fix: Release workflow ⚓ #148
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: goreleaser | |
| on: | |
| push: | |
| tags: | |
| # This is not a real version tag, its just used to trigger | |
| # the release build. Glob pattern: | |
| - "prepare-v[0-9]+.[0-9]+.[0-9]+*" | |
| jobs: | |
| goreleaser: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Fetch annotated tags | |
| run: | | |
| git fetch origin --force "$GITHUB_REF:$GITHUB_REF" | |
| - name: Set up Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: "1.20" | |
| - name: Import GPG Key | |
| id: import_gpg | |
| uses: crazy-max/ghaction-import-gpg@v3 | |
| with: | |
| gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} | |
| passphrase: ${{ secrets.PASSPHRASE }} | |
| - name: Store Git Tag | |
| id: "getTag" | |
| run: | | |
| echo "releaseTag=${GITHUB_REF##*prepare-}" >> $GITHUB_OUTPUT | |
| echo "triggerTag=${GITHUB_REF##*/}" >> $GITHUB_OUTPUT | |
| - name: "Tag release commit" | |
| env: | |
| RELEASE_TAG: ${{ steps.getTag.outputs.releaseTag }} | |
| TRIGGER_TAG: ${{ steps.getTag.outputs.triggerTag }} | |
| run: | | |
| git config user.name 'githooks-bot' | |
| git config user.email '[email protected]' | |
| # Check we got an annotated tag. | |
| [ "$(git cat-file -t "$TRIGGER_TAG")" = "tag" ] || { | |
| echo "Tag '$TRIGGER_TAG' is not an annotated tag." | |
| exit 1 | |
| } | |
| # Gets the message on the annotated commit: | |
| deref() { git for-each-ref "refs/tags/$TRIGGER_TAG" --format="%($1)" ; }; | |
| # Creates a new tag with the same message, including trailing headers. | |
| git tag -a -m "$(deref contents)" "$RELEASE_TAG" | |
| git tag "githooks/$RELEASE_TAG" | |
| - name: Define Release Branch | |
| id: releaseBranch | |
| env: | |
| RELEASE_TAG: ${{ steps.getTag.outputs.releaseTag }} | |
| run: | | |
| # If we specify another branch we are checking this one, | |
| RELEASE_BRANCH="main" | |
| RELEASE_VERSION="${RELEASE_TAG##v}" | |
| echo "Get release branch on tag '$RELEASE_TAG'." | |
| # Gets the message on the annotated commit: | |
| deref() { | |
| git for-each-ref "refs/tags/$RELEASE_TAG" --format="%($1)" ; | |
| }; | |
| deref contents | |
| regex="^Release-Branch:\s+(.*)$" | |
| if deref contents | grep -qE "$regex"; then | |
| RELEASE_BRANCH=$(deref contents | grep -E "$regex" | | |
| sed -E "s/$regex/\1/") || { | |
| echo "Release-Branch trailer is wrong." | |
| exit 1 | |
| } | |
| [ -n "$RELEASE_BRANCH" ] || { | |
| echo "Release-Branch trailer is empty." | |
| exit 1 | |
| } | |
| fi | |
| # Fetch the branch. | |
| git fetch --depth 50 origin "$RELEASE_BRANCH" | |
| # Check if its reachable. | |
| [ -n "$(git rev-list --first-parent \ | |
| --ancestry-path \ | |
| "$RELEASE_TAG^..origin/$RELEASE_BRANCH")" ] || { | |
| echo "Tag is not reachable from '$RELEASE_BRANCH' (--first-parent) !" >&2 | |
| exit 1 | |
| } | |
| # Use only a small release config | |
| # when not on `main` branch. | |
| if [ "$RELEASE_BRANCH" != "main" ]; then | |
| echo "Writing release note" | |
| RELEASE_NOTES=$(mktemp) | |
| echo "**WARNING: Do not install this version! For internal testing only.**" >>"$RELEASE_NOTES" | |
| fi | |
| echo "releaseVersion=$RELEASE_VERSION" >> $GITHUB_OUTPUT | |
| echo "releaseBranch=$RELEASE_BRANCH" >> $GITHUB_OUTPUT | |
| - name: Run GoReleaser | |
| if: ${{ steps.releaseBranch.outputs.releaseBranch == 'main' }} | |
| uses: goreleaser/goreleaser-action@v5 | |
| with: | |
| version: latest | |
| workdir: githooks | |
| args: "release --clean" | |
| env: | |
| GORELEASER_CURRENT_TAG: ${{ steps.getTag.outputs.releaseTag }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }} | |
| - name: Run GoReleaser (non-main) | |
| if: ${{ steps.releaseBranch.outputs.releaseBranch != 'main' }} | |
| uses: goreleaser/goreleaser-action@v5 | |
| with: | |
| version: latest | |
| workdir: githooks | |
| args: "release --clean -f .goreleaser-small.yaml --release-notes githooks/.release-notes.md" | |
| env: | |
| GORELEASER_CURRENT_TAG: ${{ steps.getTag.outputs.releaseTag }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }} | |
| - name: "Push release tags and delete trigger tag" | |
| env: | |
| RELEASE_TAG: ${{ steps.getTag.outputs.releaseTag }} | |
| TRIGGER_TAG: ${{ steps.getTag.outputs.triggerTag }} | |
| run: | | |
| # go releaser already pushed release tag | |
| git push origin "githooks/$RELEASE_TAG" | |
| git push -f origin ":$TRIGGER_TAG" |