pep440 }}-*.whl release-files | |
| env: | |
| BASH_XTRACEFD: 1 | |
| - name: Copy SBOM files | |
| run: cp -v artifacts/**/Parsec-SBOM-*.spdx.json release-files | |
| - name: Generate version file | |
| run: | |
| ( | |
| echo "full=${{ needs.version.outputs.full }}"; | |
| echo "pep440=${{ needs.version.outputs.pep440 }}"; | |
| echo "major=${{ needs.version.outputs.major }}"; | |
| echo "minor=${{ needs.version.outputs.minor }}"; | |
| echo "patch=${{ needs.version.outputs.patch }}"; | |
| echo "prerelease=${{ needs.version.outputs.prerelease }}"; | |
| echo "dev=${{ needs.version.outputs.dev }}"; | |
| echo "local=${{ needs.version.outputs.local }}"; | |
| ) | tee release-files/version | |
| - name: Generate checksums file released files | |
| run: sha256sum release-files/* | sed 's;release-files/;;' | tee checksums.sha256 | |
| - name: Extract checksum for each file | |
| run: | | |
| set -x | |
| # Every files that don't end with '.sha256' | |
| for file in $(find release-files -not -name '*.sha256'); do | |
| grep $(basename $file) checksums.sha256 | cut -d ' ' -f 1 > "$file".sha256 | |
| done | |
| - name: List files in 'release-files'. | |
| run: tree release-files | |
| - name: Generate summary | |
| id: summary | |
| run: | | |
| EOF="EOF-$(dd if=/dev/urandom bs=15 count=1 status=none | base64)" | |
| ( | |
| set -e | |
| echo "output<<$EOF" | |
| echo '# Parsec ${{ needs.version.outputs.full }}' | |
| echo | |
| echo 'You can find all assets checksums below, or use `<asset name>.sha256`' | |
| echo | |
| echo '```txt' | |
| cat checksums.sha256 | |
| echo '```' | |
| echo | |
| echo 'Generated by <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}>' | |
| echo "$EOF" | |
| ) | tee -a $GITHUB_OUTPUT | |
| - name: Create release | |
| if: github.event_name == 'push' | |
| # FIXME: rollback to `softprops/action-gh-release` once the issue <https://github.com/softprops/action-gh-release/issues/362> is fixed. | |
| uses: FirelightFlagboy/action-gh-release@58fed080aaa4be111f1b7c31013ceeb8d68e0172 | |
| with: | |
| draft: true | |
| body: ${{ steps.summary.outputs.output }} | |
| prerelease: ${{ needs.version.outputs.prerelease != '' || needs.version.outputs.dev != '' || needs.version.outputs.local != '' }} | |
| name: Release v${{ needs.version.outputs.full }} | |
| tag_name: v${{ needs.version.outputs.full }} | |
| files: | | |
| release-files/parsec_cloud-${{ needs.version.outputs.pep440 }}-*.whl | |
| release-files/parsec_cloud-${{ needs.version.outputs.pep440 }}-*.whl.sha256 | |
| release-files/parsec_v${{ needs.version.outputs.full }}_*.snap | |
| release-files/parsec_v${{ needs.version.outputs.full }}_*.snap.sha256 | |
| release-files/parsec-unsigned-v${{ needs.version.outputs.full }}-raw-windows-installer.zip | |
| release-files/parsec-unsigned-v${{ needs.version.outputs.full }}-raw-windows-installer.zip.sha256 | |
| release-files/parsec-unsigned-v${{ needs.version.outputs.full }}-macos-*.tar.bz2 | |
| release-files/parsec-unsigned-v${{ needs.version.outputs.full }}-macos-*.tar.bz2.sha256 | |
| release-files/Parsec-SBOM-Wheel-linux.spdx.json | |
| release-files/Parsec-SBOM-Wheel-linux.spdx.json.sha256 | |
| release-files/Parsec-SBOM-Wheel-windows.spdx.json | |
| release-files/Parsec-SBOM-Wheel-windows.spdx.json.sha256 | |
| release-files/Parsec-SBOM-Wheel-macos.spdx.json | |
| release-files/Parsec-SBOM-Wheel-macos.spdx.json.sha256 | |
| release-files/Parsec-SBOM-Electron-linux.spdx.json | |
| release-files/Parsec-SBOM-Electron-linux.spdx.json.sha256 | |
| release-files/Parsec-SBOM-Electron-windows.spdx.json | |
| release-files/Parsec-SBOM-Electron-windows.spdx.json.sha256 | |
| release-files/Parsec-SBOM-Electron-macos.spdx.json | |
| release-files/Parsec-SBOM-Electron-macos.spdx.json.sha256 | |
| release-files/Parsec-SBOM-Web.spdx.json | |
| release-files/Parsec-SBOM-Web.spdx.json.sha256 | |
| release-files/version | |
| release-files/version.sha256 | |
| fail_on_unmatched_files: true | |
| generate_release_notes: false | |
| timeout-minutes: 5 |